This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/3138312e3232342e3139362e302f32342d3234203d3e20323732303830.roa
File:                     3138312e3232342e3139362e302f32342d3234203d3e20323732303830.roa (raw, json)
Hash identifier:          e7YvzZQcI/ywYu2DHaqVszAFDII1eayG9/p/n2jKbn4=
Subject key identifier:   A2:00:C6:8B:6D:27:8D:A3:C4:42:ED:9E:CB:82:17:3C:04:FE:AF:06
Certificate issuer:       /CN=9767DA01D4E417990C5243FE751DECE478F14B27
Certificate serial:       30499F6C399586F34170041D855FFB90E34B3CF8
Authority key identifier: 97:67:DA:01:D4:E4:17:99:0C:52:43:FE:75:1D:EC:E4:78:F1:4B:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/3138312e3232342e3139362e302f32342d3234203d3e20323732303830.roa
Signing time:             Tue 06 Jan 2026 19:20:37 +0000
ROA not before:           Tue 06 Jan 2026 19:15:37 +0000
ROA not after:            Tue 05 Jan 2027 19:20:37 +0000
asID:                     272080
IP address blocks:        181.224.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:49:9f:6c:39:95:86:f3:41:70:04:1d:85:5f:fb:90:e3:4b:3c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9767DA01D4E417990C5243FE751DECE478F14B27
        Validity
            Not Before: Jan  6 19:15:37 2026 GMT
            Not After : Jan  5 19:20:37 2027 GMT
        Subject: CN=A200C68B6D278DA3C442ED9ECB82173C04FEAF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:c2:69:77:2c:05:36:e5:fa:58:55:24:7b:
                    d4:6e:ed:92:b9:0c:bd:e4:47:36:de:c4:88:28:5f:
                    c4:9f:08:58:26:22:e9:7a:cf:09:e9:e4:29:3f:c6:
                    df:aa:6c:1c:90:6d:58:67:ee:0b:ec:99:0d:d4:83:
                    cb:5b:c0:48:93:4b:42:6a:25:b6:99:5f:e9:be:bc:
                    f2:5e:de:73:10:25:c7:d5:79:50:03:c9:f7:94:16:
                    e5:f7:de:98:e2:e5:6f:d6:92:da:7f:ea:80:09:e0:
                    32:6c:6e:72:9a:1c:aa:95:62:c2:16:54:9a:7b:6b:
                    bc:a7:8d:93:0f:58:8b:cc:27:81:e1:25:89:7d:77:
                    f3:86:ca:b3:28:bc:58:8f:52:3a:f1:ab:58:01:96:
                    76:c3:a4:2b:fd:b7:29:57:99:ea:64:d1:c2:c9:ad:
                    33:a4:59:78:da:dd:46:c1:4c:a8:84:15:87:62:d2:
                    d7:35:b9:82:a1:61:c6:65:82:60:fe:a3:9e:02:29:
                    79:ec:6b:68:f4:73:ee:6c:f5:d4:13:99:63:df:86:
                    ee:ac:79:ae:88:a5:46:0d:0a:7d:ef:15:9d:1f:8d:
                    c1:ce:55:13:a3:b4:99:ba:8b:cc:01:47:4f:e7:fa:
                    4b:4c:e9:ee:c0:26:f8:8b:40:f4:09:96:5b:c8:22:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:C6:8B:6D:27:8D:A3:C4:42:ED:9E:CB:82:17:3C:04:FE:AF:06
            X509v3 Authority Key Identifier:
                keyid:97:67:DA:01:D4:E4:17:99:0C:52:43:FE:75:1D:EC:E4:78:F1:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/9767DA01D4E417990C5243FE751DECE478F14B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9767DA01D4E417990C5243FE751DECE478F14B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F7C26B4C9857C061FD4C4D980CF6A1CAD17F442B96A630C27978C2A9B577FCA/0/3138312e3232342e3139362e302f32342d3234203d3e20323732303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:87:98:c0:16:83:c0:f9:91:3d:a5:e1:d3:34:f4:fa:13:41:
         01:66:60:b2:cc:9c:4b:6c:2a:d3:9a:8f:33:4f:39:59:b0:4e:
         ce:8a:36:05:c6:7c:82:5f:9a:29:b5:ee:f2:1b:80:27:48:d6:
         e2:25:f1:6c:8f:c6:e0:52:01:7a:8b:2a:42:9b:18:3d:9b:7d:
         09:fa:76:40:d3:97:24:d1:95:ec:3e:5c:ce:a4:12:2b:aa:32:
         59:20:ed:2a:72:42:1c:72:49:ac:7e:83:e5:9e:eb:43:ba:90:
         14:53:43:d9:4f:ca:50:c8:92:31:23:ed:24:ee:e7:47:3c:d9:
         21:b8:f7:ab:f5:c3:87:e0:c1:ab:b7:bb:1c:50:43:54:78:f6:
         b4:94:45:77:dd:16:57:d5:cf:8c:1b:61:17:58:1b:d0:10:0a:
         6a:a3:37:74:29:00:a8:b9:3b:ed:67:81:99:f3:71:07:f4:bf:
         83:01:52:2d:24:1c:67:38:55:f5:d9:c8:e9:62:8c:32:01:ea:
         d1:5b:84:9c:ea:af:94:7a:f9:08:6b:3b:60:bd:cd:1f:71:40:
         24:f5:35:27:aa:da:81:df:89:f4:20:44:b3:52:71:6e:0d:24:
         cb:f6:aa:4c:8d:71:be:19:52:f3:c6:16:a1:9e:d4:44:4e:3d:
         8a:b2:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:44:56 2026 by rpki-client