This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e302e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          9BNtKDiy5kxMhi16zvsSEthmjgr9Y/Ibe5Esh+z5zbU=
Subject key identifier:   E0:69:6F:A0:EE:D9:D6:B9:35:F7:91:7F:0B:04:E9:EE:61:E8:B4:D3
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       07916D220A62A5AAB70100BDA8AFB5064953B8D3
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f32302d3230203d3e2036333036.roa
Signing time:             Tue 27 Jan 2026 20:30:00 +0000
ROA not before:           Tue 27 Jan 2026 20:25:00 +0000
ROA not after:            Tue 26 Jan 2027 20:30:00 +0000
asID:                     6306
IP address blocks:        186.164.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:91:6d:22:0a:62:a5:aa:b7:01:00:bd:a8:af:b5:06:49:53:b8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 27 20:25:00 2026 GMT
            Not After : Jan 26 20:30:00 2027 GMT
        Subject: CN=E0696FA0EED9D6B935F7917F0B04E9EE61E8B4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:a1:e2:a2:f2:3b:49:3f:0c:8d:87:48:72:
                    bd:39:a1:10:59:16:b1:68:e1:36:1b:f3:9e:1e:55:
                    15:18:99:2c:17:9d:98:bb:d6:a9:66:61:72:8c:bb:
                    ae:e0:b5:21:9c:ce:c7:5b:7d:db:c2:4a:1f:e9:55:
                    b5:2a:a0:7f:4f:44:09:42:8c:d0:ff:88:4b:f7:f0:
                    b5:76:fa:4b:b3:f6:20:00:b9:b7:ef:d2:e4:c6:3d:
                    06:18:a3:88:e9:7a:c3:23:84:ce:3c:66:67:bc:6e:
                    a5:00:14:d2:b8:ec:c5:65:20:7e:3f:3f:78:e4:57:
                    d7:2a:0c:ca:ed:e3:a9:ea:14:24:93:d3:d5:16:52:
                    77:ae:7c:4d:8c:f2:5d:56:02:1a:00:7b:3a:74:f6:
                    7e:4c:08:ba:97:6f:ea:44:91:26:88:39:2d:61:ca:
                    6e:b9:b9:13:f8:2e:fc:2a:65:0d:9e:76:df:48:c4:
                    fe:27:35:b6:bf:8d:5f:f9:53:3d:9b:e6:25:66:ba:
                    b2:d4:72:b1:90:b2:22:ef:68:b7:b5:83:fc:36:dd:
                    e7:29:40:cb:b0:65:f9:c5:c3:49:09:cc:f9:1c:76:
                    b2:e9:bc:08:cb:c4:70:64:4e:b5:d9:b2:c3:54:39:
                    38:88:ea:57:84:24:a2:73:fe:b4:03:a3:35:b9:54:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:69:6F:A0:EE:D9:D6:B9:35:F7:91:7F:0B:04:E9:EE:61:E8:B4:D3
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e302e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:cc:a2:ad:61:f7:a7:6d:0f:0b:ff:d8:e6:35:bf:b4:93:
         f5:93:94:ed:cc:56:31:8c:02:ed:98:dc:14:e7:2f:64:97:39:
         44:8f:e4:81:c0:0d:db:a0:dc:1b:2f:47:57:c6:4d:d9:c8:5e:
         0e:02:b6:ea:f7:13:07:52:c5:8f:7a:7d:83:c3:ee:05:60:21:
         b0:47:f6:1f:67:72:cd:cc:d7:0c:f0:8d:2f:55:53:ee:5c:8b:
         b4:41:e2:ea:d8:98:87:aa:15:db:d6:52:ce:5e:9e:77:09:c6:
         ec:4b:cf:d3:85:2d:fb:6d:fa:b6:58:02:7a:72:3c:56:c9:de:
         e6:ef:d8:a7:a1:9e:5b:b7:96:3b:ba:3d:3a:9a:d6:e9:11:49:
         ac:f0:cc:5a:6e:47:62:cd:56:5b:c7:05:14:61:89:e7:93:8e:
         9a:4a:f7:ae:7e:7a:02:96:36:bd:b4:73:c5:5c:0d:52:57:85:
         00:7c:be:8d:d7:6a:45:fc:21:eb:97:03:86:bd:be:28:76:33:
         97:d2:ed:e2:62:ea:90:8c:51:35:3b:66:7f:7a:52:ba:de:7f:
         2b:d1:44:83:74:1e:f3:e0:bf:da:87:87:32:b9:a3:ad:f2:b0:
         b0:21:fa:b1:b2:1e:62:d4:15:a9:df:96:45:9e:c3:dd:b0:db:
         e0:7d:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:13 2026 by rpki-client