This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa
File:                     3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          OTwuTydkp5SZPKi+9lCvBLaNk0Kb1dYDaa8Xw812XQk=
Subject key identifier:   A0:D7:17:2E:B5:19:19:EA:4B:60:8E:99:04:0F:18:E9:06:C2:FF:51
Certificate issuer:       /CN=54E0DE0BBF0249F284D30574DC13279D205FF11E
Certificate serial:       7B6177A608CB98479032E8610F3B60518D928267
Authority key identifier: 54:E0:DE:0B:BF:02:49:F2:84:D3:05:74:DC:13:27:9D:20:5F:F1:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa
Signing time:             Tue 06 Jan 2026 19:18:09 +0000
ROA not before:           Tue 06 Jan 2026 19:13:09 +0000
ROA not after:            Tue 05 Jan 2027 19:18:09 +0000
asID:                     13489
IP address blocks:        181.233.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:61:77:a6:08:cb:98:47:90:32:e8:61:0f:3b:60:51:8d:92:82:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E0DE0BBF0249F284D30574DC13279D205FF11E
        Validity
            Not Before: Jan  6 19:13:09 2026 GMT
            Not After : Jan  5 19:18:09 2027 GMT
        Subject: CN=A0D7172EB51919EA4B608E99040F18E906C2FF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:e4:b5:b3:29:fc:57:4f:e6:32:7a:2b:4a:
                    73:49:ae:cf:fc:a0:7e:6a:9c:71:e5:72:99:97:a4:
                    ac:51:92:29:29:2f:bc:95:67:d3:7f:09:62:13:96:
                    a8:30:49:22:0f:62:e2:c7:3d:93:99:c0:c0:31:b6:
                    d5:97:10:48:45:ec:e4:0d:4d:db:41:5a:af:15:68:
                    b3:e1:1f:e8:0b:71:a9:8f:bc:80:dd:b3:81:99:82:
                    b2:c7:8b:14:d9:a0:e2:18:f9:3e:ec:e5:25:87:cc:
                    39:99:6c:96:64:fb:14:53:4b:41:30:2f:f5:2e:c9:
                    d5:e7:65:b3:a1:f6:16:3c:64:b9:aa:0d:da:28:27:
                    53:05:6e:c8:fc:db:de:c1:55:af:4b:d1:87:b5:4f:
                    4e:7e:90:5b:84:c3:91:77:15:17:35:ee:00:d9:9a:
                    c6:cb:45:86:57:63:b0:06:57:7c:95:dd:40:9e:bc:
                    b3:9f:de:58:5e:03:bb:6d:a1:b6:b1:6c:17:9c:ec:
                    cf:90:26:f1:57:35:05:bf:af:db:e6:fc:f2:18:46:
                    e0:7c:e6:ab:2e:1c:46:f1:75:1c:e9:de:71:46:35:
                    f0:3b:15:69:95:1e:f9:db:42:e8:2a:15:fd:43:40:
                    04:c1:17:02:6d:b1:6d:57:95:a4:e7:8c:9a:c3:8c:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D7:17:2E:B5:19:19:EA:4B:60:8E:99:04:0F:18:E9:06:C2:FF:51
            X509v3 Authority Key Identifier:
                keyid:54:E0:DE:0B:BF:02:49:F2:84:D3:05:74:DC:13:27:9D:20:5F:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:db:04:8f:72:7d:11:de:07:c6:26:01:03:6c:21:eb:d6:8b:
         38:4d:6a:07:ec:e0:45:7c:3e:f4:0b:cb:ea:18:a0:06:45:05:
         f0:ae:a5:78:c5:15:63:f7:e0:d3:3e:33:c6:4a:c6:8b:b6:33:
         78:25:ac:8a:ce:37:07:83:93:fc:83:4a:68:68:b4:d0:e3:1c:
         7f:66:e3:62:de:b5:98:3b:6f:70:68:84:b5:1a:7c:eb:aa:34:
         5a:88:02:5b:65:99:4d:1b:cf:e3:eb:10:6c:08:86:8f:7b:2d:
         b3:67:3e:01:dc:d6:25:e4:0f:64:47:73:81:c8:6a:66:31:29:
         29:5a:8d:23:fc:e4:f7:e3:75:33:77:1c:86:80:b9:11:55:bc:
         1c:9e:25:f2:18:19:41:2c:81:c4:8f:85:ff:fe:d9:0e:b2:4e:
         fe:5e:c8:43:c1:79:bb:5e:fc:14:23:7c:61:bb:39:91:68:84:
         3c:51:f4:bd:95:9d:09:c4:a4:25:43:7e:0d:a0:88:ed:2d:b5:
         04:e5:de:dd:46:ce:5a:d6:2b:2f:fb:47:82:d6:a7:e0:20:4e:
         aa:7b:11:5a:ce:07:24:41:82:fe:5b:06:24:cd:91:7f:09:3a:
         b2:65:64:40:28:e6:20:38:63:ac:9e:0c:a8:52:9b:f0:1b:32:
         e2:1f:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:44:36 2026 by rpki-client