This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138312e3131382e36342e302f31382d3236203d3e203238303735.roa
File:                     3138312e3131382e36342e302f31382d3236203d3e203238303735.roa (raw, json)
Hash identifier:          t6uCZJ5EwMRois0pBN65gja0nrW1GYfDUh4o00rpjhE=
Subject key identifier:   CF:03:9F:3A:5A:FC:94:A8:B6:EA:D4:05:6E:A7:4A:36:21:F0:1E:D7
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       78769CA1EADA165C0E242AC65C29C3522D0A3969
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138312e3131382e36342e302f31382d3236203d3e203238303735.roa
Signing time:             Tue 06 Jan 2026 20:50:33 +0000
ROA not before:           Tue 06 Jan 2026 20:45:33 +0000
ROA not after:            Tue 05 Jan 2027 20:50:33 +0000
asID:                     28075
IP address blocks:        181.118.64.0/18 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:76:9c:a1:ea:da:16:5c:0e:24:2a:c6:5c:29:c3:52:2d:0a:39:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Jan  6 20:45:33 2026 GMT
            Not After : Jan  5 20:50:33 2027 GMT
        Subject: CN=CF039F3A5AFC94A8B6EAD4056EA74A3621F01ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:e9:88:74:7c:18:c0:ba:57:75:e6:16:f4:
                    a1:fe:c6:05:ec:7c:64:fc:ca:6d:ba:5f:fc:61:5f:
                    93:cf:00:af:70:ba:27:16:ab:6e:ce:01:67:a1:14:
                    4a:6a:26:eb:a1:f2:9f:ee:0b:86:e7:6a:f8:0b:21:
                    37:08:1d:86:bc:1e:da:97:78:9e:a4:49:22:5d:36:
                    32:86:fe:aa:9b:2a:3b:3e:a6:fe:01:c6:27:2f:9d:
                    46:5c:b0:46:d2:e3:12:b1:80:2b:76:0b:da:08:af:
                    9d:e6:77:dc:7e:c9:d5:78:d1:e8:53:14:4d:2c:22:
                    0b:43:2b:77:f5:d8:11:d8:6c:e5:7d:9b:79:a9:d9:
                    1d:7a:ab:e7:40:62:47:90:42:71:f8:98:3d:04:1d:
                    99:65:b6:c5:37:56:b8:02:c7:f1:8b:b9:19:62:1e:
                    ac:6a:dd:9e:de:68:89:c5:0b:dc:79:69:52:08:7f:
                    36:63:a5:bd:2a:a3:28:4a:e9:82:15:04:05:b2:1b:
                    c4:0c:22:b6:a2:43:3b:64:e1:4b:d4:a1:a1:7d:cc:
                    29:8b:78:6f:36:6b:59:3a:6f:ac:8d:4d:0f:4c:99:
                    f8:aa:8b:03:55:5a:df:c6:4a:93:d4:b6:42:fa:ab:
                    a5:c9:4f:3e:05:f0:25:35:55:bb:4b:ca:b8:5e:08:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:9F:3A:5A:FC:94:A8:B6:EA:D4:05:6E:A7:4A:36:21:F0:1E:D7
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3138312e3131382e36342e302f31382d3236203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:56:db:81:22:de:91:5f:56:e4:b3:d0:df:61:f7:38:11:47:
         67:70:d4:4f:fd:19:91:bc:f4:10:27:f5:4c:c5:cb:71:bb:5a:
