This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130362e302e302f31352d3234203d3e2037343138.roa
File:                     3138362e3130362e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          Z/T/RVcZz9wZcLJJSjQJcwG+DyJfrbr3anPlMrJ4fxc=
Subject key identifier:   DE:4B:B2:DA:D1:3E:27:4E:C8:B6:CA:72:5E:3E:4D:92:31:68:38:DF
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       2785E73E31CD1723B812D713BE3FC3961576A94E
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130362e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:24:44 +0000
ROA not before:           Tue 06 Jan 2026 19:19:44 +0000
ROA not after:            Tue 05 Jan 2027 19:24:44 +0000
asID:                     7418
IP address blocks:        186.106.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:85:e7:3e:31:cd:17:23:b8:12:d7:13:be:3f:c3:96:15:76:a9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan  6 19:19:44 2026 GMT
            Not After : Jan  5 19:24:44 2027 GMT
        Subject: CN=DE4BB2DAD13E274EC8B6CA725E3E4D92316838DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:65:8c:e0:a0:16:06:b9:1f:4c:a6:ad:19:
                    95:52:8e:58:ee:3d:96:e2:ea:1d:95:d4:43:24:9e:
                    65:6f:97:53:a4:6c:ad:c8:85:c4:d1:5f:23:04:c3:
                    0c:0c:15:2d:ed:8a:08:4e:dd:35:2e:51:ca:92:a9:
                    d7:c1:61:80:d2:48:b3:e1:c8:1f:ff:a3:64:6b:a6:
                    ce:ed:71:68:00:e7:fa:6a:45:69:1d:cd:e2:ae:f9:
                    18:42:09:3a:d1:6b:9c:a0:d3:e7:54:08:64:11:ad:
                    cf:24:7f:30:3a:7e:88:12:24:35:7a:c1:cd:e1:5f:
                    17:66:ac:fe:dc:b8:a6:8d:e8:e3:e1:a9:b1:40:f7:
                    23:be:8b:12:2d:bc:a5:32:ce:d7:1a:a4:63:e5:f3:
                    8b:21:91:0f:f8:85:c3:26:f9:27:cf:20:15:a2:f3:
                    8e:9f:70:a2:21:80:22:0b:26:50:7d:55:c2:b2:78:
                    c7:12:fa:5d:25:ac:54:f2:72:92:63:3f:cc:19:af:
                    00:8d:3c:a4:3f:8c:30:ed:a5:8c:2c:e3:54:84:72:
                    e9:3c:90:0a:65:f0:fc:f2:4e:8b:78:c4:2f:b5:6f:
                    a6:e5:47:8e:50:c7:36:3a:5a:59:d5:09:48:47:bb:
                    46:39:6a:b1:2f:4d:18:81:f1:58:bb:38:33:94:8c:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4B:B2:DA:D1:3E:27:4E:C8:B6:CA:72:5E:3E:4D:92:31:68:38:DF
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3130362e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.106.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:b4:b0:75:c4:e0:26:fe:ca:10:ea:28:c3:34:90:54:9d:
         cc:db:8e:40:74:77:fc:61:48:66:be:d6:2f:10:65:57:39:7b:
         2b:41:4c:9b:c7:c7:47:fe:1d:49:7e:7e:12:bc:28:0c:1f:ed:
         5e:4f:db:6e:f5:20:99:8a:60:0a:92:0d:86:7f:d9:f0:63:c4:
         af:15:19:02:28:b9:8d:2e:8c:de:9c:ad:c3:84:e5:dc:7f:1a:
         1d:7e:72:90:0d:cd:70:ec:b6:28:79:eb:e0:9d:9c:52:70:52:
         fd:83:d8:aa:61:4e:1e:5f:55:df:de:35:96:a0:1d:78:b7:d6:
         48:c9:dc:26:f5:3f:4c:2b:78:cb:a5:9f:01:11:de:44:1f:76:
         01:b8:52:8f:b1:30:5d:0d:c1:ae:cb:44:c8:ae:74:a6:33:84:
         e9:a1:71:cf:60:04:d6:48:9a:94:15:9d:3c:21:1f:98:57:a1:
         96:6c:a9:82:32:81:b0:9c:c3:a1:ef:17:57:a1:74:45:ac:91:
         00:9f:4e:d5:17:f7:c5:b2:84:6c:a0:0c:cc:66:78:0b:e6:97:
         33:59:cd:e0:1a:e5:b3:6f:f0:7a:45:10:20:71:0c:13:b4:79:
         45:6e:57:6d:4e:f4:1e:ed:85:ce:17:80:f6:3c:92:9f:fa:63:
         2c:9d:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:15:37 2026 by rpki-client