This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e2037343138.roa
File:                     3138362e3130342e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          qvXcRiN8/Cj473JfsH/J+cnlgdS0hI9mo+FDJ46hLYc=
Subject key identifier:   21:50:55:98:B8:1E:AE:73:67:6C:5C:14:F5:4A:95:63:E9:10:8E:43
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       1D84325B9F4961C4C38F55DAA1E42338E615A562
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:52 +0000
ROA not before:           Tue 06 Jan 2026 19:19:52 +0000
ROA not after:            Tue 05 Jan 2027 19:24:52 +0000
asID:                     7418
IP address blocks:        186.104.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:32:5b:9f:49:61:c4:c3:8f:55:da:a1:e4:23:38:e6:15:a5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:52 2026 GMT
            Not After : Jan  5 19:24:52 2027 GMT
        Subject: CN=21505598B81EAE73676C5C14F54A9563E9108E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:0f:91:21:a4:d0:aa:64:56:c3:e9:01:40:
                    1d:2a:95:8c:15:91:da:f5:4b:b2:57:25:22:fe:4e:
                    dd:86:fd:e5:2c:c8:4a:4e:80:bc:a7:ae:10:6c:a0:
                    84:5e:3b:10:df:1d:4e:c6:4e:e4:03:68:6d:62:05:
                    3e:68:7a:56:cc:49:6f:8e:be:07:42:53:c3:5c:76:
                    a1:98:38:be:6c:94:02:06:86:fc:cb:17:26:6d:76:
                    da:02:78:12:09:81:ad:7b:96:52:05:83:ef:f2:54:
                    7c:84:9e:fa:39:ee:c8:f2:df:8a:74:d0:d8:37:ce:
                    b6:9d:65:b3:81:19:5b:6e:99:7d:89:8f:18:28:ab:
                    95:db:15:56:e9:ac:04:87:a1:c8:ff:32:33:f5:be:
                    22:43:46:41:01:03:c7:d7:8a:54:87:55:c3:ac:f8:
                    62:88:f8:b2:24:39:ba:03:1e:27:ab:1f:39:83:74:
                    e4:c3:86:93:f3:5f:3b:d4:d1:d1:b1:cd:29:79:82:
                    dc:73:5b:7e:47:b0:c7:49:c3:85:d5:6b:19:6d:15:
                    a8:74:58:1f:f6:d0:7a:a3:f8:b4:89:0f:28:28:69:
                    8c:d7:ca:33:15:04:da:cc:32:13:c5:8d:0b:15:d8:
                    0d:b1:73:11:a2:33:7c:35:21:62:7f:2d:a8:25:15:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:50:55:98:B8:1E:AE:73:67:6C:5C:14:F5:4A:95:63:E9:10:8E:43
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130342e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         47:85:40:c4:b5:b0:69:ad:59:fe:d0:48:bb:16:28:08:04:67:
         93:90:c5:f6:aa:ae:81:7b:04:07:a1:dd:d0:44:ed:72:b3:44:
         ab:65:c3:1c:72:20:16:2c:6d:a8:4f:e0:cf:ea:a3:0c:5a:58:
         1e:e2:34:60:c2:6f:8b:20:c4:5a:08:5b:2f:39:ac:2d:14:cf:
         06:45:16:bb:56:06:70:10:b7:b1:29:b5:d4:93:a2:97:14:d4:
         c7:e7:5a:34:5a:df:55:b9:ee:3e:62:a4:ce:26:82:64:1b:0d:
         0c:17:54:90:ef:71:3c:20:da:c4:5b:20:74:ba:39:83:7d:98:
         d5:71:d4:ed:9c:b4:5a:33:ab:ae:86:b2:a0:ac:63:19:28:01:
         52:8c:5d:c0:30:d3:9f:f8:f8:e4:0f:f1:b5:95:da:6c:fb:dd:
         72:0e:d4:8b:f1:2f:25:7c:21:63:47:05:c9:56:37:72:45:e7:
         25:af:10:5f:13:4e:7a:e8:7c:5d:85:9a:a2:8f:6d:52:a4:4d:
         0c:f3:ba:c4:c8:f3:64:3a:22:2d:fb:fa:9f:98:3b:f2:3d:2b:
         df:e2:6f:92:bc:1b:65:d9:f5:25:65:f5:e3:b1:05:b7:79:7a:
         be:5e:46:9e:e4:03:0d:b7:65:e7:5e:48:6c:cd:e0:92:78:ab:
         48:5b:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:47 2026 by rpki-client