This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e3132382e302f31372d3234203d3e2036333036.roa
File:                     3138362e32342e3132382e302f31372d3234203d3e2036333036.roa (raw, json)
Hash identifier:          viYdHolixCsT4Hvfb9yk9c/3ZCxVJaj5QVhIuGvdZL4=
Subject key identifier:   37:0C:07:B6:1D:8F:88:30:BE:74:EB:5D:A9:8D:2F:F9:AC:20:EA:14
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       542AC77F67070EE54F3E5280C883BF170400C3E2
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e3132382e302f31372d3234203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:31 +0000
ROA not before:           Tue 06 Jan 2026 19:22:31 +0000
ROA not after:            Tue 05 Jan 2027 19:27:31 +0000
asID:                     6306
IP address blocks:        186.24.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2a:c7:7f:67:07:0e:e5:4f:3e:52:80:c8:83:bf:17:04:00:c3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:31 2026 GMT
            Not After : Jan  5 19:27:31 2027 GMT
        Subject: CN=370C07B61D8F8830BE74EB5DA98D2FF9AC20EA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0a:38:28:96:af:f1:c8:6a:1d:97:42:50:94:
                    9e:4f:0c:e0:95:75:74:01:f9:bb:91:e7:6c:86:88:
                    e5:46:27:95:a6:29:17:81:6e:e0:9c:9f:1c:ea:d9:
                    c7:61:f3:42:8c:22:c4:64:ae:d0:76:fc:f2:18:d7:
                    70:86:5d:7d:6d:26:b4:35:c2:11:24:6d:d6:e6:db:
                    ad:02:6f:a1:10:da:fc:f7:18:37:6a:a8:3d:5b:9f:
                    a7:04:ad:1a:88:ad:ec:09:bf:bb:4c:d4:9b:33:fd:
                    cc:8d:c2:67:a1:16:8b:29:d6:4d:81:39:e9:33:54:
                    52:b9:83:b0:a2:5f:b0:f3:2a:74:29:ab:e9:81:b8:
                    88:5e:c4:7a:21:4f:8e:c4:a6:46:4b:52:df:24:2f:
                    b1:0f:ff:e9:bf:f6:50:60:94:d4:82:b6:28:39:a5:
                    19:d8:b4:38:b1:0f:03:cc:fd:d3:a1:76:82:23:05:
                    d6:ad:a0:7e:09:8e:ca:91:e4:4b:39:20:22:02:a1:
                    31:16:6e:b8:e3:79:6b:37:5f:a8:2b:0e:77:e2:04:
                    4d:64:a9:86:40:1a:e5:ea:f5:93:25:ba:9c:7c:31:
                    65:f3:b0:e5:54:50:53:8a:67:79:4d:5c:2d:37:f7:
                    2e:2a:e1:ad:86:89:23:22:29:d2:37:b6:e8:2e:62:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0C:07:B6:1D:8F:88:30:BE:74:EB:5D:A9:8D:2F:F9:AC:20:EA:14
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e3132382e302f31372d3234203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8d:0d:b4:1c:28:fd:62:e3:f6:27:cc:db:c9:4f:8f:5b:27:85:
         2d:82:f4:c3:74:9d:b6:2a:be:6c:6a:bd:e1:04:ec:8b:c2:34:
         26:6b:2b:4a:02:32:92:5d:84:a1:77:5b:ac:e9:50:20:18:89:
         84:94:2a:e0:e8:f7:b2:c5:86:9f:c7:ac:f1:bc:97:fc:46:42:
         f2:3f:73:af:08:27:89:77:cb:43:3a:af:1d:b3:23:bf:2f:4e:
         5e:5b:2f:69:64:7b:88:f7:5b:5c:a0:1e:ec:e4:f1:8b:e6:e0:
         49:22:f4:14:d3:7f:79:69:d2:ad:5d:70:31:04:86:0b:69:08:
         5c:f5:e0:58:9a:cc:0f:e2:b9:d5:6b:2f:23:b2:c1:32:c2:b0:
         6d:23:82:a8:98:a9:54:8a:51:d9:f9:12:b7:22:cb:86:6c:d5:
         27:cc:aa:05:f8:99:7a:21:ab:35:6f:e4:e6:e8:4b:6d:36:99:
         52:cf:4e:f8:e4:2d:43:18:df:7f:d7:fb:e0:ea:b4:76:d1:cc:
         e6:78:58:d0:0b:7c:ae:df:91:bf:2d:86:2d:f9:03:4e:5a:b1:
         8b:ae:d8:7c:a3:7b:7a:14:ee:83:31:89:6c:00:9f:3b:c6:83:
         f7:b8:04:a0:d1:b3:63:0f:91:6b:f6:1d:ca:17:cf:ec:5b:21:
         e7:ab:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:12:02 2026 by rpki-client