This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136362e302e302f31362d3234203d3e2036333036.roa
File:                     3138362e3136362e302e302f31362d3234203d3e2036333036.roa (raw, json)
Hash identifier:          CmXtzpWXEZriTuYTxiPnbEXnA11Df6sh/LBFZwopqn8=
Subject key identifier:   28:4A:18:29:2E:9B:69:A7:A8:08:FF:37:C4:0F:D3:78:18:7C:C8:0D
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       37425FD2F674D8F1CB8B78FD84702A5932A66B8C
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136362e302e302f31362d3234203d3e2036333036.roa
Signing time:             Tue 06 Jan 2026 19:27:31 +0000
ROA not before:           Tue 06 Jan 2026 19:22:31 +0000
ROA not after:            Tue 05 Jan 2027 19:27:31 +0000
asID:                     6306
IP address blocks:        186.166.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:42:5f:d2:f6:74:d8:f1:cb:8b:78:fd:84:70:2a:59:32:a6:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Jan  6 19:22:31 2026 GMT
            Not After : Jan  5 19:27:31 2027 GMT
        Subject: CN=284A18292E9B69A7A808FF37C40FD378187CC80D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:d2:92:0c:8e:f2:54:95:95:8c:f3:9a:02:
                    24:02:e4:f7:33:39:63:9c:54:1c:cd:5b:de:08:ff:
                    34:f0:05:61:bd:8d:f2:4d:08:3e:00:0f:7e:f9:c0:
                    9e:af:df:a0:8b:44:5f:92:05:d2:38:62:b4:3e:c7:
                    7a:13:85:16:a4:7c:b2:53:d2:4d:51:03:a3:36:e8:
                    86:10:79:6e:1e:4e:ce:6d:85:92:d0:4b:e9:12:ff:
                    75:01:6e:44:17:c0:80:28:7c:83:7c:c3:32:fb:e8:
                    ff:14:4b:c9:18:a3:8f:2e:87:4c:c8:eb:d1:4e:7f:
                    19:71:1e:c6:af:b0:f9:99:89:55:b5:99:32:d7:77:
                    9d:b2:a2:8e:7e:6f:d6:0c:bf:39:84:2e:be:b4:21:
                    8f:ed:5b:b8:26:41:8e:82:c6:9e:44:b5:1e:f7:cc:
                    70:94:4c:e7:bf:ac:76:b4:be:6f:5d:31:fb:7a:44:
                    b8:dd:1d:c9:62:3f:93:22:fa:ea:cf:35:71:46:41:
                    48:20:9e:a0:99:92:86:fb:97:22:85:9c:bf:e9:15:
                    9f:44:41:9e:a1:e3:f7:e3:60:10:60:b0:dd:f7:46:
                    b5:67:9b:97:22:02:5d:07:7a:b8:d9:78:6e:1c:c5:
                    90:66:e1:90:64:d9:b3:3f:2a:51:6e:e2:a1:3f:41:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4A:18:29:2E:9B:69:A7:A8:08:FF:37:C4:0F:D3:78:18:7C:C8:0D
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e3136362e302e302f31362d3234203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:43:6e:0e:8b:d3:1d:d2:f9:a2:7d:68:2b:03:c9:73:91:d6:
         26:84:c4:7d:c0:8c:08:23:48:b6:c8:a0:18:23:2a:7e:54:83:
         f7:1d:f7:40:ad:b5:96:8b:b2:1a:a2:4a:f5:22:e5:9b:b6:10:
         4c:0d:19:e1:86:d8:a3:14:59:2d:51:a9:52:b5:87:55:88:ca:
         18:80:a7:9f:77:9a:67:0b:ca:30:a4:20:ff:37:89:1b:32:43:
         9f:f9:dc:5a:d7:1e:5a:fd:75:35:56:c9:f7:9a:85:83:18:bd:
         59:29:70:24:b4:4a:5b:04:19:c1:1a:63:37:4a:81:e3:c6:81:
         ff:9a:f4:7e:09:f4:07:e6:37:b1:4e:f4:7a:4b:8f:a3:dd:1a:
         9e:2d:19:8b:47:71:ea:97:b0:63:ba:69:d0:bb:73:fb:50:13:
         66:49:51:7c:0d:de:f8:be:7b:80:67:ef:f9:1d:08:1d:c8:2e:
         55:f7:e7:9a:c8:d1:95:61:65:87:94:bc:bc:60:68:51:b2:23:
         08:8e:5d:ce:e9:a5:1e:b9:a1:fb:1b:26:57:9e:8c:61:43:a0:
         47:e5:ed:e3:a4:36:4a:24:d4:62:62:c4:3b:45:6a:10:56:95:
         22:69:fd:e6:91:33:46:03:2d:55:86:ce:9d:ec:7d:80:81:fa:
         9f:3e:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:19:23 2026 by rpki-client