This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3139322e302f31392d3234203d3e203139343232.roa
File:                     3138362e382e3139322e302f31392d3234203d3e203139343232.roa (raw, json)
Hash identifier:          rc/5PaTjVg+kwqKn1cOM6hRqB06o8r6VPQoSUGyqtsc=
Subject key identifier:   DF:42:EC:79:D3:CC:2D:EB:99:5D:81:35:82:E7:8A:3A:C4:56:93:4C
Certificate issuer:       /CN=88041F15365A423BC08F92BC69A5F909644042C2
Certificate serial:       7DCA6D0C667F4AECB02E42CFD54BB2A47C7C692E
Authority key identifier: 88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3139322e302f31392d3234203d3e203139343232.roa
Signing time:             Wed 10 Dec 2025 07:54:33 +0000
ROA not before:           Wed 10 Dec 2025 07:49:33 +0000
ROA not after:            Wed 09 Dec 2026 07:54:33 +0000
asID:                     19422
IP address blocks:        186.8.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ca:6d:0c:66:7f:4a:ec:b0:2e:42:cf:d5:4b:b2:a4:7c:7c:69:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88041F15365A423BC08F92BC69A5F909644042C2
        Validity
            Not Before: Dec 10 07:49:33 2025 GMT
            Not After : Dec  9 07:54:33 2026 GMT
        Subject: CN=DF42EC79D3CC2DEB995D813582E78A3AC456934C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:31:04:fb:c3:c0:6f:d4:a8:a5:d4:5b:88:
                    57:d0:c0:8c:67:96:6e:4d:15:13:0b:86:e2:1b:03:
                    76:87:4a:03:3c:eb:b0:71:c9:a6:53:a4:04:c5:27:
                    15:51:a5:b4:a3:cc:7f:f3:1d:4f:77:da:b8:16:64:
                    68:70:45:8c:81:28:d8:74:5d:36:89:9c:e7:ce:71:
                    8a:73:a3:de:93:b5:fd:84:0d:92:6c:3b:65:60:c5:
                    7d:54:4e:88:ed:1c:1b:e8:ab:aa:33:58:54:cd:e0:
                    96:c0:ad:b2:b2:30:7a:24:ea:cb:86:f8:7a:49:86:
                    7a:3f:53:67:23:f5:80:6b:79:87:1b:da:0c:05:41:
                    fd:d3:a4:fe:bf:43:1f:99:67:2d:c9:79:07:ec:09:
                    e3:00:7b:84:8e:39:d6:bf:fc:af:63:2d:11:90:00:
                    bb:7d:a8:4b:00:f8:d2:46:0a:ec:c2:8f:dd:37:2f:
                    1a:60:05:75:13:22:8f:a5:28:5e:bf:ed:03:01:b6:
                    85:c8:4f:5c:60:3b:93:70:1c:fa:9c:ec:99:4e:9e:
                    63:6e:ba:89:dc:9a:a6:bd:f7:b0:c8:fb:61:31:a3:
                    52:03:a5:bc:81:24:07:7c:08:39:4d:81:08:fe:f7:
                    42:1b:d5:d0:74:86:b2:f4:b5:df:c4:2a:b2:35:d8:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:EC:79:D3:CC:2D:EB:99:5D:81:35:82:E7:8A:3A:C4:56:93:4C
            X509v3 Authority Key Identifier:
                keyid:88:04:1F:15:36:5A:42:3B:C0:8F:92:BC:69:A5:F9:09:64:40:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/88041F15365A423BC08F92BC69A5F909644042C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88041F15365A423BC08F92BC69A5F909644042C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9F4385A8DF88768BA6C5AB9B9AEBC9B1088332CD56BE59A9E2EB53021712668/0/3138362e382e3139322e302f31392d3234203d3e203139343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.8.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:a3:6f:1f:87:80:04:c0:a1:78:c1:2a:26:eb:03:d9:88:
         6b:eb:5d:b8:ed:41:a6:ea:3c:e4:7f:71:54:4a:2c:12:0e:9f:
         af:e8:e7:26:d5:08:60:53:d2:0a:27:ea:e2:e4:41:05:c9:14:
         d3:e9:2f:14:7e:54:31:75:75:91:cd:f3:9f:00:fa:75:3c:91:
         9e:00:97:2c:0b:08:fc:ed:28:fc:ab:80:36:35:2e:4f:b5:6d:
         d6:a6:b8:8b:9d:da:63:b8:cd:54:f7:a4:b8:99:7e:10:f8:a0:
         1d:c3:9b:9a:9e:29:07:03:f9:f9:58:74:0d:4c:74:c7:f7:c4:
         54:99:77:2d:7e:ab:7c:66:5a:83:3b:61:64:84:b5:77:3c:78:
         56:2a:3c:9d:83:5f:fe:46:8e:53:16:12:89:dd:3c:ed:72:55:
         ae:3b:94:9e:a7:f1:b3:15:67:44:aa:2f:3e:89:0a:3f:de:d8:
         92:26:c5:9a:51:c0:58:4f:45:d7:25:cd:12:d1:7d:ed:11:96:
         c9:f7:02:64:ee:9c:fc:50:b6:b7:67:94:61:2e:5f:09:38:74:
         96:a0:9f:70:b5:f3:70:88:a6:7c:05:74:17:d4:bd:6b:2f:fa:
         65:63:86:95:48:24:66:4c:0d:bf:76:65:5f:19:b4:5a:3d:92:
         cd:e6:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:39:54 2025 by rpki-client