This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa
File:                     3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa (raw, json)
Hash identifier:          sGwt7sr5z+038V8iso2adfBq/eLPQFYeaOLGScATvFs=
Subject key identifier:   5B:C3:EF:CD:9E:C9:97:86:CE:42:79:3B:69:C3:35:0E:09:22:A1:16
Certificate issuer:       /CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
Certificate serial:       41C1F1283EBAD31B7932EDA923A375400AAC874C
Authority key identifier: B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa
Signing time:             Tue 06 Jan 2026 19:28:58 +0000
ROA not before:           Tue 06 Jan 2026 19:23:58 +0000
ROA not after:            Tue 05 Jan 2027 19:28:58 +0000
asID:                     270071
IP address blocks:        186.219.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c1:f1:28:3e:ba:d3:1b:79:32:ed:a9:23:a3:75:40:0a:ac:87:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
        Validity
            Not Before: Jan  6 19:23:58 2026 GMT
            Not After : Jan  5 19:28:58 2027 GMT
        Subject: CN=5BC3EFCD9EC99786CE42793B69C3350E0922A116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:0b:7b:7e:35:a0:da:0c:45:1a:5c:34:99:
                    ba:fd:f0:77:ca:cb:41:20:b9:2f:af:0b:b5:8b:c9:
                    9a:71:4c:7d:26:bf:b1:9c:fa:71:a7:1b:59:a0:db:
                    de:cf:cd:88:07:c6:f5:37:4e:39:1f:e9:eb:85:c8:
                    4f:2a:9d:5b:6c:e1:15:35:eb:21:da:e3:4f:4d:5d:
                    03:99:1a:a2:01:ce:14:b6:14:57:49:a3:28:89:8b:
                    2a:da:71:71:ed:bb:e3:86:e7:b2:df:96:6d:0d:f3:
                    17:84:a4:75:5d:99:f9:69:f9:54:20:6a:62:c2:39:
                    f3:b3:3d:6d:ab:9d:81:b9:ae:07:1e:99:5d:8c:85:
                    cc:38:97:d1:14:6c:f2:72:27:7e:b0:11:44:41:fb:
                    6d:da:5d:5a:f1:79:91:97:36:4d:e7:88:70:15:86:
                    60:9b:43:90:7e:2b:ee:4f:c0:b1:01:50:1a:3f:a3:
                    51:ce:68:08:6d:de:0d:b6:8f:1b:54:5d:27:04:25:
                    78:f8:72:9a:fe:1e:8f:85:e1:28:4c:8a:e4:8d:d0:
                    c1:d0:5a:94:64:25:a2:54:5a:9a:81:0f:32:ec:78:
                    24:a6:4d:d4:33:0a:54:0a:25:98:c6:c0:d0:7f:f3:
                    fb:e5:78:c8:87:a3:46:14:b1:a6:6d:67:6d:03:80:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C3:EF:CD:9E:C9:97:86:CE:42:79:3B:69:C3:35:0E:09:22:A1:16
            X509v3 Authority Key Identifier:
                keyid:B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:18:4a:6f:da:d6:8e:8c:76:bc:0f:4b:ab:ba:a8:35:e5:9e:
         51:2b:7c:cb:02:c7:1c:ab:72:cd:c4:c5:5f:6b:e8:08:59:6c:
         db:65:c7:92:25:67:ad:72:d7:7c:b9:a9:4b:9a:8b:b3:94:84:
         ff:7b:f5:cc:25:86:ea:34:69:00:cb:8b:97:a3:3c:99:ea:e3:
         12:62:f6:1e:b7:ab:24:d2:84:64:35:c5:9f:26:9a:c9:1e:2a:
         bc:af:65:8a:55:6a:0c:fb:de:67:54:57:1f:51:32:18:dd:db:
         3d:b8:e0:c6:f8:e1:95:54:29:34:28:94:a0:c9:fe:57:40:bc:
         0b:66:47:7f:5f:87:d9:98:0a:4e:11:9e:12:5e:4f:cd:57:41:
         5c:92:c4:7b:f4:f7:ce:1d:f7:1c:bd:36:a5:37:25:99:fe:1f:
         55:ef:d7:b4:19:aa:fa:95:df:c3:6a:24:3b:6b:17:5f:54:e2:
         7a:25:ab:1d:f1:54:20:d6:22:97:76:4b:df:dd:bd:3e:e0:ab:
         08:ed:54:4c:4e:ef:ef:84:0b:5b:79:6d:61:c3:01:df:4f:c4:
         e1:61:db:23:7a:a8:02:f9:8c:8b:63:eb:51:44:c3:8e:d4:27:
         e7:81:7a:7e:c7:64:7f:25:f1:a2:ba:70:eb:72:6b:cd:97:b8:
         bd:52:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:49 2026 by rpki-client