This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa
File:                     3138362e33322e302e302f31382d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          XLJdslNtOVSyPzaZBWGcIdrsJb+TyTJtwQnaYKI/evQ=
Subject key identifier:   7F:B7:2B:7B:54:70:A0:96:06:F9:F4:A2:8C:C4:4D:85:DF:28:8A:6D
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       255DCFAAA1F2831C780599801647845B91C1A0C2
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa
Signing time:             Tue 06 Jan 2026 19:11:07 +0000
ROA not before:           Tue 06 Jan 2026 19:06:07 +0000
ROA not after:            Tue 05 Jan 2027 19:11:07 +0000
asID:                     262197
IP address blocks:        186.32.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:cf:aa:a1:f2:83:1c:78:05:99:80:16:47:84:5b:91:c1:a0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Jan  6 19:06:07 2026 GMT
            Not After : Jan  5 19:11:07 2027 GMT
        Subject: CN=7FB72B7B5470A09606F9F4A28CC44D85DF288A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:cb:9e:37:f5:19:67:48:9f:0d:71:b9:af:
                    9f:7b:27:0b:4b:0f:5c:76:97:3e:d9:cd:88:ae:da:
                    ac:e6:51:4f:70:8a:74:aa:08:e0:7f:f7:ed:ea:1c:
                    31:6e:13:dc:65:8b:20:a5:43:23:c6:dc:d9:4a:38:
                    87:11:3a:8e:71:62:33:2e:54:fb:49:08:8d:22:09:
                    a1:f1:f4:21:a0:bc:ad:29:cc:e2:13:ba:ed:2e:ae:
                    84:76:8f:bd:ab:25:6e:d2:d5:95:75:d4:ab:bb:7f:
                    81:9d:0b:44:a4:63:36:41:ef:61:5f:0c:55:30:51:
                    d9:d8:26:90:40:ad:70:4f:53:50:3f:0e:29:fd:45:
                    e2:f7:95:4f:6d:af:a0:d9:42:7c:98:a8:9c:ff:8e:
                    a9:2d:80:c4:5a:28:56:51:e9:04:b8:8b:0d:84:49:
                    9d:52:98:28:53:99:73:63:ba:29:81:2a:53:58:a1:
                    b3:c6:13:10:09:c0:9f:5f:b9:4e:c7:c4:e9:bc:6a:
                    c9:68:fa:43:f6:ce:56:76:94:fd:e8:22:4f:4f:af:
                    8c:af:34:39:4f:74:dc:09:02:0f:65:b4:78:f2:11:
                    f8:6a:a4:32:bb:f4:2e:bc:47:47:26:a4:a1:1b:d1:
                    3e:32:eb:62:0c:c3:67:04:86:0d:98:6f:a0:b9:ab:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B7:2B:7B:54:70:A0:96:06:F9:F4:A2:8C:C4:4D:85:DF:28:8A:6D
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:80:3f:66:77:57:1b:c1:32:2f:b7:ad:0b:a5:38:ae:31:8d:
         85:fa:4d:da:4a:f2:d9:9a:ec:96:d0:b4:04:92:73:63:4a:67:
         7d:64:68:a1:f4:ed:af:12:c0:55:51:89:f2:ac:2c:2e:8e:6d:
         6d:f8:9a:9b:2d:d2:ea:4e:c4:be:2c:57:c8:1d:72:be:72:a6:
         71:27:01:83:96:e1:53:c0:93:ec:3d:65:9d:8a:4a:aa:33:42:
         73:51:25:74:bb:39:e8:e9:f4:78:97:a6:6d:e9:68:43:81:3f:
         66:fe:b5:9b:6d:01:80:8c:cb:07:ca:ee:3c:7c:05:62:2f:81:
         80:0a:41:1b:1b:ae:26:65:6e:ce:e6:5d:b0:98:f5:cb:eb:0d:
         96:51:f2:23:5a:51:cb:21:01:9d:2d:e6:3f:1c:50:46:65:ef:
         93:b0:e2:02:65:a9:7c:7d:f5:d1:3f:c4:d0:2f:a3:c3:e3:28:
         19:90:2d:40:e3:af:0d:03:ee:c6:2c:76:57:7a:e4:f3:83:23:
         c3:62:87:50:5b:d3:fa:d9:71:73:2b:07:8a:7b:2f:c7:29:40:
         a4:cf:46:83:30:c6:a8:5c:e1:d8:3a:53:34:d1:d0:1a:2a:b5:
         8d:ae:3a:1d:e7:db:c5:10:7c:51:83:cf:d5:b9:07:c8:05:24:
         9a:8e:1f:0a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJV3PqqHygxx4BZmAFkeEW5HBoMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNjAxMDYxOTA2MDdaFw0yNzAxMDUxOTExMDdaMDMxMTAvBgNV
BAMTKDdGQjcyQjdCNTQ3MEEwOTYwNkY5RjRBMjhDQzQ0RDg1REYyODhBNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCreMueN/UZZ0ifDXG5r597JwtL
D1x2lz7ZzYiu2qzmUU9winSqCOB/9+3qHDFuE9xliyClQyPG3NlKOIcROo5xYjMu
VPtJCI0iCaHx9CGgvK0pzOITuu0uroR2j72rJW7S1ZV11Ku7f4GdC0SkYzZB72Ff
DFUwUdnYJpBArXBPU1A/Din9ReL3lU9tr6DZQnyYqJz/jqktgMRaKFZR6QS4iw2E
SZ1SmChTmXNjuimBKlNYobPGExAJwJ9fuU7HxOm8aslo+kP2zlZ2lP3oIk9Pr4yv
NDlPdNwJAg9ltHjyEfhqpDK79C68R0cmpKEb0T4y62IMw2cEhg2Yb6C5q68XAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUf7cre1RwoJYG+fSijMRNhd8oim0wHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzMzMjJlMzAyZTMwMmYz
MTM4MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa6IAAwDQYJ
KoZIhvcNAQELBQADggEBABaAP2Z3VxvBMi+3rQulOK4xjYX6TdpK8tma7JbQtASS
c2NKZ31kaKH07a8SwFVRifKsLC6ObW34mpst0upOxL4sV8gdcr5ypnEnAYOW4VPA
k+w9ZZ2KSqozQnNRJXS7Oejp9HiXpm3paEOBP2b+tZttAYCMywfK7jx8BWIvgYAK
QRsbriZlbs7mXbCY9cvrDZZR8iNaUcshAZ0t5j8cUEZl75Ow4gJlqXx99dE/xNAv
o8PjKBmQLUDjrw0D7sYsdld65PODI8Nih1Bb0/rZcXMrB4p7L8cpQKTPRoMwxqhc
4dg6UzTR0BoqtY2uOh3n28UQfFGDz9W5B8gFJJqOHwo=
-----END CERTIFICATE-----
Generated at Fri Jan 23 16:45:22 2026 by rpki-client