This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e203136363239.roa
File:                     3138362e3130342e302e302f31352d3234203d3e203136363239.roa (raw, json)
Hash identifier:          A7hxTajM5QtXYMwfLCSftEeW/6C6xCgcu3B+ker/rG4=
Subject key identifier:   D8:69:72:0C:D2:4F:13:B6:D3:BA:29:3F:23:A0:D2:88:EF:EB:BF:78
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       55A36D70429DFC10F6EB61E84BDCF20AB275D921
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:24:51 +0000
ROA not before:           Tue 06 Jan 2026 19:19:51 +0000
ROA not after:            Tue 05 Jan 2027 19:24:51 +0000
asID:                     16629
IP address blocks:        186.104.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a3:6d:70:42:9d:fc:10:f6:eb:61:e8:4b:dc:f2:0a:b2:75:d9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:51 2026 GMT
            Not After : Jan  5 19:24:51 2027 GMT
        Subject: CN=D869720CD24F13B6D3BA293F23A0D288EFEBBF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:94:89:6d:32:51:3c:73:7d:f4:78:aa:cc:
                    96:7a:3e:d4:e9:74:75:dd:49:91:10:18:d5:ce:57:
                    0e:9f:85:43:c5:d2:2f:35:02:66:39:42:75:3a:ba:
                    e2:8b:eb:c8:64:4f:0d:1d:26:4b:fc:f5:24:81:df:
                    da:63:20:97:1a:77:11:08:e7:af:e6:4b:7e:cf:56:
                    f1:de:7a:e0:ec:98:19:0a:16:30:97:75:56:b4:23:
                    9a:90:26:e0:d5:6e:13:b4:b5:98:ee:e9:28:f5:b2:
                    a1:a6:f0:cf:69:53:66:e3:87:6a:92:1f:d4:3a:1a:
                    5f:e0:99:38:1c:22:80:cf:01:4f:7b:62:a6:58:7c:
                    c1:44:c3:5c:6b:93:13:04:77:d1:90:9a:c0:86:21:
                    43:76:a6:66:fb:f4:7b:89:96:e9:17:ea:ba:9a:8e:
                    3f:74:09:bf:be:8f:c2:70:d6:0f:49:03:10:fd:3b:
                    62:e1:26:3d:4c:4a:9b:e0:e8:9a:d1:7d:a0:70:ae:
                    97:e1:43:a9:d8:5d:6f:08:86:e6:dc:b7:95:40:eb:
                    a8:00:3c:2d:1b:59:f8:14:4d:64:b7:c1:3b:82:fa:
                    80:ad:e4:20:17:3d:9d:18:32:e0:de:02:04:94:97:
                    f6:02:90:61:fc:d3:2c:e3:18:22:c4:d6:c8:d1:3a:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:69:72:0C:D2:4F:13:B6:D3:BA:29:3F:23:A0:D2:88:EF:EB:BF:78
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         36:af:00:8b:b0:8a:58:d8:3d:be:30:0b:82:f3:b7:16:31:9b:
         2f:91:ee:67:b4:0d:27:2e:6f:a5:bb:0f:88:7e:ea:33:f3:f9:
         93:27:f7:7f:c6:48:2d:56:06:69:62:88:1e:14:ba:f0:a1:da:
         2d:71:f7:95:e8:dc:28:3f:ff:97:a1:fc:b4:15:8c:de:9d:2c:
         95:71:16:3b:8d:b1:79:c4:a9:fa:c6:ae:cc:9e:2f:eb:27:18:
         66:46:fa:79:3b:84:58:04:0e:33:81:27:b0:a4:56:ab:5d:af:
         96:fd:b5:fa:a1:40:ab:d3:e9:7a:d6:ac:1d:46:c1:5c:20:e9:
         2c:c8:40:c6:9d:c4:d2:4f:ee:3e:3c:9f:88:a3:20:3f:fd:63:
         14:04:d5:09:75:90:8f:c3:ef:fc:3e:fd:4c:c5:bc:0e:5a:ad:
         49:39:7e:86:54:69:e0:36:0d:da:7d:63:25:79:a6:98:10:04:
         05:b1:af:14:b4:fe:54:8d:21:a6:ff:53:9a:67:f5:12:f7:23:
         be:20:70:96:c3:c3:b0:76:d3:99:0a:93:54:a2:a3:97:94:45:
         6a:fd:3c:8d:2c:ad:6e:12:6e:b8:d5:99:3d:3b:9f:3b:72:fd:
         16:14:83:bb:01:3b:66:df:78:60:c4:3f:0d:84:f7:44:0e:27:
         57:51:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:30 2026 by rpki-client