This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa
File:                     3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          YGvGf3oSW96LrbsJ+6hooBnm/cj06/qMMh2lK//E1us=
Subject key identifier:   BB:7F:3D:16:68:A1:9E:AA:E5:7F:3C:56:03:EC:B4:89:63:08:60:EC
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       4098C465528DE79093C9C36B93A5C7B90BA468F5
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:20:58 +0000
ROA not before:           Tue 06 Jan 2026 19:15:58 +0000
ROA not after:            Tue 05 Jan 2027 19:20:58 +0000
asID:                     23243
IP address blocks:        181.174.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:c4:65:52:8d:e7:90:93:c9:c3:6b:93:a5:c7:b9:0b:a4:68:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:15:58 2026 GMT
            Not After : Jan  5 19:20:58 2027 GMT
        Subject: CN=BB7F3D1668A19EAAE57F3C5603ECB489630860EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:04:0e:ac:4d:1f:57:f9:20:9e:78:f7:61:
                    5f:3c:64:40:e6:74:2e:57:82:96:4c:48:6c:f2:11:
                    60:eb:01:35:81:54:af:7e:7c:20:f9:29:cd:eb:52:
                    d2:5d:2e:d4:d1:51:c6:23:76:2c:de:fe:eb:8b:db:
                    cb:64:23:0c:fb:cb:3d:1c:6c:48:18:e0:62:7b:29:
                    ea:7c:4c:d5:3e:0d:a9:c5:4a:86:2d:9d:bd:85:f9:
                    b7:99:8b:b3:2d:23:cc:e1:ba:d6:6e:89:ae:9c:f9:
                    94:9b:03:a9:2f:47:a3:4f:a3:42:3f:94:46:4d:52:
                    c3:e4:d6:1c:65:45:ff:e6:6c:2d:f0:ff:67:69:28:
                    b2:e2:db:fe:3c:32:f6:23:d4:bd:7d:94:9b:12:02:
                    d5:4a:11:ce:b5:7e:69:a7:a9:2d:ec:99:ee:aa:36:
                    12:84:af:27:5e:77:2f:35:fb:05:72:16:a6:b1:a1:
                    0b:42:4a:23:32:84:2a:a9:70:8d:32:58:00:4d:9c:
                    f0:8a:5c:df:c1:0d:5c:93:b7:54:75:57:ca:69:14:
                    a0:ef:46:28:6f:e3:85:5c:0f:c6:26:aa:96:18:6a:
                    64:62:03:8e:63:3a:44:5c:96:6e:48:e0:7e:bc:e5:
                    72:45:c1:32:7c:f0:80:b0:bc:1c:45:6c:c9:4b:cd:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7F:3D:16:68:A1:9E:AA:E5:7F:3C:56:03:EC:B4:89:63:08:60:EC
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130322e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:6e:1c:17:9a:35:54:62:ac:5b:1d:0d:c7:55:e8:71:89:fd:
         d1:b0:f8:cf:fa:d9:94:5a:70:93:c1:3b:2d:e2:87:82:96:ab:
         01:ed:c4:63:2e:54:e6:4c:f8:9d:f8:90:71:61:a1:70:16:3e:
         f2:23:e7:74:20:2c:44:58:fb:dc:1e:d4:b4:e3:60:67:72:05:
         a5:7e:1f:b6:2a:83:5f:ed:df:31:2c:a6:7c:19:f7:13:72:cd:
         21:84:b6:05:4d:f7:99:54:2f:e3:92:dd:71:75:7b:5d:a2:72:
         20:de:2b:9b:71:56:24:90:5a:da:d5:9c:61:4c:4f:45:2d:fe:
         31:cb:f9:85:0b:38:a9:18:30:92:98:af:b7:75:9f:fe:29:a0:
         41:06:90:f8:03:df:d0:11:6f:95:5e:9f:8a:fb:66:9f:0b:77:
         1d:24:f1:ec:07:12:21:3d:00:74:33:14:dc:e7:8d:c5:18:2a:
         d1:2b:9a:12:5d:98:d4:26:04:ff:1d:34:a1:44:bb:e7:99:7b:
         75:64:d1:96:17:46:74:72:ee:f7:07:b0:ce:ed:de:1e:09:35:
         7a:57:49:0d:05:30:2b:e5:44:6f:c7:2d:ad:c2:0f:17:2c:e3:
         ec:cc:3d:da:8b:63:75:9a:e8:57:de:ee:78:09:49:93:a3:c5:
         94:bc:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:52:44 2026 by rpki-client