This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3131322e302f32312d3234203d3e203233323433.roa
File:                     3138312e3137342e3131322e302f32312d3234203d3e203233323433.roa (raw, json)
Hash identifier:          brH2/TqdIVnRBS14oJJPL6id2lqgsVJE/eoLExnCU+0=
Subject key identifier:   D5:C1:A4:0A:1B:DE:39:AA:09:7F:B8:66:5E:8F:BD:79:4D:18:69:ED
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       5115BF1CD2E8C0A2B30ED257E8533A1D54C20C3C
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3131322e302f32312d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:20:59 +0000
ROA not before:           Tue 06 Jan 2026 19:15:59 +0000
ROA not after:            Tue 05 Jan 2027 19:20:59 +0000
asID:                     23243
IP address blocks:        181.174.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:15:bf:1c:d2:e8:c0:a2:b3:0e:d2:57:e8:53:3a:1d:54:c2:0c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:15:59 2026 GMT
            Not After : Jan  5 19:20:59 2027 GMT
        Subject: CN=D5C1A40A1BDE39AA097FB8665E8FBD794D1869ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:d3:08:60:1f:a8:05:ba:73:c6:52:48:84:
                    fe:25:d0:a6:26:86:06:90:a4:4a:89:37:db:87:e6:
                    d0:e2:77:f7:28:82:fc:41:2e:49:77:4f:8f:31:b6:
                    ca:00:3b:92:05:03:8f:fa:93:57:cd:2f:58:9f:7f:
                    89:7f:b7:e7:6a:a1:53:03:d1:7c:4c:a1:1f:28:1e:
                    ce:7e:e3:9b:58:e3:30:b0:ad:e8:4c:12:cf:6a:c7:
                    72:52:35:00:58:03:d3:a8:40:66:6a:e2:3f:6e:c6:
                    ef:b1:d5:af:6a:84:c1:b9:1a:85:93:df:6b:df:ec:
                    c4:e8:68:89:02:85:eb:49:f7:f0:43:06:a4:9a:a6:
                    13:04:bd:93:3d:b2:ae:26:15:7e:05:61:57:be:d1:
                    07:c4:44:50:60:4e:09:c8:ae:19:68:f1:cf:9e:a3:
                    97:1b:8d:db:20:b0:22:cd:be:d7:1f:84:5e:f7:bf:
                    e3:f4:08:dd:ff:2b:fa:cb:ac:d4:ee:3e:8f:a8:16:
                    b1:f0:dd:b6:88:68:f7:ae:df:32:b1:12:b7:5b:3f:
                    e5:e8:c3:77:11:cd:ae:e7:9c:12:d2:20:2a:ca:1e:
                    3a:be:fa:c7:65:00:b2:cc:b0:19:14:d2:74:d8:44:
                    84:4b:59:b9:8b:dc:00:05:39:9f:23:49:86:69:d6:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C1:A4:0A:1B:DE:39:AA:09:7F:B8:66:5E:8F:BD:79:4D:18:69:ED
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3131322e302f32312d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:c3:2a:18:5e:1c:c8:00:fb:7b:38:d4:59:25:f6:ba:8e:
         53:d8:fe:28:6d:72:7b:18:51:7a:15:8d:a8:b6:18:32:80:96:
         35:4c:07:d9:0c:99:cd:27:2c:35:ab:14:e5:ea:6a:5d:8a:8a:
         ab:ea:a9:4e:e4:a0:e6:87:71:a4:d0:90:61:31:a3:d8:22:9e:
         55:12:e3:4a:30:b1:7f:1c:61:a9:9f:40:1a:8d:f6:ce:78:42:
         13:72:4a:45:82:c8:49:17:06:96:89:13:7b:5d:3c:ee:b9:e2:
         b5:2e:94:9c:87:2c:9c:a1:fc:f5:57:f8:3a:db:ec:2f:7c:4a:
         1e:d1:48:f1:68:b4:02:b1:b6:da:59:c8:d8:8c:3b:83:2f:a8:
         35:19:06:f1:9c:64:b7:70:68:49:bb:3a:36:ab:52:ac:f0:97:
         68:81:ca:5b:03:cd:25:ac:d4:df:d3:f0:32:68:e0:7a:cf:28:
         61:e9:d5:41:39:69:8e:e1:f4:29:d8:d9:5b:7f:b7:0c:a0:eb:
         28:61:95:ff:f4:8b:f0:4a:3d:fb:e9:83:64:94:f2:84:ec:a4:
         b4:84:a9:25:5d:94:ff:25:2f:f8:d5:e8:21:d1:0a:90:bd:21:
         9b:c3:6c:36:8f:00:a4:d0:15:13:36:f8:de:a7:e7:5c:ea:37:
         3d:7f:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:34 2026 by rpki-client