This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa
File:                     3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa (raw, json)
Hash identifier:          Pfno+UZTr4elWcf44LmOO87uxytEz4cSMZJr1ChOFok=
Subject key identifier:   49:8A:42:28:E3:B5:E4:E5:1A:76:06:6E:E6:1C:58:3C:F4:6F:A5:83
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       1DADBEEB0B0231444A262ED22C77D4E72404C093
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa
Signing time:             Tue 06 Jan 2026 19:05:21 +0000
ROA not before:           Tue 06 Jan 2026 19:00:21 +0000
ROA not after:            Tue 05 Jan 2027 19:05:21 +0000
asID:                     28114
IP address blocks:        186.183.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 16:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:be:eb:0b:02:31:44:4a:26:2e:d2:2c:77:d4:e7:24:04:c0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Jan  6 19:00:21 2026 GMT
            Not After : Jan  5 19:05:21 2027 GMT
        Subject: CN=498A4228E3B5E4E51A76066EE61C583CF46FA583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:99:c1:76:83:5b:fa:82:1d:11:f1:0c:cf:
                    89:db:d5:a8:7a:de:01:5e:72:eb:7e:66:fd:fe:63:
                    70:81:29:4f:22:55:39:7a:bb:dd:a7:fd:cb:24:1c:
                    ff:b4:c7:05:78:12:c0:b8:43:8d:bd:ed:ca:0c:27:
                    5d:d4:02:6d:58:35:15:0c:c1:77:8d:f1:15:fd:d9:
                    41:e6:8b:9b:aa:8c:b2:fb:00:58:37:b0:32:25:02:
                    86:8f:27:00:02:4d:6c:4a:64:d0:a7:e5:3d:37:2d:
                    f1:fc:82:c9:64:66:a3:72:8b:53:03:9d:88:ee:84:
                    93:84:6a:c4:6d:71:cb:23:76:d9:34:31:9d:18:b1:
                    80:57:d6:7a:95:74:6f:7c:52:09:09:cc:ca:93:cb:
                    ae:ad:72:98:11:56:d3:c6:ee:e2:a0:1e:74:0b:07:
                    5d:a9:7d:26:ca:ac:e6:ff:48:1d:04:f3:0a:0b:1a:
                    fa:ca:6b:26:8e:11:ab:42:30:50:aa:a7:f6:5d:51:
                    ee:54:b5:9d:53:4c:c6:50:85:a8:f1:27:9a:84:5d:
                    1e:5c:d8:14:7d:5f:12:df:82:99:8b:a4:97:08:22:
                    23:87:28:4d:9f:b7:22:30:8a:b4:3e:88:f1:a3:ca:
                    ba:86:2c:bd:0a:ee:5f:a8:b3:83:6a:91:d7:a6:a8:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:42:28:E3:B5:E4:E5:1A:76:06:6E:E6:1C:58:3C:F4:6F:A5:83
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138362e3138332e3132302e302f32312d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:02:9d:c2:80:90:2e:9d:4f:23:ce:4c:1d:7e:ab:52:10:29:
         63:98:3c:8c:cf:bd:75:b2:12:d3:f2:8e:b8:10:ef:36:0b:11:
         02:f1:09:f4:e5:8b:ef:26:df:bf:31:ea:52:13:24:92:0c:45:
