This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa
File:                     3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          WGouHP2IDMJX/UtdQCriz6aipRd96aLcVibZp8YKUw4=
Subject key identifier:   BE:0C:F1:47:0A:80:A9:E8:0F:7C:5D:02:0A:4C:04:A4:F6:84:B8:84
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       0A9623675747FE8F9D4B40CE331F51DCAE546A44
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 06 Jan 2026 19:23:59 +0000
ROA not before:           Tue 06 Jan 2026 19:18:59 +0000
ROA not after:            Tue 05 Jan 2027 19:23:59 +0000
asID:                     263717
IP address blocks:        181.174.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:96:23:67:57:47:fe:8f:9d:4b:40:ce:33:1f:51:dc:ae:54:6a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Jan  6 19:18:59 2026 GMT
            Not After : Jan  5 19:23:59 2027 GMT
        Subject: CN=BE0CF1470A80A9E80F7C5D020A4C04A4F684B884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:9a:47:74:2c:be:89:1f:c5:d6:80:97:db:
                    84:cf:6b:a5:92:d3:97:29:73:cf:46:38:1b:dc:49:
                    15:2a:a4:7c:d8:21:7e:f1:a1:71:ec:89:42:b1:da:
                    57:df:50:b4:38:10:62:c3:91:29:a9:47:f4:44:ba:
                    f7:d3:e7:d1:15:18:8f:09:e5:f4:ce:49:e8:bf:3d:
                    02:80:12:2b:48:ab:88:3a:b2:03:5c:0b:38:e4:be:
                    2b:35:15:ac:02:ca:27:cc:77:08:1e:cb:d3:01:64:
                    79:68:5b:3a:f3:20:8f:ca:a9:da:2e:4d:00:00:e9:
                    91:ff:cd:5d:96:8c:d3:75:29:0c:cf:02:97:34:09:
                    a5:26:e6:f1:2b:02:1a:36:de:9e:a0:47:88:fd:2f:
                    97:0a:c5:66:a6:fc:33:3e:50:23:d6:11:a9:99:f4:
                    c5:17:19:06:59:b3:20:b8:5f:37:87:91:c5:31:a7:
                    35:2b:4c:01:43:b2:0d:45:22:28:60:c5:8e:f9:1f:
                    ef:a2:be:96:31:fc:d0:ff:c1:a1:07:d9:4e:44:a0:
                    f5:7e:1c:4d:11:89:6f:0a:c4:5b:df:6c:61:8a:25:
                    c5:2d:4a:ad:52:3d:cc:68:2a:3b:21:94:43:aa:cd:
                    db:e0:c4:8e:aa:e4:02:34:3f:a3:26:4e:4a:94:c9:
                    96:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0C:F1:47:0A:80:A9:E8:0F:7C:5D:02:0A:4C:04:A4:F6:84:B8:84
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:2b:1e:bb:2d:1c:63:ff:32:8a:48:46:dc:d2:6e:f5:74:
         c4:b7:7a:60:15:de:bb:da:a7:60:b2:2e:8f:97:65:a7:6f:11:
         41:d2:1f:7a:55:d4:cd:b1:0a:fb:d7:9e:3a:25:93:ce:b0:93:
         8c:53:cf:c2:79:af:91:1b:8d:b0:61:f9:a0:70:29:f7:75:9f:
         2d:92:4a:04:16:65:00:aa:18:6c:4d:13:3a:f9:1f:c6:48:3a:
         80:83:54:3e:57:04:27:fa:8c:5b:aa:62:f3:ba:b5:97:54:7b:
         cd:e6:e9:c5:cb:d6:ea:5e:ee:59:b1:14:2e:bd:55:77:0e:0d:
         05:c6:ca:86:c3:a8:04:5e:cd:a5:e0:ff:12:6c:64:ba:f9:38:
         e1:f2:8f:86:5d:e3:82:74:32:88:9e:1f:aa:5a:02:d5:8b:22:
         76:1c:e5:d1:eb:f2:bd:6b:2c:d5:37:f6:b3:4e:c2:eb:37:fd:
         0b:9a:84:76:9a:da:56:73:5e:81:9b:fe:de:33:55:01:b0:8b:
         61:82:38:0b:8f:12:af:7b:a6:fb:30:42:ad:a9:10:19:93:87:
         4a:93:54:be:29:cf:7e:da:3d:de:5c:4b:91:cc:30:08:c4:8c:
         5f:3e:c8:80:c3:d8:c3:d4:21:f7:79:a9:f8:ec:af:13:70:9c:
         a0:38:ed:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:31:49 2026 by rpki-client