This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3138362e39362e38302e302f32302d3234203d3e20323632323032.roa
File:                     3138362e39362e38302e302f32302d3234203d3e20323632323032.roa (raw, json)
Hash identifier:          3bItbmy9ZS6aKtg9Fl8z9mQnA1DDBKhg32iyc+qRD1E=
Subject key identifier:   E1:BB:96:E9:4E:A2:9E:69:F8:6F:24:87:FC:52:BA:01:73:C8:C7:86
Certificate issuer:       /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial:       564F6ADCC6D4D2E6EEC95D4A0C9264FA7AEABD84
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3138362e39362e38302e302f32302d3234203d3e20323632323032.roa
Signing time:             Tue 06 Jan 2026 19:33:42 +0000
ROA not before:           Tue 06 Jan 2026 19:28:42 +0000
ROA not after:            Tue 05 Jan 2027 19:33:42 +0000
asID:                     262202
IP address blocks:        186.96.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:6a:dc:c6:d4:d2:e6:ee:c9:5d:4a:0c:92:64:fa:7a:ea:bd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
        Validity
            Not Before: Jan  6 19:28:42 2026 GMT
            Not After : Jan  5 19:33:42 2027 GMT
        Subject: CN=E1BB96E94EA29E69F86F2487FC52BA0173C8C786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:95:6b:2e:50:c1:3c:33:1e:7d:c2:98:33:
                    92:55:5b:14:44:96:99:50:58:0c:2b:3d:24:bb:0f:
                    7d:f7:00:5f:aa:d6:a1:37:c7:0f:e3:8b:3c:b1:13:
                    f3:a7:48:28:dc:c1:36:f9:4e:cd:a9:c0:46:f5:06:
                    00:d2:e0:0a:23:eb:05:22:24:52:c6:d5:1b:ec:28:
                    3e:c5:07:79:a2:3f:2c:db:0e:25:fd:65:2f:83:41:
                    1b:25:f7:91:ba:42:c0:3e:10:b1:79:bd:ef:9f:3e:
                    8a:4b:81:e3:ea:49:e2:45:80:4e:74:73:cd:2b:64:
                    28:9f:ff:b1:f8:6a:a7:b9:78:49:20:42:ac:ab:1f:
                    79:23:30:da:1d:9b:7b:f8:5a:37:76:34:6d:73:ea:
                    1b:e0:b0:0d:61:77:ce:36:14:ba:7f:dd:7a:0a:fa:
                    0f:52:f2:6f:fa:55:db:80:10:18:8a:63:04:36:ed:
                    0f:87:14:f3:c7:db:32:37:2d:f7:1f:97:da:b1:68:
                    6f:f6:6d:a7:63:2d:4f:50:33:53:de:de:2e:d5:3e:
                    2d:46:70:48:ba:3e:d3:b5:3a:26:75:82:91:a5:c9:
                    b7:b4:a8:44:b2:aa:44:91:1a:9a:75:32:47:7a:c0:
                    cb:2e:21:a4:c9:15:a8:62:4e:11:f6:1c:5b:1e:17:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BB:96:E9:4E:A2:9E:69:F8:6F:24:87:FC:52:BA:01:73:C8:C7:86
            X509v3 Authority Key Identifier:
                keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3138362e39362e38302e302f32302d3234203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:b6:f8:d7:e1:37:f0:32:16:29:f3:9b:16:c5:63:df:2a:cc:
         7e:f0:5a:eb:9f:fd:8a:b4:ff:68:06:3e:28:4e:90:7f:66:64:
         dd:d9:bd:91:56:55:1f:02:fb:49:fb:24:34:23:b8:b3:6e:fd:
         12:94:93:f8:8e:57:29:14:ec:c7:0c:29:ad:7c:b0:8e:f7:be:
         b0:10:b9:14:15:70:73:57:b4:fd:ac:d5:c2:ce:ee:93:c4:36:
         6d:2a:ee:3c:0a:9c:02:b2:71:1b:22:86:61:ae:e4:51:10:89:
         8a:c6:93:e2:b1:7f:54:56:33:59:d5:7e:b5:db:fc:8b:a6:5a:
         35:2b:b9:a0:fd:8b:7e:bb:73:59:5a:8d:08:9f:1e:b2:5c:14:
         3c:45:e4:48:65:ab:51:1e:0d:72:e7:dc:97:4a:26:21:eb:fa:
         3d:3e:34:95:0b:5a:e7:58:cb:bb:b1:fe:1f:9b:ef:d6:66:6d:
         80:87:cb:76:d7:98:70:60:f4:68:c8:cb:9f:60:e6:0c:24:da:
         9f:1c:70:86:5c:09:86:78:45:4a:de:22:0d:3d:37:c6:3f:9a:
         8a:71:78:58:e1:a8:29:a1:2f:25:9b:46:11:58:7c:77:8c:6f:
         b0:2a:e8:1c:7d:18:be:81:c1:17:19:24:a2:c0:3d:e8:f7:d7:
         d6:4f:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:22 2026 by rpki-client