This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39362e302f32302d3332203d3e203134373534.roa
File:                     3138362e3135312e39362e302f32302d3332203d3e203134373534.roa (raw, json)
Hash identifier:          8AIMBeZctOTaCTBQBOxikfOlHzafAeWk66wzqqA7hTM=
Subject key identifier:   78:E6:4D:DE:18:F4:D5:93:42:63:A1:CC:BD:C7:A5:1F:0E:6B:DA:01
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       668271DB14941CDB0E057A30E22F81A09BB9B5A2
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39362e302f32302d3332203d3e203134373534.roa
Signing time:             Mon 19 Jan 2026 15:26:06 +0000
ROA not before:           Mon 19 Jan 2026 15:21:06 +0000
ROA not after:            Mon 18 Jan 2027 15:26:06 +0000
asID:                     14754
IP address blocks:        186.151.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:82:71:db:14:94:1c:db:0e:05:7a:30:e2:2f:81:a0:9b:b9:b5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Jan 19 15:21:06 2026 GMT
            Not After : Jan 18 15:26:06 2027 GMT
        Subject: CN=78E64DDE18F4D5934263A1CCBDC7A51F0E6BDA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:ac:86:82:5a:b8:6c:5c:be:a3:6f:df:83:
                    4e:39:7d:4c:2e:20:66:c0:ab:df:72:b1:50:ba:d4:
                    19:2a:60:cc:cd:6e:cf:bf:16:1a:4e:2c:67:8b:d3:
                    f4:34:2c:45:ec:6c:32:22:52:b6:7c:7e:5e:38:27:
                    0a:60:34:4e:58:b4:71:a3:30:62:28:bb:8d:78:9c:
                    13:de:02:fd:44:b7:be:b2:f5:03:33:55:50:e2:24:
                    28:a7:0b:62:7a:7b:a7:a2:b8:82:d9:36:11:23:b9:
                    26:1d:68:f1:e6:3c:9a:ef:a9:f2:4e:24:d1:7f:7a:
                    72:b2:7e:b7:c6:fa:8f:25:b2:8b:4a:1e:d1:74:cc:
                    26:17:15:32:00:0d:04:7c:b6:ec:b6:87:bc:0a:7c:
                    99:44:f8:37:10:3c:e8:df:98:96:b0:d2:72:1c:cb:
                    2d:38:77:70:ff:18:18:7f:e0:f0:79:38:5a:14:ab:
                    76:0d:2f:2c:88:82:a1:2f:8f:24:2d:12:0d:cb:45:
                    13:46:1c:6b:90:80:49:c7:fa:73:1f:bc:36:61:27:
                    0d:52:26:b8:05:71:f5:9a:37:83:c6:f4:7a:b6:c6:
                    0a:4b:f2:ea:36:79:b0:5d:e3:0b:73:5a:04:dd:21:
                    1f:12:d1:a0:5e:12:cb:ca:52:73:0c:42:e9:55:61:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:4D:DE:18:F4:D5:93:42:63:A1:CC:BD:C7:A5:1F:0E:6B:DA:01
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39362e302f32302d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:08:f5:21:52:e6:9f:f1:be:c8:5a:87:59:bb:46:46:5f:1e:
         bb:2c:bb:56:85:43:bc:8a:d8:1e:19:fb:54:8f:90:c3:0e:c0:
         ed:c4:99:84:cd:e4:be:e2:d1:3b:c5:fd:9a:aa:a0:fe:6d:7e:
         2f:af:fb:25:b9:c2:96:67:2c:74:ae:57:53:18:4f:9e:6e:6b:
         2b:73:68:4e:cb:c3:39:da:8d:eb:b7:de:64:9a:08:94:c3:e4:
         20:60:43:c8:10:90:45:40:a1:f1:de:bf:f3:17:81:62:65:65:
         23:8b:2c:1c:23:2e:42:d4:9c:eb:04:dc:d3:c9:54:6d:82:8a:
         da:ca:9a:35:d6:2d:d7:64:fe:11:83:2a:77:49:1d:f6:34:38:
         90:22:b4:43:f5:25:b3:1f:33:79:34:b6:6a:97:25:ae:a0:e1:
         c8:ec:61:e4:f3:9f:9e:13:2f:d5:d8:69:3a:ed:07:dd:17:b3:
         1e:45:80:37:2c:e3:a2:51:ea:2a:69:40:cf:6d:23:ad:9c:74:
         f2:14:c6:e1:6b:86:e5:af:27:1b:3f:f0:a0:ad:8e:e7:e3:2e:
         8e:4d:6f:c8:a4:46:f9:ba:cc:f9:fc:b1:fe:8c:38:d0:e6:29:
         cc:18:fa:81:24:08:6a:f0:3e:0a:3e:a0:b1:38:43:9e:df:97:
         a4:45:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:48 2026 by rpki-client