This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133322e302f32342d3234203d3e203236363137.roa
File:                     3138312e3138392e3133322e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          Kjeah/IpDDn4AxQBCSjXQvPCmpmWer3J7Zq+ZL8ck8E=
Subject key identifier:   44:F9:A4:88:D3:C5:D8:ED:56:C0:36:19:62:C0:E6:47:A6:7A:C1:60
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       5EDAC9BC819C577D44B2F76C6A128453FADE0FB3
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133322e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:21:04 +0000
ROA not before:           Tue 06 Jan 2026 19:16:04 +0000
ROA not after:            Tue 05 Jan 2027 19:21:04 +0000
asID:                     26617
IP address blocks:        181.189.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:da:c9:bc:81:9c:57:7d:44:b2:f7:6c:6a:12:84:53:fa:de:0f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:16:04 2026 GMT
            Not After : Jan  5 19:21:04 2027 GMT
        Subject: CN=44F9A488D3C5D8ED56C0361962C0E647A67AC160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:4a:10:c1:90:4e:d5:78:97:1a:57:fd:17:
                    06:9f:d1:0d:e6:91:35:44:8f:53:9a:d2:1a:10:2a:
                    73:ab:32:8b:cf:b6:f0:97:f4:9c:9f:1f:2e:ba:46:
                    c9:85:a6:26:7c:81:f2:92:9c:91:b4:50:af:44:ae:
                    c9:ab:01:eb:b5:e0:be:c4:23:ac:bb:b4:25:06:1e:
                    f0:e5:ae:5d:fa:ed:8e:ae:4e:e6:6f:b2:26:f0:d6:
                    24:00:8a:32:03:d1:dc:07:3a:3e:90:45:e0:be:50:
                    4e:c7:60:03:08:68:f9:8b:ff:8d:c3:8a:af:d8:a0:
                    64:c6:51:91:0a:4e:ec:e5:c9:53:af:ae:79:6e:55:
                    fd:ca:28:69:39:00:cd:ae:0b:e2:29:89:7f:87:c4:
                    14:40:ca:34:b0:08:7e:bf:34:7c:05:53:e5:8b:fb:
                    80:5d:06:aa:90:08:92:c2:70:17:46:9e:7b:e1:4a:
                    d0:8c:ef:55:7f:e1:30:8e:a4:98:ec:75:4e:58:a9:
                    9f:af:24:d1:17:84:c8:6b:20:ec:b9:eb:b8:2b:bc:
                    ac:d8:fd:c2:d5:77:3c:f5:ad:5e:18:13:82:4c:2e:
                    89:ed:4b:ab:22:19:4e:a5:78:77:88:74:c8:24:f1:
                    1a:37:c1:15:64:73:30:53:a9:3c:c1:44:23:2d:3c:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:A4:88:D3:C5:D8:ED:56:C0:36:19:62:C0:E6:47:A6:7A:C1:60
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133322e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:52:e3:b8:42:02:5f:9f:34:b1:6f:3d:1f:f8:b0:67:e8:
         87:d3:d6:ad:f9:0e:dc:ab:aa:df:a5:72:2b:d7:9a:bf:c8:dc:
         5a:38:b6:30:52:1b:f8:36:07:1f:30:17:f6:96:10:e1:f8:93:
         67:ba:b3:e6:2c:91:d6:f9:64:56:46:bc:f2:d0:27:c3:47:3e:
         cd:25:16:23:6d:a9:08:98:61:da:a3:72:66:af:35:d0:07:42:
         ff:2b:e7:1f:f0:86:44:35:84:6a:68:27:39:cc:27:56:10:66:
         a0:1f:6b:b1:54:94:4c:d4:4d:37:6a:ad:bf:a1:b1:6e:8f:b6:
         31:b5:1e:06:14:a3:bd:97:3b:27:40:bd:00:6f:d1:6b:db:2d:
         19:4a:78:59:ba:02:21:38:1c:6c:f7:f3:70:3d:93:ec:86:7f:
         a0:18:f5:b5:d9:80:79:cb:d7:a7:08:f6:b8:e9:de:7d:dd:5d:
         c5:16:e5:f1:f3:3f:06:ae:60:79:8b:bd:15:29:7d:c0:5b:55:
         ce:fe:4a:23:06:fb:ce:ee:95:b2:e8:13:d2:75:bf:e8:7b:81:
         70:8c:3f:8d:12:28:d9:40:34:03:50:2c:11:16:8d:2f:64:a6:
         27:6a:dd:b7:9a:21:a8:fc:d7:b4:51:3b:75:af:04:13:97:c9:
         df:17:88:ff
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXtrJvIGcV31EsvdsahKEU/reD7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNjAxMDYxOTE2MDRaFw0yNzAxMDUxOTIxMDRaMDMxMTAvBgNV
BAMTKDQ0RjlBNDg4RDNDNUQ4RUQ1NkMwMzYxOTYyQzBFNjQ3QTY3QUMxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhoEoQwZBO1XiXGlf9Fwaf0Q3m
kTVEj1Oa0hoQKnOrMovPtvCX9JyfHy66RsmFpiZ8gfKSnJG0UK9ErsmrAeu14L7E
I6y7tCUGHvDlrl367Y6uTuZvsibw1iQAijID0dwHOj6QReC+UE7HYAMIaPmL/43D
iq/YoGTGUZEKTuzlyVOvrnluVf3KKGk5AM2uC+IpiX+HxBRAyjSwCH6/NHwFU+WL
+4BdBqqQCJLCcBdGnnvhStCM71V/4TCOpJjsdU5YqZ+vJNEXhMhrIOy567grvKzY
/cLVdzz1rV4YE4JMLontS6siGU6leHeIdMgk8Ro3wRVkczBTqTzBRCMtPPkXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURPmkiNPF2O1WwDYZYsDmR6Z6wWAwHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzMTJlMzEzODM5MmUzMTMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb2E
MA0GCSqGSIb3DQEBCwUAA4IBAQCtYFLjuEICX580sW89H/iwZ+iH09at+Q7cq6rf
pXIr15q/yNxaOLYwUhv4NgcfMBf2lhDh+JNnurPmLJHW+WRWRrzy0CfDRz7NJRYj
bakImGHao3JmrzXQB0L/K+cf8IZENYRqaCc5zCdWEGagH2uxVJRM1E03aq2/obFu
j7YxtR4GFKO9lzsnQL0Ab9Fr2y0ZSnhZugIhOBxs9/NwPZPshn+gGPW12YB5y9en
CPa46d593V3FFuXx8z8GrmB5i70VKX3AW1XO/kojBvvO7pWy6BPSdb/oe4FwjD+N
EijZQDQDUCwRFo0vZKYnat23miGo/Ne0UTt1rwQTl8nfF4j/
-----END CERTIFICATE-----
Generated at Mon Jan 12 13:52:22 2026 by rpki-client