This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa
File:                     3138362e3137372e302e302f31372d3234203d3e203230323939.roa (raw, json)
Hash identifier:          EOtCXMualv200jJ9FScwhLCOI8NZZ/SqaE/Tfi3hX+Y=
Subject key identifier:   CB:EC:C9:B6:01:B0:1D:5B:EC:EE:B4:03:6C:E6:A7:CA:76:B4:5F:57
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       6F6F6AA40F0D33481C3A62CB177B54AFC6A764D0
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa
Signing time:             Tue 06 Jan 2026 19:11:15 +0000
ROA not before:           Tue 06 Jan 2026 19:06:15 +0000
ROA not after:            Tue 05 Jan 2027 19:11:15 +0000
asID:                     20299
IP address blocks:        186.177.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6f:6a:a4:0f:0d:33:48:1c:3a:62:cb:17:7b:54:af:c6:a7:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Jan  6 19:06:15 2026 GMT
            Not After : Jan  5 19:11:15 2027 GMT
        Subject: CN=CBECC9B601B01D5BECEEB4036CE6A7CA76B45F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:49:64:64:53:4c:fc:99:75:c2:79:0e:08:
                    66:45:fa:67:d8:1f:48:26:4a:23:01:4a:2c:a7:00:
                    f2:9e:b5:d1:45:05:4f:35:ac:b8:9f:62:20:be:7c:
                    25:00:fc:d7:5d:0a:c2:b6:67:3b:ce:dc:da:43:06:
                    cc:ed:e8:12:30:9e:b5:68:52:a5:08:2d:22:fa:3c:
                    3e:54:6f:19:f5:0b:8b:81:d8:1c:ad:ff:f4:f6:2e:
                    9a:08:3a:ab:0d:ef:dc:8d:38:46:2c:b3:e8:c2:0c:
                    c9:b1:77:ba:04:cc:83:3a:09:6e:6a:63:d0:2a:e6:
                    b9:31:99:72:6f:3c:92:a2:8c:45:75:49:9c:21:39:
                    29:c4:af:18:93:da:07:5f:b7:14:68:6b:05:07:ca:
                    31:dd:48:15:ea:55:81:29:af:1c:3b:0e:1b:22:10:
                    30:2e:ca:3e:a9:8e:de:a4:cc:16:81:cc:78:22:8c:
                    81:fa:ef:d6:f7:f9:d4:d0:6f:5b:2c:f1:17:bd:cf:
                    44:18:7b:1a:a1:32:40:34:3d:73:e9:29:46:f4:7f:
                    87:86:b6:45:b4:d1:83:e8:72:53:a2:94:e3:23:0e:
                    df:3e:5f:68:96:07:fb:10:77:58:81:ef:98:3c:dd:
                    25:84:2c:79:24:85:d8:a7:36:0c:b3:48:d7:c2:7d:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EC:C9:B6:01:B0:1D:5B:EC:EE:B4:03:6C:E6:A7:CA:76:B4:5F:57
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:5c:f1:00:a0:a5:5f:e7:4b:f5:75:cd:08:16:03:a8:e4:
         f7:6b:95:05:48:b4:90:63:85:d4:5c:64:30:67:cf:73:4d:47:
         b8:b0:ef:e4:b6:e0:7f:d7:5f:10:af:15:0a:2a:d9:ac:40:2b:
         ad:35:e5:1c:74:f2:e7:65:1c:ce:c1:10:ec:08:a1:ea:f1:41:
         16:b7:45:74:67:6f:08:ca:08:18:06:44:e5:36:88:5d:77:5b:
         36:0a:82:e4:38:27:73:d1:9f:c8:d6:7e:95:90:18:57:d2:b7:
         b5:6b:a8:9e:d4:50:3f:24:a5:f7:d3:d4:ff:94:cf:a8:5d:7c:
         d5:82:01:6d:56:4d:e5:97:fb:c2:ed:ae:de:28:2a:fe:43:9a:
         fc:dd:b2:65:4f:a8:8b:4c:79:6f:85:c1:f2:17:1c:f5:c7:41:
         7d:fc:49:69:4a:98:74:ea:65:c9:07:a4:aa:aa:da:59:15:ce:
         87:ae:7d:bc:1d:1b:18:4b:06:f5:e4:7b:15:69:fc:4b:74:a9:
         fb:ce:98:66:69:24:72:c1:13:33:dd:75:16:e6:d7:9e:f8:5c:
         df:5d:8d:ae:8e:b4:de:fc:ae:8b:89:e2:11:ab:6f:d6:91:10:
         4f:81:91:2c:69:86:32:2f:f8:99:ed:3e:b6:5c:60:fe:4e:09:
         0a:65:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 16:45:29 2026 by rpki-client