         d1:42:22:fa:a4:8a:94:d8:d7:9d:04:95:12:e6:e0:96:e9:3e:
         5e:0b:cf:8a:5c:34:84:f6:99:b6:f6:62:9a:14:88:be:1b:06:
         64:b1:7e:72:ea:fd:ca:8e:c6:b9:0c:3f:9b:2a:e6:4d:a4:b8:
         0d:aa:10:1f:a8:8d:1f:64:de:fd:e8:c4:c9:87:df:38:a7:71:
         7a:87:86:7d:6c:c0:de:c1:d1:dc:7e:65:d7:73:52:30:c7:7c:
         91:61:2f:00:40:64:46:44:16:56:82:ba:95:69:97:21:80:07:
         78:52:d9:65:06:95:6a:4b:4b:39:69:8b:71:5d:e2:a9:46:9f:
         50:e8:aa:9d:cd:5c:15:9b:27:72:96:fe:19:2a:02:fa:ad:3a:
         04:0d:76:f5:8a:cd:2d:8d:c8:98:8c:b8:1b:05:ca:f3:d8:35:
         4f:91:c2:02:51:18:f6:c8:4a:d4:1d:e7:f1:a3:a5:28:87:4b:
         d3:f3:18:95:b1:05:16:2e:22:18:7f:df:a1:f4:57:9d:02:7e:
         67:10:6f:a7:4d:63:fd:42:ac:58:be:5f:6c:bb:27:89:10:71:
         db:9a:61:b8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeHacoeraFlwOJCrGXCnDUi0KOWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NDN0RGQjJDN0M5RkNGMkYxMTQwNjE0NzZFQ0I4N0I1
NzNBNEUxODAeFw0yNjAxMDYyMDQ1MzNaFw0yNzAxMDUyMDUwMzNaMDMxMTAvBgNV
BAMTKENGMDM5RjNBNUFGQzk0QThCNkVBRDQwNTZFQTc0QTM2MjFGMDFFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbHOmIdHwYwLpXdeYW9KH+xgXs
fGT8ym26X/xhX5PPAK9wuicWq27OAWehFEpqJuuh8p/uC4bnavgLITcIHYa8HtqX
eJ6kSSJdNjKG/qqbKjs+pv4BxicvnUZcsEbS4xKxgCt2C9oIr53md9x+ydV40ehT
FE0sIgtDK3f12BHYbOV9m3mp2R16q+dAYkeQQnH4mD0EHZlltsU3VrgCx/GLuRli
Hqxq3Z7eaInFC9x5aVIIfzZjpb0qoyhK6YIVBAWyG8QMIraiQztk4UvUoaF9zCmL
eG82a1k6b6yNTQ9MmfiqiwNVWt/GSpPUtkL6q6XJTz4F8CU1VbtLyrheCFzBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzwOfOlr8lKi26tQFbqdKNiHwHtcwHwYDVR0j
BBgwFoAUzMffssfJ/PLxFAYUduy4e1c6ThgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QjQ0OEIyRjk5Rjc1MERFRTRGQjM4MjBCRkRFRUE1QzA3
MEFDNzhBQzFEREVBRTRCQTVCNDcyQjU4MERBMjY0LzAvQ0NDN0RGQjJDN0M5RkNG
MkYxMTQwNjE0NzZFQ0I4N0I1NzNBNEUxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0M3REZCMkM3QzlGQ0YyRjEx
NDA2MTQ3NkVDQjg3QjU3M0E0RTE4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkI0NDhCMkY5OUY3NTBERUU0RkIzODIwQkZERUVBNUMwNzBBQzc4QUMx
RERFQUU0QkE1QjQ3MkI1ODBEQTI2NC8wLzMxMzgzMTJlMzEzMTM4MmUzNjM0MmUz
MDJmMzEzODJkMzIzNjIwM2QzZTIwMzIzODMwMzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrV2QDAN
BgkqhkiG9w0BAQsFAAOCAQEAAlbbgSLekV9W5LPQ32H3OBFHZ3DUT/0Zkbz0ECf1
TMXLcbta0UIi+qSKlNjXnQSVEubgluk+XgvPilw0hPaZtvZimhSIvhsGZLF+cur9
yo7GuQw/myrmTaS4DaoQH6iNH2Te/ejEyYffOKdxeoeGfWzA3sHR3H5l13NSMMd8
kWEvAEBkRkQWVoK6lWmXIYAHeFLZZQaVaktLOWmLcV3iqUafUOiqnc1cFZsncpb+
GSoC+q06BA129YrNLY3ImIy4GwXK89g1T5HCAlEY9shK1B3n8aOlKIdL0/MYlbEF
Fi4iGH/fofRXnQJ+ZxBvp01j/UKsWL5fbLsniRBx25phuA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:53:48 2026 by rpki-client