This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/3138312e3232352e3138382e302f32322d3235203d3e203532343638.roa
File:                     3138312e3232352e3138382e302f32322d3235203d3e203532343638.roa (raw, json)
Hash identifier:          fmIDFHYib0TG2BJ9a8D6sAAF6Xt1ad8j/hGjd5Oncyk=
Subject key identifier:   47:D0:87:8C:85:2D:DB:E2:7B:19:AC:1A:07:BB:20:7D:FC:16:34:69
Certificate issuer:       /CN=88924512785DEB429CCCBECC2E1BACE2027B5961
Certificate serial:       43A7B3E3B69D1D16F02B875422B572DB9C7C0F82
Authority key identifier: 88:92:45:12:78:5D:EB:42:9C:CC:BE:CC:2E:1B:AC:E2:02:7B:59:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88924512785DEB429CCCBECC2E1BACE2027B5961.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/3138312e3232352e3138382e302f32322d3235203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 20:48:56 +0000
ROA not before:           Tue 06 Jan 2026 20:43:56 +0000
ROA not after:            Tue 05 Jan 2027 20:48:56 +0000
asID:                     52468
IP address blocks:        181.225.188.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/88924512785DEB429CCCBECC2E1BACE2027B5961.crl
                          rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/88924512785DEB429CCCBECC2E1BACE2027B5961.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88924512785DEB429CCCBECC2E1BACE2027B5961.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 04:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:b3:e3:b6:9d:1d:16:f0:2b:87:54:22:b5:72:db:9c:7c:0f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88924512785DEB429CCCBECC2E1BACE2027B5961
        Validity
            Not Before: Jan  6 20:43:56 2026 GMT
            Not After : Jan  5 20:48:56 2027 GMT
        Subject: CN=47D0878C852DDBE27B19AC1A07BB207DFC163469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:67:f5:79:6f:27:f7:aa:16:91:3d:0c:4a:
                    2d:15:4a:63:9f:7c:12:b5:45:c0:49:6e:88:14:45:
                    ae:2d:d7:f3:f4:66:78:3b:72:f3:ad:ff:f7:f2:88:
                    d5:24:ba:c6:b1:ea:f9:69:83:bf:ad:cc:6b:bd:47:
                    74:1f:64:e8:5e:6a:64:3e:b7:d4:97:0f:ef:01:81:
                    df:87:03:5b:9b:a9:3c:58:e9:ee:5e:76:ed:f6:91:
                    da:61:ca:62:16:6c:9c:c9:ec:7e:f2:f2:af:a9:5e:
                    03:32:ca:c4:7a:1f:c1:30:23:85:c2:45:a8:95:dd:
                    1f:a8:aa:3a:ce:a5:08:03:43:cd:7c:00:71:3d:a6:
                    5c:9d:20:41:ad:83:34:c3:33:41:08:21:fb:af:f9:
                    ba:7e:05:aa:7f:4e:5f:21:92:d2:54:d0:15:fd:43:
                    2e:75:bb:06:1c:f2:3f:64:23:8d:86:86:d1:8f:69:
                    35:f9:b8:df:74:37:04:07:8d:39:ff:3b:7b:e5:49:
                    c0:f7:d1:90:c2:02:45:b0:b9:25:d8:70:c3:dd:ee:
                    50:92:24:9b:2d:39:b3:0a:75:0a:31:94:4e:81:c3:
                    e4:c7:89:18:7d:e1:6e:26:f9:9a:44:2b:c1:f4:98:
                    c8:2a:1e:54:a1:80:df:7b:ce:31:57:8a:a6:7c:42:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D0:87:8C:85:2D:DB:E2:7B:19:AC:1A:07:BB:20:7D:FC:16:34:69
            X509v3 Authority Key Identifier:
                keyid:88:92:45:12:78:5D:EB:42:9C:CC:BE:CC:2E:1B:AC:E2:02:7B:59:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/88924512785DEB429CCCBECC2E1BACE2027B5961.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88924512785DEB429CCCBECC2E1BACE2027B5961.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/905164745AE225E97CBE989FCDD382285E4679BE78C0C92B4BADC12EF454717A/0/3138312e3232352e3138382e302f32322d3235203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:5e:ca:1e:26:c3:e6:22:d2:bf:07:b1:fc:22:52:87:1a:
         be:0a:1e:27:43:04:59:4c:78:37:ca:96:45:1f:d0:80:c2:1c:
         12:10:ad:5f:be:bd:b0:f7:75:39:1b:93:81:91:0e:b4:40:73:
         72:79:a9:f1:f8:5e:39:bc:32:a6:1a:d6:d9:aa:7a:33:7e:d0:
         0c:da:18:0b:b4:29:32:56:93:22:cd:15:28:7e:55:a5:72:79:
         ec:c1:89:85:a1:78:91:48:e2:8a:59:1f:13:7e:ec:fd:b9:49:
         5a:e9:6c:aa:a2:2b:90:21:35:5d:cb:23:de:f4:07:ef:b8:80:
         98:ac:0c:4f:e9:be:02:49:b6:e2:7c:5a:89:03:e3:0e:39:c2:
         9a:bc:14:8a:3f:04:1b:3b:36:be:c5:fa:44:70:40:49:2b:83:
         27:50:47:8c:fa:e0:74:c9:44:ae:f4:0a:3b:84:69:1f:5b:05:
         69:dc:3e:0b:68:5b:cc:1c:aa:34:df:bc:e0:ef:a6:a2:a8:ab:
         ec:e2:a2:de:11:70:27:36:d4:39:c4:ba:2c:1e:e3:48:25:ca:
         ec:fc:02:6b:ef:36:2c:a8:b6:12:5d:be:36:a1:c1:d4:e1:0a:
         33:3f:d4:89:de:a4:84:01:82:5a:79:9b:bd:f3:6a:1d:c9:cf:
         5c:bb:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:07 2026 by rpki-client