This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e2036353033.roa
File:                     3138392e3230362e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          G+FmM6hFfiXOMkNNyIn42vldDtWLlJBZxOKXfEyKVew=
Subject key identifier:   50:B3:AF:63:78:93:E6:B8:0C:76:93:F6:7C:66:BF:70:9B:BC:25:74
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       285B71C2A6EA8CF141F3ABB1187649A76843E40A
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:45:05 +0000
ROA not before:           Tue 06 Jan 2026 19:40:05 +0000
ROA not after:            Tue 05 Jan 2027 19:45:05 +0000
asID:                     6503
IP address blocks:        189.206.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5b:71:c2:a6:ea:8c:f1:41:f3:ab:b1:18:76:49:a7:68:43:e4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Jan  6 19:40:05 2026 GMT
            Not After : Jan  5 19:45:05 2027 GMT
        Subject: CN=50B3AF637893E6B80C7693F67C66BF709BBC2574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:fb:a7:67:d9:bc:cd:01:ec:dc:18:9d:05:
                    6b:b5:c2:e7:c5:c7:4e:64:37:7a:ea:06:1d:3d:31:
                    8b:d9:1d:24:3a:f2:a7:dd:45:36:e5:28:89:25:a3:
                    2c:88:01:2c:21:fe:57:e8:5f:ac:76:fa:a5:6a:82:
                    9c:d8:f4:e3:bf:c5:a6:8a:a4:94:ca:76:1c:d5:df:
                    39:db:d6:5b:06:d6:84:00:7b:68:3d:57:da:2c:e5:
                    59:3f:2e:a8:de:92:fe:af:fd:3b:fa:36:d7:40:10:
                    60:52:03:06:22:f6:e1:2d:dd:b3:74:75:1e:de:41:
                    d5:fb:6a:9f:dd:ed:f8:05:05:b6:a4:49:9a:40:0e:
                    03:5c:0c:71:e0:ef:78:cf:c7:dd:43:3f:2b:3c:05:
                    57:47:4d:ff:cf:44:39:75:85:8e:e1:36:b3:d4:58:
                    75:09:16:42:66:e6:8c:74:7f:7b:d0:2b:77:d9:14:
                    62:dd:5c:30:2d:04:29:1b:3d:80:56:82:48:06:a3:
                    9f:07:bf:63:8c:c9:25:2c:db:c3:cb:42:9c:28:ef:
                    35:3d:d7:1f:b3:6f:54:b9:e7:59:78:a6:0b:9b:44:
                    96:44:3a:2b:fc:21:1a:b5:01:c3:e0:4e:98:2f:b1:
                    d9:fe:74:6e:bd:89:98:0e:98:5d:50:2e:4f:7e:6c:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B3:AF:63:78:93:E6:B8:0C:76:93:F6:7C:66:BF:70:9B:BC:25:74
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:0c:c9:30:ff:e0:d5:33:5d:d0:b5:b5:6e:2c:5f:d7:9c:2a:
         e6:f0:e2:92:22:61:78:7f:88:0e:98:2d:a9:93:fd:88:64:4e:
         cc:3c:95:e4:9b:8f:f1:c6:0a:f6:6e:73:f2:fb:21:8f:f7:08:
         24:a6:c8:f7:a1:88:e2:66:a9:6e:56:4b:04:17:b4:dd:61:02:
         11:31:d3:2d:d9:12:ac:a6:20:78:95:e0:34:a1:c0:a1:b1:e7:
         ac:07:87:47:48:cc:07:10:5c:92:e6:cb:1e:d0:24:b1:5b:d2:
         0a:6a:72:02:84:76:c2:26:df:82:4d:0e:3c:dc:7f:77:05:06:
         2e:a4:b0:0a:21:e4:5f:e7:70:34:84:da:43:ae:bb:2b:2b:d5:
         4e:a4:ba:73:c2:4d:43:ce:46:5b:6a:82:97:00:33:b9:a9:e1:
         09:2f:8b:53:c3:fd:81:d6:54:5c:cd:a7:1d:77:46:b8:91:56:
         7c:5e:de:7d:cd:2e:1d:4b:6c:d9:1b:59:e6:81:75:3d:88:2d:
         f1:14:73:7c:5e:f9:f2:9d:57:67:24:e3:97:a9:cd:d6:9f:e9:
         d9:3b:1c:9b:a0:7a:f0:7a:a1:78:b8:97:dc:6a:8e:1b:35:4f:
         c1:5b:da:2a:a7:b8:d4:70:24:cb:c3:e1:26:6c:1b:93:24:61:
         1a:a9:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:39:56 2026 by rpki-client