This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa
File:                     3138312e34342e302e302f31342d3234203d3e203237373437.roa (raw, json)
Hash identifier:          LxQNiLOenN4JQRIldO5MJLSE0uuTafkiiRMybsJUEQ0=
Subject key identifier:   76:F2:5C:32:96:CD:DE:5B:EE:39:BF:CF:98:59:0D:72:2C:1C:C7:25
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       4E578C40131A467A193A24A278C46BCF6764B499
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa
Signing time:             Tue 06 Jan 2026 19:29:01 +0000
ROA not before:           Tue 06 Jan 2026 19:24:01 +0000
ROA not after:            Tue 05 Jan 2027 19:29:01 +0000
asID:                     27747
IP address blocks:        181.44.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:57:8c:40:13:1a:46:7a:19:3a:24:a2:78:c4:6b:cf:67:64:b4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Jan  6 19:24:01 2026 GMT
            Not After : Jan  5 19:29:01 2027 GMT
        Subject: CN=76F25C3296CDDE5BEE39BFCF98590D722C1CC725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:79:6c:7b:bb:bc:48:16:4f:ad:43:cf:a7:
                    f6:b7:12:0b:5d:48:1a:86:d8:20:47:46:4d:44:72:
                    0d:af:0c:9e:df:c7:28:f3:f1:31:8d:49:20:db:2f:
                    0e:d1:81:17:aa:26:15:1a:a9:7c:1d:d4:66:95:7d:
                    f5:1f:20:a1:39:0b:6c:08:7e:d9:21:e0:f4:c2:29:
                    d3:cc:f3:11:94:b7:2e:63:5b:37:df:3f:a3:4a:97:
                    b9:6a:aa:b8:cd:1f:81:87:af:ee:ef:a1:4e:41:a6:
                    f6:d3:87:6f:f2:40:d8:77:94:03:9d:5b:49:ac:92:
                    a0:c2:fd:8e:d1:0b:d8:2a:0a:25:e9:12:41:64:e6:
                    94:97:34:a6:f9:6e:1d:ce:d7:2a:8b:40:85:0a:a3:
                    e2:b5:43:35:b7:85:18:39:6a:c4:cb:26:5a:de:e2:
                    36:18:73:1b:2e:33:90:86:e4:08:5f:a1:9f:65:bc:
                    49:fe:4e:ba:1e:03:16:f2:f3:aa:bd:7d:97:17:5f:
                    e0:b9:52:39:82:23:f0:98:ef:b0:be:08:17:ce:4e:
                    3f:44:1d:53:59:8e:42:99:01:01:74:0b:82:59:94:
                    db:ed:d8:8c:c0:af:de:a6:35:bc:95:de:ba:9d:ee:
                    67:1b:bf:5d:bb:db:89:8d:94:c4:32:82:1f:8b:02:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F2:5C:32:96:CD:DE:5B:EE:39:BF:CF:98:59:0D:72:2C:1C:C7:25
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.44.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2e:fe:d1:fa:97:39:54:ff:2b:d0:bb:ae:da:1f:5e:f4:2f:45:
         36:99:85:ea:ca:38:51:42:6e:14:59:80:e4:e1:91:74:6b:02:
         9a:e4:9a:6b:f4:e4:b7:f7:aa:ac:0b:51:b5:43:fc:4c:20:3a:
         9e:68:12:0a:ff:4f:52:3d:f1:63:2e:db:f5:74:7d:92:9a:dd:
         b7:12:c4:00:d9:b5:58:41:62:5c:d5:a1:69:69:51:7d:ec:f2:
         17:3f:b4:5e:db:ee:7e:9c:f3:b1:77:8b:c0:91:cd:0a:0c:d2:
         ef:04:05:12:ff:52:c7:d4:89:15:99:9f:5e:06:23:7f:b5:3b:
         11:b8:ef:55:d2:28:5f:40:8a:6c:d8:76:11:3c:c4:2d:77:0c:
         b8:74:e7:85:e5:75:86:5c:dd:cb:d7:81:94:08:6f:09:ca:c0:
         ef:dc:0f:35:29:39:b2:2f:dd:20:ee:c1:76:bd:b0:0c:5b:f6:
         42:ad:e8:f4:7d:24:c6:61:c4:02:1b:fc:36:2b:ed:3e:3f:98:
         72:15:9b:77:e9:50:2a:76:5a:f7:2a:de:76:54:96:62:83:be:
         6f:46:1f:c8:ac:b5:82:96:ec:28:6d:2c:ab:8b:87:a4:50:1e:
         3d:ef:ac:35:47:21:af:6f:d6:55:b3:d2:9c:4e:65:eb:55:58:
         fe:22:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:29 2026 by rpki-client