This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa
File:                     3138362e342e3132382e302f31372d3234203d3e203532323537.roa (raw, json)
Hash identifier:          zPgENXoUdm8Hpb0cd8Rp6FCiexayEZs+F/a4Mt08gJM=
Subject key identifier:   A2:BC:F7:2B:AC:D2:3C:79:35:DB:14:FD:78:A0:BD:5E:80:2F:2F:5C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       6D10573F94F60FDBD52691EA93C51371BE8E8AA4
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa
Signing time:             Tue 06 Jan 2026 19:08:32 +0000
ROA not before:           Tue 06 Jan 2026 19:03:32 +0000
ROA not after:            Tue 05 Jan 2027 19:08:32 +0000
asID:                     52257
IP address blocks:        186.4.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:10:57:3f:94:f6:0f:db:d5:26:91:ea:93:c5:13:71:be:8e:8a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:32 2026 GMT
            Not After : Jan  5 19:08:32 2027 GMT
        Subject: CN=A2BCF72BACD23C7935DB14FD78A0BD5E802F2F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:ee:50:1a:9e:4a:0b:09:cb:b2:d1:dd:fe:
                    ef:86:7c:57:11:79:fa:ad:64:48:6e:d7:76:47:d0:
                    6a:b8:4f:87:aa:66:db:ad:dc:48:78:5c:bd:f2:94:
                    e1:93:a5:8f:fd:d4:19:38:55:b3:75:f3:1c:81:2c:
                    98:e9:b0:fa:bb:fb:a1:eb:71:9f:da:6a:39:30:69:
                    bf:20:0f:17:9e:9b:c5:7c:05:3a:aa:8e:d2:4c:48:
                    ce:e3:36:e6:f7:42:99:c6:08:1a:c6:51:60:bd:19:
                    38:8f:83:4e:15:a0:30:0f:ae:f8:a5:63:b1:21:51:
                    dd:78:7e:e9:72:29:85:c7:d8:ef:04:07:b4:ca:4c:
                    00:64:6e:46:4c:95:32:11:b9:82:5a:6a:83:49:2c:
                    08:f2:63:50:77:33:2d:a1:f4:11:e1:48:65:28:ed:
                    4c:1f:7f:68:f1:5a:a3:ac:90:dd:49:57:be:a2:0c:
                    40:90:10:92:b5:d3:dd:03:0c:d0:fc:9c:d1:e7:60:
                    31:cf:42:29:7b:ad:75:cb:c6:69:ef:93:93:1c:a6:
                    2e:d2:f0:35:33:27:88:c0:04:e8:3e:90:98:81:02:
                    d2:bc:4b:ef:71:09:02:c6:e5:a7:c2:4f:f1:dd:6d:
                    35:6a:7b:95:67:42:fb:2c:8f:7a:dd:50:2a:6e:6c:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BC:F7:2B:AC:D2:3C:79:35:DB:14:FD:78:A0:BD:5E:80:2F:2F:5C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e342e3132382e302f31372d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.4.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:e3:9f:33:13:df:7a:da:69:a8:e0:8c:be:6b:27:6b:06:
         9b:22:9c:a1:9c:18:c6:a0:ff:e7:c9:92:b6:83:fe:bc:6c:43:
         2a:87:5a:d1:9b:fe:51:dd:1d:cc:46:4f:4f:75:9f:c2:b8:2e:
         28:c9:22:ce:c4:a0:26:49:cb:c9:19:86:1f:ac:5e:01:9b:5d:
         d7:51:d2:3b:3b:bb:d1:a3:ab:29:98:51:f1:94:02:21:9f:28:
         d7:32:64:70:f8:ce:4f:c4:ab:aa:e1:81:50:35:7e:eb:8d:2f:
         18:5f:cd:7c:c8:fc:68:51:22:e1:8f:a0:60:65:e8:46:08:5e:
         5e:02:40:93:e2:ef:79:17:96:fe:36:dc:f2:ea:fb:8c:cf:8c:
         7d:e1:e6:0a:70:40:15:98:85:94:56:05:e8:34:06:60:41:27:
         7e:b3:67:45:8e:3e:92:f1:58:9c:9f:32:d3:a2:0c:b5:fd:25:
         c4:aa:cf:4c:9c:66:ae:c2:74:15:27:10:27:60:40:57:07:00:
         34:03:4d:6f:0e:53:23:6e:e7:b4:5c:ad:1b:7f:b5:57:78:fd:
         17:88:5d:1a:e2:c6:56:f5:44:cb:06:d2:22:52:3b:e7:5e:1c:
         e5:bc:ae:6a:ca:e4:f6:71:fa:d3:7f:b3:c5:0e:79:c1:2e:81:
         d6:28:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:12 2026 by rpki-client