This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f31352d3135203d3e2036333036.roa
File:                     3138362e3136342e302e302f31352d3135203d3e2036333036.roa (raw, json)
Hash identifier:          hszZjaiT4PPyVTwO3INKdkODx84oGaS335rXIp4eZAw=
Subject key identifier:   BB:5D:A6:BE:38:17:BC:CB:E1:93:F2:1F:FE:A1:0E:64:C7:0A:3C:20
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6F913E978D591799CE0AB1AAA4A26F4CE1D41635
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f31352d3135203d3e2036333036.roa
Signing time:             Tue 27 Jan 2026 20:30:01 +0000
ROA not before:           Tue 27 Jan 2026 20:25:01 +0000
ROA not after:            Tue 26 Jan 2027 20:30:01 +0000
asID:                     6306
IP address blocks:        186.164.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:91:3e:97:8d:59:17:99:ce:0a:b1:aa:a4:a2:6f:4c:e1:d4:16:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 27 20:25:01 2026 GMT
            Not After : Jan 26 20:30:01 2027 GMT
        Subject: CN=BB5DA6BE3817BCCBE193F21FFEA10E64C70A3C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:53:93:bb:0b:42:3f:99:4b:97:08:da:90:
                    9a:2e:58:55:41:45:a6:a0:03:4c:86:46:15:3c:5c:
                    a2:4a:40:8c:6a:bb:03:69:9d:d9:32:e6:dd:8a:1a:
                    ba:b7:c4:e6:16:bf:be:d6:2c:65:9d:15:7c:2e:ef:
                    0e:cb:2e:d7:d5:d0:1e:2f:de:41:c1:61:ac:65:b5:
                    a2:5b:c4:e4:82:b7:86:e5:0e:02:0e:32:71:f9:5a:
                    2e:cc:16:a2:91:f1:6b:8f:d9:33:77:ec:f5:5e:ce:
                    1b:5c:11:40:2e:38:ac:6b:69:91:18:dd:75:a7:fd:
                    04:1a:f3:6e:59:d0:38:78:73:be:11:9b:7f:d9:29:
                    22:57:9c:be:03:73:5a:83:83:91:3e:1c:8e:d8:08:
                    fc:c2:3c:0d:2a:b2:70:d5:08:86:95:e3:5c:60:5b:
                    b8:9f:f7:14:e5:ce:06:c2:59:74:42:f3:7f:dc:0f:
                    27:45:92:d3:a0:1c:58:57:05:ad:d9:92:dc:d1:7c:
                    31:1d:f5:e8:da:c2:69:67:f1:28:a6:28:c3:6f:fa:
                    1c:0d:f7:60:ca:ec:32:24:38:b0:b6:4d:08:b4:d8:
                    c2:56:87:c7:13:f3:63:81:9c:33:43:a4:7e:9c:38:
                    e2:ce:37:93:8f:0b:c8:73:d0:98:f8:6d:26:04:49:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:A6:BE:38:17:BC:CB:E1:93:F2:1F:FE:A1:0E:64:C7:0A:3C:20
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f31352d3135203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:d3:28:6f:66:30:53:e6:e9:78:82:ad:b6:23:6a:7d:1b:
         d8:2d:ae:44:38:5a:78:45:af:89:76:89:ed:dc:47:10:19:a2:
         d5:22:ad:5f:54:90:dd:89:35:06:6c:b9:3d:c4:6e:89:64:91:
         f5:1c:79:af:8b:fd:45:b3:ba:9e:07:49:f7:e5:66:91:53:96:
         10:a8:38:45:46:9e:c8:9b:67:bb:36:da:2a:bd:31:50:8d:1d:
         50:ac:15:b9:7b:08:fe:a0:ce:6f:9f:cf:e6:89:a0:cf:1e:ce:
         5b:9c:c8:b9:87:1f:1d:69:3d:a6:77:d6:f1:94:43:86:cb:ba:
         5c:b6:6e:1f:08:41:35:4e:ed:d3:c9:a3:97:ff:c9:7c:75:db:
         f1:00:be:89:c9:f1:52:2e:ce:e5:b0:23:9c:a6:75:53:3f:00:
         32:4c:c2:15:6a:85:1d:28:7d:15:20:0c:93:b8:17:2f:d5:7b:
         3b:f5:7c:e6:0a:49:21:85:3f:82:ef:af:34:4a:eb:45:0c:eb:
         55:44:9e:73:38:8b:07:e2:bc:fe:34:16:e6:fa:64:64:e1:41:
         f4:73:5b:8f:bc:dd:37:a3:38:93:95:84:37:b9:de:fc:f8:2e:
         21:9c:3a:52:20:06:e9:48:82:71:c4:a0:3f:99:d9:4a:c7:1b:
         cd:62:c2:b2
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUb5E+l41ZF5nOCrGqpKJvTOHUFjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNjAxMjcyMDI1MDFaFw0yNzAxMjYyMDMwMDFaMDMxMTAvBgNV
BAMTKEJCNURBNkJFMzgxN0JDQ0JFMTkzRjIxRkZFQTEwRTY0QzcwQTNDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4FOTuwtCP5lLlwjakJouWFVB
RaagA0yGRhU8XKJKQIxquwNpndky5t2KGrq3xOYWv77WLGWdFXwu7w7LLtfV0B4v
3kHBYaxltaJbxOSCt4blDgIOMnH5Wi7MFqKR8WuP2TN37PVezhtcEUAuOKxraZEY
3XWn/QQa825Z0Dh4c74Rm3/ZKSJXnL4Dc1qDg5E+HI7YCPzCPA0qsnDVCIaV41xg
W7if9xTlzgbCWXRC83/cDydFktOgHFhXBa3ZktzRfDEd9ejawmln8SimKMNv+hwN
92DK7DIkOLC2TQi02MJWh8cT82OBnDNDpH6cOOLON5OPC8hz0Jj4bSYESSPNAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUu12mvjgXvMvhk/If/qEOZMcKPCAwHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzEzNjM0MmUzMDJlMzAy
ZjMxMzUyZDMxMzUyMDNkM2UyMDM2MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBuqQwDQYJKoZI
hvcNAQELBQADggEBAHca0yhvZjBT5ul4gq22I2p9G9gtrkQ4WnhFr4l2ie3cRxAZ
otUirV9UkN2JNQZsuT3EbolkkfUcea+L/UWzup4HSfflZpFTlhCoOEVGnsibZ7s2
2iq9MVCNHVCsFbl7CP6gzm+fz+aJoM8ezlucyLmHHx1pPaZ31vGUQ4bLuly2bh8I
QTVO7dPJo5f/yXx12/EAvonJ8VIuzuWwI5ymdVM/ADJMwhVqhR0ofRUgDJO4Fy/V
ezv1fOYKSSGFP4LvrzRK60UM61VEnnM4iwfivP40Fub6ZGThQfRzW4+83TejOJOV
hDe53vz4LiGcOlIgBulIgnHEoD+Z2UrHG81iwrI=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:19:24 2026 by rpki-client