This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e302e302f31372d3234203d3e203237363531.roa
File:                     3138312e34322e302e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          mki3QJWNlJ5ClkbjSx1fw9Pw1FgAKFTRTBoSUsmPy60=
Subject key identifier:   21:95:4A:B5:93:0D:7F:CA:A4:B2:C9:53:F4:0B:A4:FB:ED:9E:47:3D
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       4747B66AB65B4EC4DC1EBE302F283FC381287AAE
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e302e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 06 Jan 2026 19:37:38 +0000
ROA not before:           Tue 06 Jan 2026 19:32:38 +0000
ROA not after:            Tue 05 Jan 2027 19:37:38 +0000
asID:                     27651
IP address blocks:        181.42.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:47:b6:6a:b6:5b:4e:c4:dc:1e:be:30:2f:28:3f:c3:81:28:7a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Jan  6 19:32:38 2026 GMT
            Not After : Jan  5 19:37:38 2027 GMT
        Subject: CN=21954AB5930D7FCAA4B2C953F40BA4FBED9E473D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:59:c1:7f:2a:7e:c2:94:ba:ee:d9:13:59:
                    16:d5:55:fc:d9:0c:ba:ac:ae:b7:c5:4e:a0:ad:53:
                    0c:b0:c7:ef:65:6e:6a:f9:49:68:6a:aa:ab:86:a8:
                    6c:ee:38:7d:59:a6:ca:5a:bd:e7:39:62:b8:00:38:
                    09:6f:8a:f9:19:a2:09:41:2a:2f:a9:cf:18:98:ed:
                    e0:30:6b:4b:63:e5:09:84:d4:81:d0:1b:f5:37:7a:
                    26:8d:a1:64:09:c6:ba:24:89:44:e6:3e:74:ab:e3:
                    69:d8:02:80:71:dc:8f:99:98:c3:d6:4c:61:61:e9:
                    8d:19:56:d3:9b:09:7c:72:4c:0c:a6:36:36:dd:af:
                    d0:d6:08:51:c4:21:c8:da:f7:47:d5:53:e3:8f:13:
                    01:4c:8d:84:ab:7a:61:5d:74:c4:53:b4:ef:ce:d6:
                    d4:b1:40:1d:e7:2a:83:5a:7f:e8:6a:fd:16:6a:af:
                    5b:4e:dd:5a:ea:64:8a:cf:b0:ba:ef:25:49:c6:28:
                    c7:44:05:ab:b4:f8:28:38:b4:c8:bf:e5:16:9b:d7:
                    28:39:5e:c1:1a:e5:45:76:ca:7d:05:e2:ff:d4:d8:
                    af:17:0d:4c:1b:76:29:ef:d0:15:09:e0:d1:15:86:
                    39:02:7e:7a:db:b8:61:f2:08:9c:a7:c5:30:f0:35:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:4A:B5:93:0D:7F:CA:A4:B2:C9:53:F4:0B:A4:FB:ED:9E:47:3D
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e302e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         37:78:4b:e5:ee:96:12:88:56:39:3c:63:07:26:ff:a3:68:73:
         b8:a1:9e:f3:87:c4:10:2d:03:3a:f7:6a:49:13:03:df:1d:65:
         67:89:2a:ea:3c:e3:56:5c:98:db:ae:d2:af:5d:78:31:58:72:
         e6:e8:a1:81:e4:32:7d:c6:91:3c:85:22:48:d8:86:69:f4:c4:
         1e:bd:0c:7b:f1:aa:fd:c9:2b:b1:32:43:7f:0c:b7:a8:35:ec:
         d3:e7:6d:9d:c4:a5:c7:0e:80:c3:be:b2:ba:61:64:be:11:df:
         39:21:bc:bc:24:38:ec:04:88:85:c5:42:8d:e6:44:dc:f6:87:
         f6:99:d1:ad:2e:c9:10:3e:bf:33:75:3a:f4:d1:3f:2a:55:5b:
         cc:16:b9:d1:43:4e:6b:a9:98:ba:15:e4:cb:58:92:43:c8:1c:
         85:d5:4f:ac:8b:b8:9c:b3:c2:b3:87:36:46:19:40:f2:14:3a:
         c9:47:7d:aa:64:43:87:8a:47:63:c0:97:38:ef:f2:71:4b:f2:
         42:19:dd:69:17:d1:3f:af:54:4e:02:2f:4c:95:5a:e5:78:49:
         94:68:69:cf:69:7d:a7:e9:b6:a9:8c:3e:8a:91:7e:f9:b0:42:
         1d:a6:e1:39:84:64:f8:ad:c8:e3:1b:ce:1d:97:f8:3a:be:e2:
         70:63:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:59:50 2026 by rpki-client