This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3136302e302f32302d3230203d3e2036333036.roa
File:                     3138362e3136352e3136302e302f32302d3230203d3e2036333036.roa (raw, json)
Hash identifier:          x4hPvmZqQHkQ+TVTDnqm8PXRVk4u9Tj0+0iuy9oIkRY=
Subject key identifier:   76:A1:9C:D5:0A:61:EB:8C:B3:C8:29:45:FA:3A:E0:04:AF:24:43:9D
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       77E25AFAC3ADF242B6CFFE4C25736845F681F63B
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3136302e302f32302d3230203d3e2036333036.roa
Signing time:             Wed 28 Jan 2026 15:05:05 +0000
ROA not before:           Wed 28 Jan 2026 15:00:05 +0000
ROA not after:            Wed 27 Jan 2027 15:05:05 +0000
asID:                     6306
IP address blocks:        186.165.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e2:5a:fa:c3:ad:f2:42:b6:cf:fe:4c:25:73:68:45:f6:81:f6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan 28 15:00:05 2026 GMT
            Not After : Jan 27 15:05:05 2027 GMT
        Subject: CN=76A19CD50A61EB8CB3C82945FA3AE004AF24439D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:4f:ec:ae:22:73:0f:84:ed:9c:ae:a7:02:
                    85:c3:a8:4d:28:ee:63:b0:90:7d:16:4e:40:1e:bf:
                    3a:04:5e:06:6a:b9:38:bd:57:48:cc:70:52:eb:78:
                    26:9a:99:d2:72:50:b0:7b:7b:ff:67:99:35:d5:9a:
                    ab:f1:23:7b:b2:d1:43:23:3d:70:2b:85:04:6d:0b:
                    8f:3e:47:97:c1:dd:e9:9e:5d:e0:55:e2:11:21:5a:
                    8b:fb:fc:87:f5:46:72:4e:e9:d0:4f:95:8c:70:38:
                    55:f6:7d:a8:41:16:31:bb:5e:7c:c8:2b:ed:f9:44:
                    27:14:65:5c:32:08:d0:cc:c2:e9:ac:91:03:ed:49:
                    cd:3c:80:9b:26:57:d3:84:1a:cf:da:3d:47:18:97:
                    a3:e8:04:a0:35:71:74:72:a5:79:ab:21:7d:87:7f:
                    49:d6:1d:79:83:ce:4f:31:73:95:d2:2a:26:3b:fa:
                    72:ea:a4:35:95:4b:92:67:7a:0b:50:fc:5d:00:7e:
                    15:f7:4a:11:b7:1b:74:75:0e:66:29:29:f6:b1:72:
                    d7:15:9f:3f:21:34:d7:3b:45:95:d1:e0:d2:03:b5:
                    aa:3a:8c:6e:c5:5c:ef:82:73:30:f5:37:9d:69:f9:
                    ca:43:4c:7c:31:ba:e4:cc:ff:95:1d:8c:28:16:6c:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:9C:D5:0A:61:EB:8C:B3:C8:29:45:FA:3A:E0:04:AF:24:43:9D
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136352e3136302e302f32302d3230203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.165.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:d8:a0:41:c9:8e:1b:27:ac:8f:7d:68:08:b5:f4:b5:8d:5c:
         ac:36:ca:f7:2e:bc:06:c9:13:94:05:af:44:0e:4e:e4:d8:d6:
