This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa
File:                     3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          Wa0pk4XHN6AADPh/CgC7KKEXxGrpNe4QiO7qPC3HbkA=
Subject key identifier:   EC:B5:86:E3:F7:FE:DF:57:3C:16:F7:77:E4:2C:25:52:04:B7:47:F4
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7FB3DE68BA31C46A356ACA839CAECF05E957EAB1
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 06 Jan 2026 20:51:57 +0000
ROA not before:           Tue 06 Jan 2026 20:46:57 +0000
ROA not after:            Tue 05 Jan 2027 20:51:57 +0000
asID:                     7004
IP address blocks:        186.103.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b3:de:68:ba:31:c4:6a:35:6a:ca:83:9c:ae:cf:05:e9:57:ea:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Jan  6 20:46:57 2026 GMT
            Not After : Jan  5 20:51:57 2027 GMT
        Subject: CN=ECB586E3F7FEDF573C16F777E42C255204B747F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:de:23:6e:2d:1e:57:89:f4:fe:8c:e8:8d:
                    84:fa:ac:9c:2c:c7:e9:d9:90:5e:40:ff:2b:dd:19:
                    5b:ac:3a:7e:cf:a1:7f:ce:ec:69:88:e9:1a:b3:f5:
                    82:c1:27:75:e5:e6:82:9e:13:cd:80:f7:a8:b9:4d:
                    91:1d:57:25:b8:ef:f8:34:27:84:e5:d2:b0:57:f2:
                    66:66:8e:6d:02:d6:91:dd:e6:33:94:9b:13:12:bb:
                    64:8d:f0:a1:74:71:01:6e:b4:bc:bf:70:28:81:a6:
                    de:68:92:ee:d3:e4:eb:01:68:93:33:59:88:23:89:
                    fd:7f:02:21:82:ec:0e:d0:a9:40:21:0a:6d:2b:0e:
                    5c:93:a1:e9:7f:5d:7a:e5:36:8e:1e:e3:42:ec:40:
                    6d:a8:56:9a:0e:c7:b1:38:f8:1a:c8:47:4c:3a:7e:
                    1d:1e:9d:34:b0:21:89:de:a6:87:26:fe:9d:22:ff:
                    c6:2b:a5:f5:4e:44:72:42:a5:0d:6a:cb:3b:43:01:
                    bb:62:c7:f1:39:81:c7:12:fe:f3:8e:52:45:47:e3:
                    41:f6:21:f8:7b:3a:65:4a:36:3a:b4:be:20:fb:aa:
                    70:b7:3c:fd:a8:9d:33:27:4a:93:0b:4f:fe:5f:85:
                    14:62:1f:28:17:30:5c:2a:47:b5:c4:bd:c8:28:ca:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:86:E3:F7:FE:DF:57:3C:16:F7:77:E4:2C:25:52:04:B7:47:F4
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3138362e3130332e3135362e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.103.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:bb:1f:64:79:b7:3c:da:18:8c:34:b6:55:68:c7:6f:00:8e:
         71:3a:9a:f7:3c:bb:46:02:26:d9:56:1e:89:3b:c4:b1:1d:af:
         53:91:bc:90:d0:47:6a:99:a7:65:64:36:19:06:91:94:20:63:
         0b:0b:ce:4f:78:6c:6b:e3:28:eb:90:a8:7a:3b:11:c6:de:7e:
         1f:30:9a:4a:6f:d4:df:47:2c:06:b5:54:3f:e9:60:e1:62:53:
         23:2e:2d:cf:79:6e:02:1a:d5:bf:27:36:f1:23:1c:41:9a:13:
         1f:4f:ff:52:86:15:15:44:49:72:12:cf:16:a7:4a:db:01:a9:
         29:86:03:0e:dc:18:b7:fa:54:03:b6:1c:ea:27:02:58:f7:2c:
         27:7e:34:e5:0b:2d:c6:c1:8d:66:90:19:8a:d8:f3:b9:35:e6:
         b8:db:48:3a:32:b8:b2:11:71:10:8d:6d:ac:d0:c8:0f:f0:ff:
         66:0d:87:78:ea:e2:e6:f7:88:13:d3:77:21:2b:7a:90:a5:03:
         f6:6b:70:4f:a8:5f:69:9c:e2:5d:31:d8:47:64:37:60:e2:2b:
         18:e4:7e:2e:ce:19:cc:fc:08:ae:8f:b3:6a:77:98:50:11:27:
         81:db:05:38:c3:62:2d:41:3a:4b:30:15:f5:21:26:2e:b8:d3:
         2a:ca:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 11:33:27 2026 by rpki-client