This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/3138392e3132362e382e302f32332d3234203d3e20323639393536.roa
File:                     3138392e3132362e382e302f32332d3234203d3e20323639393536.roa (raw, json)
Hash identifier:          WsBnKzy99iYqUgIqjRYZbv7JyZ9GJirk+FguH1vsgs8=
Subject key identifier:   65:B5:B6:90:2E:7D:82:2E:65:08:6D:8D:60:A6:F9:3A:CB:97:3C:C3
Certificate issuer:       /CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC
Certificate serial:       0180A56426B10315E7336A447754191D72B00DBC
Authority key identifier: 23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/3138392e3132362e382e302f32332d3234203d3e20323639393536.roa
Signing time:             Tue 06 Jan 2026 19:35:57 +0000
ROA not before:           Tue 06 Jan 2026 19:30:57 +0000
ROA not after:            Tue 05 Jan 2027 19:35:57 +0000
asID:                     269956
IP address blocks:        189.126.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:80:a5:64:26:b1:03:15:e7:33:6a:44:77:54:19:1d:72:b0:0d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231C7B0E3657E4AD8CA43BB2D7947974BC6947DC
        Validity
            Not Before: Jan  6 19:30:57 2026 GMT
            Not After : Jan  5 19:35:57 2027 GMT
        Subject: CN=65B5B6902E7D822E65086D8D60A6F93ACB973CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:96:c2:c0:40:8a:5a:db:3e:a8:de:66:a3:
                    a9:e5:b9:ae:ff:0e:9e:ac:5b:7b:1f:a9:5a:2d:14:
                    a4:9e:7a:2f:f1:bd:49:70:73:f4:89:fe:91:23:f7:
                    94:79:ce:e7:ab:b8:6d:51:8f:4d:a4:7e:01:b7:d4:
                    90:22:a2:37:7d:4e:d4:14:72:b3:db:a7:e5:33:3b:
                    b6:cf:02:f3:85:88:4d:54:1a:fd:0e:01:7c:d9:ff:
                    01:bd:2e:a5:1e:5e:d8:8f:5b:9b:27:ca:1d:d3:82:
                    cf:f8:cb:5f:21:9c:ab:f3:dc:9f:90:8c:e1:fa:65:
                    cc:74:75:66:3d:e0:1e:64:4d:5c:7d:af:cf:76:c7:
                    41:32:69:05:d5:ff:e7:b3:54:b8:6e:1a:e2:a1:f0:
                    47:25:f1:75:09:84:9c:5c:21:c7:cc:aa:d7:e0:b1:
                    e3:0b:ba:b9:28:b6:09:2b:41:bd:49:4f:93:60:83:
                    df:ba:c1:91:b8:0c:54:ea:01:30:10:85:c9:16:77:
                    56:d3:38:aa:e0:48:a1:6a:61:25:83:2a:8a:a3:21:
                    34:a6:3f:be:8f:9a:84:9a:61:b1:be:0b:c0:0c:61:
                    78:68:6f:05:cb:a4:19:d4:19:c4:a4:6c:9b:bc:3a:
                    28:06:70:51:ea:5c:41:70:c8:1e:e2:cc:cf:8a:52:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:B6:90:2E:7D:82:2E:65:08:6D:8D:60:A6:F9:3A:CB:97:3C:C3
            X509v3 Authority Key Identifier:
                keyid:23:1C:7B:0E:36:57:E4:AD:8C:A4:3B:B2:D7:94:79:74:BC:69:47:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231C7B0E3657E4AD8CA43BB2D7947974BC6947DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDAD036C2736E5CADA4331BBAE197BB2EAF2E0629446A4C244B350CFE83AD517/0/3138392e3132362e382e302f32332d3234203d3e20323639393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:59:60:13:ca:81:92:e8:b0:c1:1f:9c:9d:0f:2b:60:0b:bb:
