This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa
File:                     3138362e3134382e302e302f31382d3234203d3e2037303034.roa (raw, json)
Hash identifier:          MK7cuWdrjPiDiSfCsbUZt8OEzV3CnIfJG82ogbe4zIQ=
Subject key identifier:   9E:52:D0:CB:A8:F9:3B:2F:EF:43:20:F4:F4:28:8B:1B:BB:A9:FB:65
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       32BDAE26B9310A5C450F60B2A8E77E8E44DDFBE1
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa
Signing time:             Wed 24 Dec 2025 19:56:02 +0000
ROA not before:           Wed 24 Dec 2025 19:51:02 +0000
ROA not after:            Wed 23 Dec 2026 19:56:02 +0000
asID:                     7004
IP address blocks:        186.148.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bd:ae:26:b9:31:0a:5c:45:0f:60:b2:a8:e7:7e:8e:44:dd:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Dec 24 19:51:02 2025 GMT
            Not After : Dec 23 19:56:02 2026 GMT
        Subject: CN=9E52D0CBA8F93B2FEF4320F4F4288B1BBBA9FB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:76:85:d6:b5:1c:7f:d9:4e:88:d0:f2:11:
                    c7:22:62:7e:61:bb:0d:69:0c:ab:ff:c2:41:ea:01:
                    c7:be:f2:b0:cd:de:d4:fa:f7:b0:5a:95:12:c1:b0:
                    41:7b:94:37:f5:9a:e0:41:98:89:03:22:0b:62:09:
                    2d:18:f8:62:17:3f:d9:0b:ee:a4:58:45:08:17:36:
                    b1:7e:b3:10:a6:3e:c5:a6:6a:4f:cd:d6:37:36:c7:
                    fa:d2:84:a8:74:f4:ca:bf:26:23:d6:d4:8b:01:29:
                    94:c2:94:1d:38:66:d7:53:c1:52:4c:dd:41:a9:0d:
                    f1:a2:25:85:4c:d0:2f:72:38:7f:39:ff:15:29:86:
                    c0:0f:d5:38:99:58:4d:51:3c:e2:5e:1e:1e:61:84:
                    04:d6:f6:f9:57:ce:5b:2b:7e:44:e7:fa:7d:20:a2:
                    32:55:f8:21:c7:65:09:b0:66:94:b9:e2:3f:b7:be:
                    a4:ff:0b:45:ee:05:42:ed:0c:56:f5:f1:60:83:19:
                    09:39:03:ad:83:21:bf:ec:87:5c:8c:52:2c:2a:04:
                    ae:13:17:88:15:18:d3:f3:52:ae:48:94:02:78:d9:
                    97:af:7f:2d:8b:02:6e:7d:c4:a2:ba:66:db:14:07:
                    ca:4d:41:6f:c4:90:fe:b6:a5:a7:eb:26:9b:4f:5d:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:52:D0:CB:A8:F9:3B:2F:EF:43:20:F4:F4:28:8B:1B:BB:A9:FB:65
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138362e3134382e302e302f31382d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:9d:9a:21:ed:49:64:9c:ff:fd:31:e3:d6:5e:81:7b:32:
         64:33:32:d5:c1:58:76:39:0c:7d:57:93:9a:8f:01:33:22:1c:
         61:40:ab:d2:2d:b1:5e:0a:11:eb:38:97:13:90:69:55:98:ef:
         bf:1c:22:51:19:d4:97:ac:3d:cc:7f:57:0f:3e:36:c1:c1:7e:
         16:5d:62:b4:ce:44:55:5c:eb:6e:85:2c:6d:a6:b3:5d:d4:a4:
         86:46:47:90:65:13:0d:8f:99:cd:6e:ee:ed:cb:dd:87:3e:2c:
         1c:23:41:97:ec:6b:df:65:4c:5a:3e:2d:c7:7d:57:d9:5d:57:
         d1:ab:f5:c2:d3:68:be:14:6b:84:d2:de:b8:19:55:ec:e5:79:
         e6:e9:d4:6a:ac:f4:ac:96:13:12:b0:0e:ef:d7:0a:29:f4:99:
         8f:8d:4f:86:78:f3:a9:b3:e9:6f:67:93:16:c0:ce:f4:13:11:
         64:15:05:6c:bf:62:11:78:ec:b5:79:11:78:2f:e5:1b:c6:a5:
         c9:ad:6a:a1:0a:34:83:be:12:a5:ee:b1:13:ba:cd:01:09:72:
         c9:d1:f9:f3:a1:a6:02:a1:4e:bf:f3:2d:c0:ce:84:79:50:45:
         24:be:f3:f8:b6:ae:47:4f:a0:6b:9c:a9:ee:be:dd:7a:bb:8e:
         f4:65:d2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:18:28 2026 by rpki-client