This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa
File:                     3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa (raw, json)
Hash identifier:          9SebA3/to8U4KRDjc3QsJ726gQmm3wqsL8/0l9GyT5w=
Subject key identifier:   43:A4:47:5E:FA:FD:9F:86:2E:C4:32:86:A9:D9:4B:76:2D:A3:AD:B4
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       6837684C96DB00275A32585AC443E04EEA19ED47
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa
Signing time:             Tue 06 Jan 2026 19:29:21 +0000
ROA not before:           Tue 06 Jan 2026 19:24:21 +0000
ROA not after:            Tue 05 Jan 2027 19:29:21 +0000
asID:                     52509
IP address blocks:        201.182.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:37:68:4c:96:db:00:27:5a:32:58:5a:c4:43:e0:4e:ea:19:ed:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:21 2026 GMT
            Not After : Jan  5 19:29:21 2027 GMT
        Subject: CN=43A4475EFAFD9F862EC43286A9D94B762DA3ADB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:9a:bf:65:df:95:09:e3:55:14:d3:12:cc:
                    d1:77:3e:39:52:2f:77:2f:72:73:b2:da:72:52:ac:
                    6b:b2:f4:dc:a2:47:93:63:42:42:62:bf:40:19:71:
                    a6:5f:f1:ab:60:86:30:f6:18:3d:d3:0c:50:8f:2f:
                    8a:7a:16:6f:f2:92:73:52:b9:bc:29:2e:e9:69:55:
                    7f:be:54:e7:61:52:9a:cd:e2:44:8f:64:09:6b:37:
                    7d:98:d5:4b:4a:c8:fb:13:bd:5c:da:24:32:be:45:
                    52:c0:71:62:91:2a:70:9f:ba:b0:22:7a:d1:7d:27:
                    47:d8:0e:6d:68:fc:b6:e0:07:87:d2:b6:9b:21:0a:
                    ed:d2:2e:64:f9:05:24:82:11:8a:8b:07:7e:75:27:
                    a5:b6:ef:07:26:95:1b:a8:ea:16:96:18:87:ff:15:
                    a5:16:44:f2:bc:60:45:88:08:95:14:a6:87:43:05:
                    87:4b:7f:d9:d5:7a:e3:31:63:08:6f:c8:9d:ff:9d:
                    dc:c4:bf:88:9e:5a:51:a2:4f:49:e3:16:96:75:b9:
                    f0:b7:bb:5a:57:73:d0:2f:13:f1:7e:9d:87:a5:35:
                    35:1e:cb:6e:1e:09:41:94:57:5d:9a:43:46:e1:0a:
                    fa:1c:7b:ce:a6:fd:7e:55:4a:fc:27:cd:7c:93:be:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:47:5E:FA:FD:9F:86:2E:C4:32:86:A9:D9:4B:76:2D:A3:AD:B4
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133392e302f32342d3234203d3e203532353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:16:65:ba:ae:78:80:6a:b7:d0:ce:28:38:9f:43:30:9b:
         de:8f:2b:a9:59:a3:f7:fa:24:20:c1:87:54:da:56:fb:f1:96:
         29:a7:4f:d5:aa:5f:1a:43:63:08:19:da:59:25:34:ed:2c:80:
         2f:bb:f3:c4:6c:a3:b6:65:36:cf:b2:a6:14:30:73:f5:9d:df:
         9c:00:c8:55:f6:38:c0:6d:06:95:dd:5d:6a:2e:4d:8f:00:be:
         07:20:9b:0a:13:ce:c2:61:7e:1d:11:43:a7:42:57:53:40:27:
         f1:ae:b0:0e:05:b6:a7:74:af:7e:bc:e4:b7:a0:40:c8:37:dd:
         30:d7:96:7d:87:7f:55:4d:6d:6c:14:74:ac:b2:df:1e:32:3c:
         a1:ec:6d:b3:6d:e2:c1:70:26:37:ec:8e:aa:49:79:21:a2:2c:
         bd:35:ac:6e:b7:78:b5:4d:a0:4c:b2:9e:bb:79:c2:d4:99:71:
         18:f8:25:ef:60:f9:fb:af:e4:ab:31:ae:a4:bd:76:09:51:56:
         59:57:0e:5b:9d:b9:fb:4b:43:4b:38:af:ef:6b:51:7d:be:07:
         96:77:6f:73:a8:dd:c5:e7:d1:30:73:3b:13:20:44:88:61:ae:
         03:46:93:d2:49:87:e2:ae:ae:2f:ec:13:5b:0d:67:b4:0b:70:
         e9:5f:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:23:26 2026 by rpki-client