This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e302e302f31372d3234203d3e203139343232.roa
File:                     3138362e382e302e302f31372d3234203d3e203139343232.roa (raw, json)
Hash identifier:          09AURgphaUIBphivqV9rKVoNBQZDdOUIlWXkLkB7Jyw=
Subject key identifier:   44:06:C6:56:B8:2E:4F:30:47:DE:F2:99:A8:80:12:D6:56:90:22:5F
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       1539CA8C64444D471763501D1AE1737D8973601F
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e302e302f31372d3234203d3e203139343232.roa
Signing time:             Wed 10 Dec 2025 07:54:33 +0000
ROA not before:           Wed 10 Dec 2025 07:49:33 +0000
ROA not after:            Wed 09 Dec 2026 07:54:33 +0000
asID:                     19422
IP address blocks:        186.8.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:39:ca:8c:64:44:4d:47:17:63:50:1d:1a:e1:73:7d:89:73:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Dec 10 07:49:33 2025 GMT
            Not After : Dec  9 07:54:33 2026 GMT
        Subject: CN=4406C656B82E4F3047DEF299A88012D65690225F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:9c:ae:d1:6c:1a:58:06:71:4f:1e:77:ed:
                    9e:73:3a:fa:1f:e5:78:9d:4a:93:79:c4:f0:53:21:
                    a8:7b:96:0e:f4:13:0a:50:05:12:fd:9c:65:a4:5a:
                    7a:f0:bd:1d:5b:95:f8:2a:ad:3f:8b:1a:91:53:91:
                    5f:84:bb:a5:94:ee:5d:b0:bc:80:06:33:37:80:3b:
                    c8:4c:2d:94:6f:36:97:cd:0c:16:7a:d0:4e:01:4f:
                    81:c1:2a:7e:92:51:dd:a9:77:77:7d:6f:f0:8a:f5:
                    ca:87:5d:2b:5a:f1:e4:84:e6:ee:b9:7c:92:fd:15:
                    42:0b:34:24:38:e1:f5:cc:a9:3e:9c:27:6e:d6:c4:
                    df:5b:94:81:6b:04:35:7c:3a:c5:47:1f:b8:5d:cc:
                    49:b4:ca:ee:d6:fe:7f:1f:e4:0a:a2:ba:50:16:36:
                    35:21:2b:ea:f7:e9:a8:cd:00:69:ab:10:a5:df:41:
                    8a:44:6c:9d:42:87:85:31:ba:13:ef:80:68:14:54:
                    cf:c3:55:ff:2e:5e:25:d2:0f:b5:0c:10:bb:02:0a:
                    58:65:68:48:89:89:ea:8d:26:c4:72:48:27:c8:7c:
                    88:70:9a:13:75:f7:ee:08:62:9b:4e:02:a7:69:00:
                    06:9c:63:a4:3c:f8:56:32:2c:de:27:58:e3:f7:94:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:06:C6:56:B8:2E:4F:30:47:DE:F2:99:A8:80:12:D6:56:90:22:5F
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e302e302f31372d3234203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.8.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:2f:ad:2c:f2:8d:79:73:c2:6b:e6:16:c5:d7:48:b4:38:
         cf:3b:31:2a:d6:23:44:01:c6:d6:09:36:ce:b8:ca:86:a6:f1:
