This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3134342e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e3134342e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          0nF+o2XpqTwXji/e5KzVAAxDCTjKNMynXj40ZT4c9WM=
Subject key identifier:   39:7B:E6:23:36:79:C9:38:D4:6B:97:D8:44:16:1A:B5:3E:AF:59:22
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       45766E7CCDC02B94000B7F8C15111234F06C6A35
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3134342e302f32302d3230203d3e2036333036.roa
Signing time:             Wed 28 Jan 2026 15:05:04 +0000
ROA not before:           Wed 28 Jan 2026 15:00:04 +0000
ROA not after:            Wed 27 Jan 2027 15:05:04 +0000
asID:                     6306
IP address blocks:        186.165.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:76:6e:7c:cd:c0:2b:94:00:0b:7f:8c:15:11:12:34:f0:6c:6a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 28 15:00:04 2026 GMT
            Not After : Jan 27 15:05:04 2027 GMT
        Subject: CN=397BE6233679C938D46B97D844161AB53EAF5922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:90:e9:37:40:ec:4f:2a:5e:40:ef:74:6c:
                    91:55:76:1b:0f:db:d0:8f:4f:42:fc:08:89:46:10:
                    84:de:99:28:2b:8a:41:13:1c:a3:a1:64:1a:ae:70:
                    83:2e:d3:bd:a9:f6:d9:7c:e7:ce:ad:2a:c2:47:44:
                    94:43:96:a4:09:18:80:c1:07:09:17:59:94:ee:9d:
                    ba:2c:0a:54:eb:44:e3:d3:c7:9e:e3:9e:9d:c1:15:
                    76:97:a8:e3:35:40:5a:50:26:3d:de:22:b7:74:23:
                    09:fc:12:c9:60:75:1f:09:9d:4c:08:b3:8b:ec:30:
                    3b:72:3e:3c:8f:12:a7:02:d9:a7:fe:25:d5:1a:ee:
                    26:da:c2:be:53:f5:b1:00:28:7e:9c:ac:34:cf:b0:
                    66:f1:fa:9a:30:fd:c3:4b:9d:9f:3f:23:15:e4:d3:
                    b7:77:6a:76:82:e3:82:3a:82:4a:da:ac:d9:02:ca:
                    db:e4:a5:7e:74:42:c2:a7:62:58:76:81:a3:ac:ce:
                    50:d9:8e:ac:0d:1a:a1:7a:b9:80:2e:86:9a:b8:e9:
                    2d:5a:65:bd:63:8b:98:cc:41:ae:33:69:15:6d:bd:
                    98:89:3d:44:b2:0c:3e:ec:95:a4:89:3a:d3:7e:d3:
                    1d:e8:a3:db:76:e6:d9:92:18:d4:b2:5c:64:60:25:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7B:E6:23:36:79:C9:38:D4:6B:97:D8:44:16:1A:B5:3E:AF:59:22
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3134342e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:17:3d:f8:e3:8a:3f:52:11:56:7e:c3:c9:a6:81:16:73:85:
         5d:f3:a9:c6:11:0c:f9:23:aa:f6:07:d7:74:1b:07:6b:d4:63:
         95:0b:33:a1:7f:09:2c:a6:6d:85:d7:50:06:0b:73:75:27:a0:
         8c:52:f9:2d:05:61:bd:b9:af:7c:7c:7a:f3:0a:9f:1a:7e:f1:
         b2:77:18:7f:d7:59:19:d7:2f:eb:f6:8c:ef:27:18:40:eb:0f:
         28:ee:ff:70:9e:47:ef:c9:50:dc:b6:b4:80:f4:c5:dd:fa:f4:
         0d:5c:a3:fb:c7:92:e6:f1:1e:d5:ff:1c:43:fd:e6:cc:ba:a5:
         e5:39:e3:28:00:ad:bc:23:11:5d:33:7e:f6:87:d2:0b:e8:c1:
         8f:89:17:ed:2e:11:f8:41:13:21:2d:84:fd:9d:9d:0d:35:63:
         8b:d7:67:ea:0c:85:81:ea:6f:9f:b7:70:33:70:3d:a4:9f:45:
         f2:f7:44:e0:13:ce:e9:5d:d4:27:d4:d3:51:f8:8c:da:e3:15:
         44:ec:da:a2:7d:64:19:50:4e:26:0f:b2:9c:cf:be:5e:3b:a5:
         26:e5:31:fa:ed:0f:21:0c:6d:be:46:fe:ad:4b:0d:d8:8f:1f:
         e4:f4:78:2e:3b:b7:f9:b5:8f:c2:d5:fd:e0:10:04:f0:37:92:
         e0:64:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:12 2026 by rpki-client