This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230382e302e302f31362d3234203d3e2036353033.roa
File:                     3138392e3230382e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          gP7ZVn67pd6HPAWsncHiPMVsTMTNxO5BGBZ5N47aupI=
Subject key identifier:   88:7F:DF:6C:DF:2C:64:40:40:0C:21:83:C5:84:1E:44:95:2E:00:46
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       12C5DB0B843B28A38139D0562D2970456C449E1E
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230382e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 06 Jan 2026 19:14:54 +0000
ROA not before:           Tue 06 Jan 2026 19:09:54 +0000
ROA not after:            Tue 05 Jan 2027 19:14:54 +0000
asID:                     6503
IP address blocks:        189.208.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c5:db:0b:84:3b:28:a3:81:39:d0:56:2d:29:70:45:6c:44:9e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:54 2026 GMT
            Not After : Jan  5 19:14:54 2027 GMT
        Subject: CN=887FDF6CDF2C6440400C2183C5841E44952E0046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:d9:0b:8f:b2:b6:fe:d5:dc:e6:84:72:5d:
                    fa:bf:6a:bc:8f:84:46:1d:39:c1:77:f1:84:e0:67:
                    b9:12:94:84:d8:e2:cd:b1:60:28:f2:0f:2b:ee:24:
                    fb:da:93:bf:87:77:a0:48:e8:98:84:f8:9d:41:2a:
                    8f:8c:6f:87:a1:1e:f4:01:24:ca:b5:ec:ce:9c:5a:
                    53:4d:3f:7c:7b:80:fe:80:8f:d9:50:aa:4d:16:3d:
                    b3:5f:ef:e3:eb:3c:a0:a3:15:b0:0e:3a:4f:64:8f:
                    04:6a:83:7c:de:d2:6a:3a:2c:6d:86:c6:9d:6a:04:
                    81:e1:48:1a:4b:eb:ac:2e:21:30:04:de:8f:d3:48:
                    8e:52:6c:77:a2:3e:2a:2d:d2:1d:5e:65:a4:59:75:
                    f2:10:22:f1:95:55:c0:85:2e:c9:84:7f:ce:2f:78:
                    20:40:cf:40:18:a1:c5:02:06:94:43:aa:a4:da:28:
                    c9:a3:c0:3b:01:0c:03:9a:92:7c:a9:b8:4c:88:4e:
                    73:11:1e:89:31:1e:5f:dd:7a:9b:1c:05:6f:e8:5c:
                    c0:dd:3d:e9:c5:ea:9d:8d:a7:09:4f:dc:cb:b1:6a:
                    4a:a9:70:b3:c9:9c:cd:7b:16:68:1d:51:e0:44:b0:
                    b4:fa:bc:79:ae:c1:9b:b1:28:09:e3:54:a5:d8:5a:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7F:DF:6C:DF:2C:64:40:40:0C:21:83:C5:84:1E:44:95:2E:00:46
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3138392e3230382e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:63:3c:bb:8c:6b:a2:ad:bc:dd:6a:a7:59:fc:41:c1:1f:74:
         52:4f:b5:d3:7c:e4:9d:1d:65:a3:ad:cd:b6:4c:2c:d8:30:60:
         63:c0:d5:99:64:ab:8d:55:30:a4:0f:5a:ad:e2:3e:39:69:0d:
         0d:f3:90:94:e1:25:9b:e1:1f:89:f2:db:7c:b2:33:86:da:df:
         31:cd:36:74:ad:94:b5:6c:40:7c:49:d5:ab:fe:4c:fa:dd:b3:
         4f:e5:30:bb:2d:bc:7b:08:ae:aa:cc:7f:01:fb:31:5d:15:8f:
         62:61:87:ee:a4:70:a4:3f:47:5e:78:bf:e2:94:14:90:90:26:
         f6:0d:67:41:5c:c6:ad:25:8d:2f:52:e6:b8:f6:3a:59:95:98:
         84:d3:ee:97:1e:ed:8d:c6:85:f6:9a:c0:37:07:62:7c:af:dc:
         88:75:3d:5a:19:b1:25:09:c5:54:48:34:72:cd:98:31:7a:98:
         fa:5b:9f:10:12:b8:4b:6d:9b:0f:ec:07:52:01:d3:a5:4e:95:
         16:75:ed:6d:b3:d1:b7:a3:f3:15:a1:6b:49:ba:25:54:52:89:
         f1:e3:f2:53:3a:2f:c2:67:52:80:67:f6:74:90:eb:5d:53:2c:
         17:ef:68:66:7a:6c:00:f4:4e:9c:d1:b9:c6:da:b9:4b:90:d5:
         bd:e3:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:10:27 2026 by rpki-client