         dc:18:c7:b2:67:22:46:0e:13:d1:2f:94:32:c2:34:65:c1:d1:
         0e:4f:3c:4d:c4:cc:69:f1:e5:a9:a3:01:2b:c8:b8:de:4e:8b:
         ef:07:88:e8:c5:c2:ce:35:94:ef:5f:15:32:15:0c:57:79:09:
         54:86:00:fb:b7:e6:f9:e0:f3:4d:36:61:4f:41:a4:53:5d:a5:
         7e:1b:f1:78:cf:a8:c3:90:4c:34:54:07:64:9f:37:94:20:6d:
         25:78:e8:87:25:83:10:48:60:43:56:7e:78:d3:1e:27:65:e4:
         9f:60:eb:2e:41:47:b3:e8:cb:13:e4:71:89:e6:2f:2e:ae:b9:
         ba:e3:d8:2c:c0:39:aa:68:2b:52:de:33:4c:2e:6f:59:8e:c2:
         53:27:f4:2d:84:aa:18:2c:c7:3f:fe:fe:4e:d0:66:83:36:7d:
         63:c6:ad:5c:43:b8:36:6a:2b:30:88:4a:15:5e:b8:4d:4f:b8:
         e7:73:b3:17:2f:06:66:dc:f6:b6:0e:4d:d3:b6:44:c0:f4:ea:
         19:50:bd:44:49:12:fb:e0:9f:a5:7b:90:c3:e2:78:b8:97:3f:
         da:be:d9:59
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUd+Ja+sOt8kK2z/5MJXNoRfaB9jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3MDVBOUVENzA2RkQ0NTcyNUE3MkQ5RDgzRUYxRDlC
OUExMkU5QzAeFw0yNjAxMjgxNTAwMDVaFw0yNzAxMjcxNTA1MDVaMDMxMTAvBgNV
BAMTKDc2QTE5Q0Q1MEE2MUVCOENCM0M4Mjk0NUZBM0FFMDA0QUYyNDQzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+E/sriJzD4TtnK6nAoXDqE0o
7mOwkH0WTkAevzoEXgZquTi9V0jMcFLreCaamdJyULB7e/9nmTXVmqvxI3uy0UMj
PXArhQRtC48+R5fB3emeXeBV4hEhWov7/If1RnJO6dBPlYxwOFX2fahBFjG7XnzI
K+35RCcUZVwyCNDMwumskQPtSc08gJsmV9OEGs/aPUcYl6PoBKA1cXRypXmrIX2H
f0nWHXmDzk8xc5XSKiY7+nLqpDWVS5JnegtQ/F0AfhX3ShG3G3R1DmYpKfaxctcV
nz8hNNc7RZXR4NIDtao6jG7FXO+CczD1N51p+cpDTHwxuuTM/5UdjCgWbKQjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdqGc1Qph64yzyClF+jrgBK8kQ50wHwYDVR0j
BBgwFoAUNXBantcG/UVyWnLZ2D7x2bmhLpwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENUZBRDZFNkNEN0NFNTUxNjQzRDA0RDVERkI4MTY2OUUz
NUIzQUNERDFCOTM3NkIzN0MzMjQ1MzE5QTBFMzY0LzAvMzU3MDVBOUVENzA2RkQ0
NTcyNUE3MkQ5RDgzRUYxRDlCOUExMkU5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNTcwNUE5RUQ3MDZGRDQ1NzI1
QTcyRDlEODNFRjFEOUI5QTEyRTlDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDVGQUQ2RTZDRDdDRTU1MTY0M0QwNEQ1REZCODE2NjlFMzVCM0FDREQx
QjkzNzZCMzdDMzI0NTMxOUEwRTM2NC8wLzMxMzgzNjJlMzEzNjM1MmUzMTM2MzAy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNjMzMzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLqloDAN
BgkqhkiG9w0BAQsFAAOCAQEAZtigQcmOGyesj31oCLX0tY1crDbK9y68BskTlAWv
RA5O5NjW3BjHsmciRg4T0S+UMsI0ZcHRDk88TcTMafHlqaMBK8i43k6L7weI6MXC
zjWU718VMhUMV3kJVIYA+7fm+eDzTTZhT0GkU12lfhvxeM+ow5BMNFQHZJ83lCBt
JXjohyWDEEhgQ1Z+eNMeJ2Xkn2DrLkFHs+jLE+RxieYvLq65uuPYLMA5qmgrUt4z
TC5vWY7CUyf0LYSqGCzHP/7+TtBmgzZ9Y8atXEO4NmorMIhKFV64TU+453OzFy8G
Ztz2tg5N07ZEwPTqGVC9REkS++CfpXuQw+J4uJc/2r7ZWQ==
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:12 2026 by rpki-client