         ec:b6:ea:83:c8:41:3a:7c:4c:cd:56:b0:ca:54:91:91:7e:f0:
         4a:76:ac:c3:d6:a5:1f:1b:2d:7f:f7:46:2d:4b:a2:16:29:2b:
         19:60:4f:54:80:f3:7f:38:cd:03:36:40:db:b4:88:95:ec:2f:
         8e:b3:44:c5:0e:47:4c:30:9b:e1:83:00:ce:af:dd:ce:cb:ef:
         f2:35:7e:6b:b5:62:01:eb:63:6c:03:64:5a:a0:17:bd:ed:10:
         98:44:d2:a5:26:7e:ab:91:1a:11:ce:b6:27:e9:09:2d:99:cc:
         7e:bc:4a:8b:97:ad:ed:74:6e:6f:5e:d6:e3:a8:a1:28:b3:e6:
         0a:16:67:eb:1a:fb:03:e4:9c:03:8b:08:01:61:39:8c:5a:f4:
         b5:88:68:3e:84:31:1e:0f:95:e4:79:34:69:24:14:95:b6:31:
         6e:d3:58:40:c6:24:2b:65:d5:5f:69:f1:48:86:0e:05:2c:5e:
         4f:60:f8:f3:95:69:e9:59:0e:fa:0b:13:ae:a6:48:8a:4b:13:
         48:5a:1b:a2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHa2+6wsCMURKJi7SLHfU5yQEwJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIwN0JEMzFBRDMzMzU1NzM3NzVBOTU1MjE4N0M4REE0
NkM1OTcxQzAeFw0yNjAxMDYxOTAwMjFaFw0yNzAxMDUxOTA1MjFaMDMxMTAvBgNV
BAMTKDQ5OEE0MjI4RTNCNUU0RTUxQTc2MDY2RUU2MUM1ODNDRjQ2RkE1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxupnBdoNb+oIdEfEMz4nb1ah6
3gFecut+Zv3+Y3CBKU8iVTl6u92n/cskHP+0xwV4EsC4Q4297coMJ13UAm1YNRUM
wXeN8RX92UHmi5uqjLL7AFg3sDIlAoaPJwACTWxKZNCn5T03LfH8gslkZqNyi1MD
nYjuhJOEasRtccsjdtk0MZ0YsYBX1nqVdG98UgkJzMqTy66tcpgRVtPG7uKgHnQL
B12pfSbKrOb/SB0E8woLGvrKayaOEatCMFCqp/ZdUe5UtZ1TTMZQhajxJ5qEXR5c
2BR9XxLfgpmLpJcIIiOHKE2ftyIwirQ+iPGjyrqGLL0K7l+os4NqkdemqEz1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSYpCKOO15OUadgZu5hxYPPRvpYMwHwYDVR0j
BBgwFoAUawe9Ma0zNVc3dalVIYfI2kbFlxwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMzczNkQ1RDVFMzkzODc1NDU3RDg4NTc2RTQ3QjA4QTcw
QUE5NUVDRTRGRERFNUY2QzA3RjE2QzhGN0U1NTNFLzAvNkIwN0JEMzFBRDMzMzU1
NzM3NzVBOTU1MjE4N0M4REE0NkM1OTcxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QjA3QkQzMUFEMzMzNTU3Mzc3
NUE5NTUyMTg3QzhEQTQ2QzU5NzFDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzM3MzZENUQ1RTM5Mzg3NTQ1N0Q4ODU3NkU0N0IwOEE3MEFBOTVFQ0U0
RkRERTVGNkMwN0YxNkM4RjdFNTUzRS8wLzMxMzgzNjJlMzEzODMzMmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4MzEzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDurd4
MA0GCSqGSIb3DQEBCwUAA4IBAQCSAp3CgJAunU8jzkwdfqtSECljmDyMz711shLT
8o64EO82CxEC8Qn05YvvJt+/MepSEySSDEXstuqDyEE6fEzNVrDKVJGRfvBKdqzD
1qUfGy1/90YtS6IWKSsZYE9UgPN/OM0DNkDbtIiV7C+Os0TFDkdMMJvhgwDOr93O
y+/yNX5rtWIB62NsA2RaoBe97RCYRNKlJn6rkRoRzrYn6Qktmcx+vEqLl63tdG5v
XtbjqKEos+YKFmfrGvsD5JwDiwgBYTmMWvS1iGg+hDEeD5XkeTRpJBSVtjFu01hA
xiQrZdVfafFIhg4FLF5PYPjzlWnpWQ76CxOupkiKSxNIWhui
-----END CERTIFICATE-----
Generated at Fri Jan 9 23:48:31 2026 by rpki-client