This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3132382e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e3132382e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          p+3kkLvvv9fNXLoE7OZMD+wWkwDi49QvYxS6mQl7H6Q=
Subject key identifier:   C7:7C:67:3A:77:61:4B:88:4C:9E:F7:85:EE:1B:51:F6:FD:71:5C:EA
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       082A17325F93AD5962191F3B316429F9407E9D24
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3132382e302f32302d3230203d3e2036333036.roa
Signing time:             Wed 28 Jan 2026 15:05:00 +0000
ROA not before:           Wed 28 Jan 2026 15:00:00 +0000
ROA not after:            Wed 27 Jan 2027 15:05:00 +0000
asID:                     6306
IP address blocks:        186.165.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2a:17:32:5f:93:ad:59:62:19:1f:3b:31:64:29:f9:40:7e:9d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 28 15:00:00 2026 GMT
            Not After : Jan 27 15:05:00 2027 GMT
        Subject: CN=C77C673A77614B884C9EF785EE1B51F6FD715CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:99:c5:2b:43:ab:51:11:68:27:f7:54:24:
                    23:bf:82:d4:54:1c:49:8e:7c:c7:dc:98:d8:14:4d:
                    ac:be:3a:71:c3:03:4e:93:25:61:a1:f9:47:a5:ba:
                    b0:c5:8d:d8:56:82:57:05:7a:cd:33:d4:88:b9:cc:
                    a3:18:fa:89:9d:2e:43:35:3f:03:41:e8:34:20:8a:
                    43:fa:3e:78:ca:ff:b3:ab:7c:30:47:47:25:66:8d:
                    0d:57:4e:1f:13:61:61:ea:1c:37:95:b9:91:5e:39:
                    94:42:c0:47:71:25:52:ac:c4:d4:33:b0:20:78:f4:
                    55:e1:89:f9:d3:2e:8f:c9:96:95:06:90:55:5e:02:
                    84:35:17:31:d6:27:18:df:4e:6e:b1:c6:19:db:46:
                    7f:2f:85:21:de:d1:cd:b1:52:95:9b:72:0f:db:64:
                    5a:08:50:23:81:d8:51:62:56:6f:00:d1:c0:9e:03:
                    84:e8:be:86:83:ca:57:94:66:c1:60:db:eb:4d:c9:
                    f3:2d:ea:f4:0f:0d:5d:39:42:0d:65:83:2b:1d:a7:
                    d8:bb:63:ee:b4:17:d5:52:52:6f:da:dc:2b:22:28:
                    2d:14:d2:90:5e:4a:72:ca:7e:c0:31:07:06:35:96:
                    eb:b6:94:4b:2b:29:33:81:d8:0d:1a:3f:1f:fa:08:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:67:3A:77:61:4B:88:4C:9E:F7:85:EE:1B:51:F6:FD:71:5C:EA
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3132382e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:aa:b7:2d:3f:f4:e7:35:dc:19:c8:65:f9:9b:d7:14:c6:
         fa:33:ee:ee:88:f1:37:bd:51:04:1d:e9:cb:49:45:47:a6:eb:
         48:21:67:48:83:f3:2a:57:63:60:74:35:1a:89:8c:db:bb:94:
         d1:c9:4c:e3:13:78:60:61:df:fd:71:fd:9d:e8:e8:3a:42:df:
         6a:aa:4a:35:95:bb:41:6f:5a:55:b9:4b:62:39:2c:8e:08:4c:
         dd:e5:b2:8d:65:bb:68:71:66:9b:92:55:c4:d9:34:5a:a9:fa:
         a6:dd:a4:d7:c8:64:1c:73:63:12:62:e2:11:f0:9d:ff:23:70:
         a2:03:e0:73:04:2e:a2:b4:fa:64:ed:4a:d1:78:86:13:8e:0e:
         6b:f8:b5:35:46:c5:dd:9f:fe:f5:aa:59:b2:2b:2b:f7:db:b3:
         48:50:11:cc:c0:ee:01:14:9f:73:c3:10:f8:d9:2c:4b:aa:01:
         88:9b:52:a8:3f:3b:31:93:04:3f:94:93:c5:71:3a:29:1e:03:
         88:35:1e:73:a1:49:38:1d:d1:50:66:f1:c8:81:25:35:66:f4:
         d5:28:4e:c1:e6:fe:c1:b5:67:ea:9f:bc:cd:56:ef:9e:8a:a5:
         29:70:9d:36:4a:ef:c0:9a:0b:4c:d3:d9:9f:a2:6e:14:41:3b:
         71:a2:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:12 2026 by rpki-client