This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa
File:                     3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa (raw, json)
Hash identifier:          G+Ynd1ss25n1MX3jwQGIxXGqxEyCU44YE2uSE4M7x9I=
Subject key identifier:   6A:A5:E1:B9:87:79:66:15:B8:E4:B4:04:85:EC:4D:0C:AD:DD:BA:AE
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       5290C84AB2756A5062ADA84F41A82133709E6C86
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa
Signing time:             Tue 06 Jan 2026 19:44:25 +0000
ROA not before:           Tue 06 Jan 2026 19:39:25 +0000
ROA not after:            Tue 05 Jan 2027 19:44:25 +0000
asID:                     10778
IP address blocks:        168.196.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:90:c8:4a:b2:75:6a:50:62:ad:a8:4f:41:a8:21:33:70:9e:6c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Jan  6 19:39:25 2026 GMT
            Not After : Jan  5 19:44:25 2027 GMT
        Subject: CN=6AA5E1B987796615B8E4B40485EC4D0CADDDBAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:ad:29:4c:71:d8:81:9c:d9:6a:ef:88:ba:
                    24:9e:81:69:78:3f:96:ae:b7:46:28:45:18:06:00:
                    68:e8:75:34:87:23:94:66:b3:24:13:dd:a6:fe:bf:
                    f4:e2:33:b1:38:c0:4b:22:31:e3:fa:05:31:6b:7b:
                    34:28:af:f4:96:f0:4d:a9:f4:4f:b3:dc:1b:f1:5a:
                    21:aa:52:4b:f5:8a:b9:f6:9b:f0:73:91:7d:42:df:
                    e0:10:34:96:9a:52:c1:b7:a0:79:ef:c0:8d:0f:2a:
                    64:06:27:c6:6b:b6:34:c9:f8:af:77:a2:50:f1:a5:
                    10:2d:cb:7e:ac:4c:8d:38:db:c5:e2:e0:03:aa:b6:
                    44:79:36:3e:2f:b4:d6:b7:a7:df:bf:41:5e:4d:72:
                    5f:1d:e5:52:48:d5:c5:6a:35:ec:df:d0:fd:4f:2f:
                    d3:86:30:b9:34:ea:aa:da:52:42:7d:51:6f:90:65:
                    06:25:83:7f:d0:ad:1c:79:4a:5b:d1:b2:29:5e:f6:
                    ea:bb:66:e0:5a:18:31:f1:c9:cc:91:c3:6b:8e:be:
                    43:6e:82:d9:9a:b2:18:39:74:24:d8:41:32:d9:99:
                    92:20:a0:fd:14:4f:07:18:4f:8e:76:a4:7a:49:37:
                    ca:ad:25:ea:c0:54:20:83:fc:81:1f:07:4b:d0:c6:
                    ec:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A5:E1:B9:87:79:66:15:B8:E4:B4:04:85:EC:4D:0C:AD:DD:BA:AE
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32332d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:6f:53:65:53:ce:11:c7:7f:f4:b5:d2:11:ab:ae:94:8c:
         44:84:7e:ce:ea:c8:d2:6b:59:f3:dd:e5:9b:29:d0:0c:6a:cf:
         c4:44:02:9f:d8:b4:ad:cd:bd:e7:62:f1:e9:9b:38:6b:30:be:
