This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3138362e322e3137362e302f32302d3234203d3e203532323333.roa
File:                     3138362e322e3137362e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          08q5HC2PoxsZYg2Gqi3kLhbSeUkjPvF2qQBnudm3sP8=
Subject key identifier:   44:BA:6B:C0:E0:62:C5:19:61:70:16:23:AA:19:E5:41:DF:3B:00:D2
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       06A1089C01904692E4A81C28872E5D8266071BB8
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3138362e322e3137362e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:29:38 +0000
ROA not before:           Tue 06 Jan 2026 19:24:38 +0000
ROA not after:            Tue 05 Jan 2027 19:29:38 +0000
asID:                     52233
IP address blocks:        186.2.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Jan 2026 21:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a1:08:9c:01:90:46:92:e4:a8:1c:28:87:2e:5d:82:66:07:1b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Jan  6 19:24:38 2026 GMT
            Not After : Jan  5 19:29:38 2027 GMT
        Subject: CN=44BA6BC0E062C51961701623AA19E541DF3B00D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:3c:52:e8:13:ba:a5:88:63:5d:01:6c:bf:
                    a2:92:e4:bb:ed:eb:6b:a3:16:7c:0c:b4:cf:7e:2d:
                    75:c3:7d:ce:39:5d:ef:c1:68:2c:85:e4:fe:9e:d7:
                    b2:e4:8f:44:6f:74:5b:b0:fc:fa:11:0f:2e:6e:d2:
                    0e:32:0b:32:63:48:4f:27:3a:0f:3a:30:37:2f:ca:
                    dc:52:89:f2:28:19:f6:f8:e0:d9:e0:a0:66:66:f5:
                    24:44:99:cd:ca:11:5d:8c:b1:29:8d:45:c4:1c:7b:
                    71:9e:24:d9:75:88:fd:d4:75:db:50:34:1d:f6:7d:
                    d1:02:fe:0b:a0:11:52:0c:7d:e0:97:97:19:f3:73:
                    87:3a:83:18:c4:b6:66:37:84:dd:47:70:19:08:ea:
                    c4:98:da:da:aa:fd:65:79:8d:63:0e:d7:a2:cb:a5:
                    3f:ee:2d:4e:02:d5:b4:2d:20:dd:60:3d:de:14:0f:
                    cf:f1:df:70:ce:cb:cd:22:be:03:81:fc:05:81:01:
                    c1:c0:d1:bf:1a:4d:72:c9:b2:57:cf:e8:ce:53:f0:
                    8d:40:d5:45:5d:46:7f:62:3e:66:d7:51:89:0a:e0:
                    47:1b:c0:f5:42:70:b9:28:87:bc:45:0d:df:e1:a4:
                    f8:50:be:f2:3f:f4:a7:7a:5f:62:e5:cb:aa:f2:35:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BA:6B:C0:E0:62:C5:19:61:70:16:23:AA:19:E5:41:DF:3B:00:D2
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3138362e322e3137362e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:64:b9:96:ce:e0:63:ed:eb:dd:44:67:cc:9e:99:08:01:
         c2:8d:4c:64:7b:1e:32:48:8a:0e:19:64:50:ba:09:b6:18:6d:
         20:f5:07:d9:97:12:66:73:df:32:f9:ab:2e:75:1a:dc:5b:92:
         1d:c1:e4:0e:51:52:f0:18:ba:8d:59:56:0c:f7:53:cc:5b:e0:
         33:14:09:49:02:d7:43:32:45:63:b3:30:d4:5b:d6:14:c0:29:
         16:4b:f7:26:91:20:ba:61:5f:7f:3f:51:9a:6c:35:53:cb:0c:
         dd:b4:36:17:56:5f:02:db:ef:d9:24:86:a7:54:99:09:d7:a6:
         98:51:a9:7c:9f:47:95:90:31:d7:7a:3b:00:57:92:f9:6b:77:
         8d:db:ae:03:b8:88:0a:e9:0b:96:24:8d:3f:0c:b8:86:51:ef:
         e9:42:8e:ba:28:32:67:17:cd:f7:7e:41:12:43:ee:78:de:df:
         1d:99:ea:80:a7:3a:ca:b3:8c:f6:2b:f9:98:3c:6d:98:2c:c4:
         1a:f4:4e:41:1e:15:ad:bf:11:3e:c8:d9:97:2e:3e:44:61:df:
         25:86:45:e5:e0:51:eb:69:51:ad:b8:a8:ac:dc:3a:d0:48:06:
         af:75:92:0f:72:03:87:5d:7d:a1:ce:be:4c:7c:87:16:6b:ce:
         cc:65:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 11:01:22 2026 by rpki-client