This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3139322e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136342e3139322e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          idOS8vQXl42agP/czrTteRvQXR3zg6q6RJOb3KcNwcw=
Subject key identifier:   DE:FB:01:C5:64:8F:09:A9:B3:CD:1A:45:AD:EC:F5:5C:D0:62:9F:4C
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       517618ACFE1E6CF434023450EDE6276067EEF112
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3139322e302f32302d3230203d3e2036333036.roa
Signing time:             Wed 28 Jan 2026 15:05:04 +0000
ROA not before:           Wed 28 Jan 2026 15:00:04 +0000
ROA not after:            Wed 27 Jan 2027 15:05:04 +0000
asID:                     6306
IP address blocks:        186.164.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:76:18:ac:fe:1e:6c:f4:34:02:34:50:ed:e6:27:60:67:ee:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 28 15:00:04 2026 GMT
            Not After : Jan 27 15:05:04 2027 GMT
        Subject: CN=DEFB01C5648F09A9B3CD1A45ADECF55CD0629F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:51:96:64:69:39:80:e9:81:1c:b0:c1:9e:
                    ff:4f:1b:03:f0:30:7d:2f:0f:bd:ab:6d:ba:2d:c3:
                    99:e3:08:bf:99:ee:b5:fc:63:fd:6d:8c:f1:51:56:
                    23:38:35:c8:46:35:9a:ae:10:bc:c5:19:4c:ba:ba:
                    76:0d:55:1f:4e:7f:5f:26:01:b3:cb:7a:ff:27:c3:
                    36:c7:0f:79:88:e9:bb:fe:25:ab:4c:60:e1:99:68:
                    21:6c:b3:b0:1e:2f:a6:52:88:f8:50:58:4a:fa:10:
                    80:57:fb:f2:52:1a:2f:31:f9:b3:fd:7a:7d:1a:e0:
                    75:95:cd:e8:1c:a2:f8:6c:b8:8a:e7:01:aa:26:ed:
                    4c:1b:80:a3:c4:e5:b8:61:70:3c:e9:ba:93:a4:25:
                    dd:2b:ca:64:60:ab:69:53:b7:f4:a0:f5:37:13:c9:
                    68:b4:62:86:75:d7:57:af:e9:3e:fd:46:4b:b0:a6:
                    e6:1e:89:5c:2a:33:26:69:3a:c7:1d:b6:dd:e6:f7:
                    05:a7:af:4b:b4:37:a0:b4:a8:94:65:10:a5:46:89:
                    84:de:3e:a8:8f:8d:e3:2e:b1:dc:8c:14:34:72:10:
                    28:8e:0c:32:2c:2c:11:24:ff:0a:79:ec:4d:d9:aa:
                    47:52:0f:e0:f8:af:bc:a6:43:60:16:60:fb:3e:da:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FB:01:C5:64:8F:09:A9:B3:CD:1A:45:AD:EC:F5:5C:D0:62:9F:4C
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136342e3139322e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.164.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:9a:e1:57:7e:93:ae:39:9e:2b:22:92:b1:b4:b7:72:b8:
         15:d8:1c:6d:4d:c5:39:ea:a6:7a:77:87:b1:e8:d0:fe:15:ee:
         d0:bc:11:7f:58:98:19:92:41:f9:37:d4:80:d9:d1:21:72:37:
         23:02:c1:49:b9:43:ab:39:bb:eb:13:fe:29:9b:fd:92:d9:f3:
         98:2f:82:bc:42:75:5f:da:04:61:68:21:d1:6f:4a:d8:f3:8a:
         7b:67:f4:42:39:28:a5:f3:4d:d9:00:32:e5:2a:0a:18:0e:0d:
         f8:eb:ff:91:e9:03:fb:0d:e8:3b:dc:83:2b:6f:cb:76:83:4d:
         fb:5a:76:0d:4e:74:77:7b:ae:01:6b:be:07:e8:25:1e:c5:9e:
         3f:23:c4:70:61:f9:a9:fb:67:2d:9e:c4:31:8f:e0:18:bf:c3:
         84:6f:2f:c8:54:45:4c:8a:da:54:43:5c:54:40:2a:da:13:55:
         1a:7e:bb:1e:8f:41:53:43:87:ab:1c:3d:d6:9c:53:cc:95:f4:
         86:a9:15:83:8d:4c:a3:87:16:d4:46:03:95:f9:31:b8:90:69:
         3e:57:a6:2d:4b:10:33:cf:d4:76:80:92:d5:5e:17:c3:41:f1:
         8b:90:db:13:cc:e8:b8:ca:5d:db:c2:60:a6:04:7d:d8:f7:a9:
         d5:1c:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:12 2026 by rpki-client