         39:15:5f:8b:f9:1d:90:9e:cc:95:f4:fd:41:f8:3e:87:9b:79:
         66:32:7f:f2:5b:87:b2:e3:ab:6a:83:63:94:85:17:60:30:86:
         f2:7c:77:3f:99:d2:98:32:9e:c8:f9:03:4d:f4:b9:64:b5:de:
         6a:80:8e:c7:22:0f:05:d0:16:0c:fa:0f:11:2d:ba:d9:61:32:
         8d:c2:30:02:0f:69:ad:cf:80:11:4b:1e:28:31:58:53:3f:60:
         b5:d8:52:41:08:67:f9:7f:6f:50:8d:f3:cc:fb:4f:86:b9:2f:
         6f:12:5c:03:a3:f1:d2:e4:30:3c:7d:5a:f1:cc:ce:33:e8:72:
         d4:11:57:02:f5:85:b7:b1:88:73:9d:37:7c:4d:39:5a:d4:5a:
         01:57:19:01:45:08:59:e9:6e:35:fc:c6:0b:19:76:3a:1d:74:
         ec:66:6d:20:14:32:0d:1d:c0:b8:c8:c1:e4:64:ad:13:2d:70:
         48:df:38:3c:b1:f6:f3:a6:f4:88:b1:02:1d:b9:60:27:e2:3d:
         e9:57:48:dc:b1:f6:ce:3a:0c:4b:76:53:64:91:73:b1:3c:48:
         96:ff:2d:bb:bf:c2:ee:3a:8d:38:34:53:cc:84:9a:fa:bb:0f:
         34:e9:d8:bd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAYClZCaxAxXnM2pEd1QZHXKwDbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxQzdCMEUzNjU3RTRBRDhDQTQzQkIyRDc5NDc5NzRC
QzY5NDdEQzAeFw0yNjAxMDYxOTMwNTdaFw0yNzAxMDUxOTM1NTdaMDMxMTAvBgNV
BAMTKDY1QjVCNjkwMkU3RDgyMkU2NTA4NkQ4RDYwQTZGOTNBQ0I5NzNDQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA35bCwECKWts+qN5mo6nlua7/
Dp6sW3sfqVotFKSeei/xvUlwc/SJ/pEj95R5zueruG1Rj02kfgG31JAiojd9TtQU
crPbp+UzO7bPAvOFiE1UGv0OAXzZ/wG9LqUeXtiPW5snyh3Tgs/4y18hnKvz3J+Q
jOH6Zcx0dWY94B5kTVx9r892x0EyaQXV/+ezVLhuGuKh8Ecl8XUJhJxcIcfMqtfg
seMLurkotgkrQb1JT5Ngg9+6wZG4DFTqATAQhckWd1bTOKrgSKFqYSWDKoqjITSm
P76PmoSaYbG+C8AMYXhobwXLpBnUGcSkbJu8OigGcFHqXEFwyB7izM+KUtcFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZbW2kC59gi5lCG2NYKb5OsuXPMMwHwYDVR0j
BBgwFoAUIxx7DjZX5K2MpDuy15R5dLxpR9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DREFEMDM2QzI3MzZFNUNBREE0MzMxQkJBRTE5N0JCMkVB
RjJFMDYyOTQ0NkE0QzI0NEIzNTBDRkU4M0FENTE3LzAvMjMxQzdCMEUzNjU3RTRB
RDhDQTQzQkIyRDc5NDc5NzRCQzY5NDdEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzFDN0IwRTM2NTdFNEFEOENB
NDNCQjJENzk0Nzk3NEJDNjk0N0RDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0RBRDAzNkMyNzM2RTVDQURBNDMzMUJCQUUxOTdCQjJFQUYyRTA2Mjk0
NDZBNEMyNDRCMzUwQ0ZFODNBRDUxNy8wLzMxMzgzOTJlMzEzMjM2MmUzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb1+CDAN
BgkqhkiG9w0BAQsFAAOCAQEAMllgE8qBkuiwwR+cnQ8rYAu7ORVfi/kdkJ7MlfT9
Qfg+h5t5ZjJ/8luHsuOraoNjlIUXYDCG8nx3P5nSmDKeyPkDTfS5ZLXeaoCOxyIP
BdAWDPoPES262WEyjcIwAg9prc+AEUseKDFYUz9gtdhSQQhn+X9vUI3zzPtPhrkv
bxJcA6Px0uQwPH1a8czOM+hy1BFXAvWFt7GIc503fE05WtRaAVcZAUUIWeluNfzG
Cxl2Oh107GZtIBQyDR3AuMjB5GStEy1wSN84PLH286b0iLECHblgJ+I96VdI3LH2
zjoMS3ZTZJFzsTxIlv8tu7/C7jqNODRTzISa+rsPNOnYvQ==
-----END CERTIFICATE-----
Generated at Wed Jan 7 10:07:06 2026 by rpki-client