This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa
File:                     3138362e32342e36342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          AmuvC6UYl3CNgF/xet0vyGJciRUiQmY32jItjvfSaGY=
Subject key identifier:   66:CA:0D:B4:ED:09:A5:AC:D5:CB:CC:F6:E8:7D:9B:1F:B8:92:2B:D9
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       415047A4BD1D35ECAD18C5557E400798A6E7AC0E
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:25 +0000
ROA not before:           Tue 06 Jan 2026 19:22:25 +0000
ROA not after:            Tue 05 Jan 2027 19:27:25 +0000
asID:                     6306
IP address blocks:        186.24.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:50:47:a4:bd:1d:35:ec:ad:18:c5:55:7e:40:07:98:a6:e7:ac:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:25 2026 GMT
            Not After : Jan  5 19:27:25 2027 GMT
        Subject: CN=66CA0DB4ED09A5ACD5CBCCF6E87D9B1FB8922BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:68:7e:72:32:bf:f5:48:6f:8d:fc:d6:20:
                    1d:24:1e:79:a0:42:9a:ad:d4:25:fa:52:da:03:1b:
                    73:d8:ec:04:22:14:71:cb:d6:78:e8:45:ec:ad:37:
                    19:f3:54:b5:99:63:42:db:4a:41:54:31:62:de:25:
                    f6:18:86:cc:87:36:9c:37:63:0e:e5:9a:0a:c2:cf:
                    94:d6:7e:4e:e8:94:ab:ba:c6:e9:00:27:6f:25:67:
                    53:5c:d9:bd:a6:5a:96:3b:3d:7a:a6:0c:10:cc:1d:
                    f3:45:da:49:f7:49:1b:32:90:a5:67:ab:e5:2b:b4:
                    90:b2:70:35:86:00:36:1b:da:be:0c:b4:6b:f6:0d:
                    09:78:ee:77:1d:28:d5:d3:ca:51:92:2c:b0:66:17:
                    bf:da:bd:3a:df:64:81:7b:af:b6:0c:12:b2:70:4b:
                    01:c0:48:95:07:5c:2a:1e:09:75:6c:c3:7a:55:cd:
                    47:17:07:c7:76:28:31:25:9a:b2:f8:d0:b0:89:dc:
                    97:b1:12:2c:f0:7b:7e:5b:b9:ef:01:3a:68:15:d5:
                    ed:75:cd:bb:05:3b:1d:95:c8:c2:ce:c2:be:86:af:
                    04:f5:83:2d:7e:d3:32:04:98:fc:09:4b:68:63:ee:
                    6a:4f:61:b1:a9:92:9c:6f:e9:6b:eb:20:f6:07:ec:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:0D:B4:ED:09:A5:AC:D5:CB:CC:F6:E8:7D:9B:1F:B8:92:2B:D9
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e36342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.24.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:3b:da:f0:eb:b7:c3:4b:1b:b1:b7:fa:73:21:dd:32:3b:01:
         d0:6c:76:42:21:13:d6:8f:07:d7:d7:54:db:e3:47:a3:a7:25:
         64:7b:ab:ae:d3:2d:a7:0f:3d:df:19:54:72:ed:f9:cf:17:a0:
         02:e5:fe:d3:fa:c6:cf:85:b0:8c:d6:26:b4:c1:71:a7:fc:5c:
         1c:50:af:ba:1b:7c:1a:2f:81:cd:70:64:ee:46:b3:68:77:f2:
         fc:45:8f:f2:57:20:83:c7:72:37:29:3b:9a:c9:46:8e:d6:3b:
         b7:40:29:53:c7:aa:61:ba:01:11:be:b8:aa:98:d5:3f:96:7d:
         02:8e:9a:15:37:4f:5c:05:5b:28:d1:4a:c2:ea:75:4d:bb:bd:
         4d:80:cf:b6:e6:ca:77:c1:c5:0c:ad:fe:b0:14:65:15:20:b4:
         ee:25:41:3d:a6:c0:8f:30:5a:06:38:a0:96:81:5f:2b:43:0e:
         96:c0:0a:1d:28:49:16:b2:ae:2a:95:ec:9e:df:b3:11:78:e2:
         89:9a:d7:87:9c:55:27:51:e9:b0:e5:c4:4a:44:8e:72:20:f7:
         0f:21:f3:1c:19:bd:7e:d0:e3:61:68:4e:3d:2f:ab:33:be:e8:
         96:87:1c:cc:d2:62:aa:82:b1:c0:3f:91:1c:7e:39:93:9c:9b:
         32:a9:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:49 2026 by rpki-client