         15:7e:25:7f:24:a9:db:1a:a9:98:ab:a6:16:fb:ee:01:69:68:
         de:1e:4b:f2:26:eb:b4:81:6d:fe:40:e8:90:03:50:4b:e0:f5:
         bb:0c:5d:17:ad:89:77:0a:92:a0:91:1b:cf:d2:c9:e8:db:f2:
         10:86:34:89:61:eb:a3:a9:f1:51:62:28:76:fa:a3:a4:c8:a9:
         60:b7:07:5c:01:2a:68:33:6b:7c:0e:4a:f9:d8:df:fa:6b:0a:
         bf:f4:c4:a3:1a:e8:bb:d5:a3:fb:ca:b6:8a:42:94:cc:81:4f:
         08:93:38:7c:10:cc:c1:fb:e2:66:01:c7:dc:04:5a:e7:2e:c7:
         b5:da:56:fb:90:35:22:fe:2f:97:af:35:aa:e7:37:ae:de:00:
         d0:f0:f9:a5:57:26:1e:3b:24:11:ff:88:ff:4d:68:dd:db:1a:
         26:1b:3b:67:85:b1:38:f3:13:c0:63:1c:72:e8:c8:a7:63:1b:
         d1:fa:3f:b0:2c:3c:2a:83:20:5a:ed:ec:79:82:55:ec:7f:25:
         c6:d7:31:c6:5c:20:fb:09:54:a6:97:6f:b6:75:20:36:c5:4b:
         da:71:61:76
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUFTnKjGRETUcXY1AdGuFzfYlzYB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgwNDFGMTUzNjVBNDIzQkMwOEY5MkJDNjlBNUY5MDk2
NDQwNDJDMjAeFw0yNTEyMTAwNzQ5MzNaFw0yNjEyMDkwNzU0MzNaMDMxMTAvBgNV
BAMTKDQ0MDZDNjU2QjgyRTRGMzA0N0RFRjI5OUE4ODAxMkQ2NTY5MDIyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QJyu0WwaWAZxTx537Z5zOvof
5XidSpN5xPBTIah7lg70EwpQBRL9nGWkWnrwvR1blfgqrT+LGpFTkV+Eu6WU7l2w
vIAGMzeAO8hMLZRvNpfNDBZ60E4BT4HBKn6SUd2pd3d9b/CK9cqHXSta8eSE5u65
fJL9FUILNCQ44fXMqT6cJ27WxN9blIFrBDV8OsVHH7hdzEm0yu7W/n8f5AqiulAW
NjUhK+r36ajNAGmrEKXfQYpEbJ1Ch4UxuhPvgGgUVM/DVf8uXiXSD7UMELsCClhl
aEiJieqNJsRySCfIfIhwmhN19+4IYptOAqdpAAacY6Q8+FYyLN4nWOP3lE5NAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQURAbGVrguTzBH3vKZqIAS1laQIl8wHwYDVR0j
BBgwFoAUiAQfFTZaQjvAj5K8aaX5CWRAQsIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOUY0Mzg1QThERjg4NzY4QkE2QzVBQjlCOUFFQkM5QjEw
ODgzMzJDRDU2QkU1OUE5RTJFQjUzMDIxNzEyNjY4LzAvODgwNDFGMTUzNjVBNDIz
QkMwOEY5MkJDNjlBNUY5MDk2NDQwNDJDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODA0MUYxNTM2NUE0MjNCQzA4
RjkyQkM2OUE1RjkwOTY0NDA0MkMyLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTlGNDM4NUE4REY4ODc2OEJBNkM1QUI5QjlBRUJDOUIxMDg4MzMyQ0Q1
NkJFNTlBOUUyRUI1MzAyMTcxMjY2OC8wLzMxMzgzNjJlMzgyZTMwMmUzMDJmMzEz
NzJkMzIzNDIwM2QzZTIwMzEzOTM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7oIADANBgkqhkiG
9w0BAQsFAAOCAQEAfeAvrSzyjXlzwmvmFsXXSLQ4zzsxKtYjRAHG1gk2zrjKhqbx
FX4lfySp2xqpmKumFvvuAWlo3h5L8ibrtIFt/kDokANQS+D1uwxdF62JdwqSoJEb
z9LJ6NvyEIY0iWHro6nxUWIodvqjpMipYLcHXAEqaDNrfA5K+djf+msKv/TEoxro
u9Wj+8q2ikKUzIFPCJM4fBDMwfviZgHH3ARa5y7HtdpW+5A1Iv4vl681quc3rt4A
0PD5pVcmHjskEf+I/01o3dsaJhs7Z4WxOPMTwGMccujIp2Mb0fo/sCw8KoMgWu3s
eYJV7H8lxtcxxlwg+wlUppdvtnUgNsVL2nFhdg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 07:40:16 2025 by rpki-client