         56:b5:c1:fc:df:2c:de:11:38:b9:f5:b7:ff:30:2a:c8:55:41:
         9b:6d:e2:d4:ce:ad:3b:7f:8b:e4:e8:88:df:a5:d7:56:da:c2:
         fa:c8:cb:49:d9:65:b5:16:ea:9a:62:87:aa:26:5e:5e:84:5b:
         6a:b4:79:68:df:21:38:7c:c6:8c:fe:4e:89:35:74:a0:8a:a6:
         7b:d9:d0:4f:05:fc:a2:1f:05:55:0a:a4:8d:98:90:c1:a0:a9:
         55:15:99:a2:29:2f:fe:ef:76:62:c2:44:23:f9:15:18:f0:e6:
         50:99:a1:60:65:96:27:69:3b:ff:9b:b8:d0:ad:f8:e7:a2:81:
         ac:a1:d7:6a:f1:08:29:87:31:83:c3:ac:62:b9:70:8b:f4:27:
         c3:00:ef:74:77:e8:cf:4e:dd:ea:10:bd:0c:8e:f4:76:0c:83:
         d8:d5:6c:0f:a4:45:15:69:78:a9:09:36:91:d2:21:3f:bf:30:
         1d:23:5d:7a:9f:d6:a8:7c:6f:f9:79:ed:d6:5f:f8:c6:e0:d0:
         9f:c6:8f:82
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUpDISrJ1alBirahPQaghM3CebIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGRTE5RDY4RkNEOEUyRjQ2RDc2MzJENDJFNjM3M0Mx
NDhCNDZFNDAeFw0yNjAxMDYxOTM5MjVaFw0yNzAxMDUxOTQ0MjVaMDMxMTAvBgNV
BAMTKDZBQTVFMUI5ODc3OTY2MTVCOEU0QjQwNDg1RUM0RDBDQUREREJBQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Sa0pTHHYgZzZau+IuiSegWl4
P5aut0YoRRgGAGjodTSHI5RmsyQT3ab+v/TiM7E4wEsiMeP6BTFrezQor/SW8E2p
9E+z3BvxWiGqUkv1irn2m/BzkX1C3+AQNJaaUsG3oHnvwI0PKmQGJ8ZrtjTJ+K93
olDxpRAty36sTI0428Xi4AOqtkR5Nj4vtNa3p9+/QV5Ncl8d5VJI1cVqNezf0P1P
L9OGMLk06qraUkJ9UW+QZQYlg3/QrRx5SlvRsile9uq7ZuBaGDHxycyRw2uOvkNu
gtmashg5dCTYQTLZmZIgoP0UTwcYT452pHpJN8qtJerAVCCD/IEfB0vQxuwnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUaqXhuYd5ZhW45LQEhexNDK3duq4wHwYDVR0j
BBgwFoAU4f4Z1o/Nji9G12MtQuY3PBSLRuQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQkFFM0YyNjUzODI1RUE0Q0RFNkI5MDdEQTk1RENGOTI2
MDk0QUMwNjg2MDRDMTNEMUI0M0EwODc0OENENDU1LzAvRTFGRTE5RDY4RkNEOEUy
RjQ2RDc2MzJENDJFNjM3M0MxNDhCNDZFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMUZFMTlENjhGQ0Q4RTJGNDZE
NzYzMkQ0MkU2MzczQzE0OEI0NkU0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0JBRTNGMjY1MzgyNUVBNENERTZCOTA3REE5NURDRjkyNjA5NEFDMDY4
NjA0QzEzRDFCNDNBMDg3NDhDRDQ1NS8wLzMxMzYzODJlMzEzOTM2MmUzMTM4MzYy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMwMzczNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMS6
MA0GCSqGSIb3DQEBCwUAA4IBAQAOYG9TZVPOEcd/9LXSEauulIxEhH7O6sjSa1nz
3eWbKdAMas/ERAKf2LStzb3nYvHpmzhrML5WtcH83yzeETi59bf/MCrIVUGbbeLU
zq07f4vk6IjfpddW2sL6yMtJ2WW1FuqaYoeqJl5ehFtqtHlo3yE4fMaM/k6JNXSg
iqZ72dBPBfyiHwVVCqSNmJDBoKlVFZmiKS/+73ZiwkQj+RUY8OZQmaFgZZYnaTv/
m7jQrfjnooGsoddq8QgphzGDw6xiuXCL9CfDAO90d+jPTt3qEL0MjvR2DIPY1WwP
pEUVaXipCTaR0iE/vzAdI116n9aofG/5ee3WX/jG4NCfxo+C
-----END CERTIFICATE-----
Generated at Sat Jan 24 02:43:58 2026 by rpki-client