This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa
File:                     3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa (raw, json)
Hash identifier:          MlbeTwVPPW3C5aH/6pC+TctRA6uEFXis9iPqG3LybLA=
Subject key identifier:   4F:74:97:7F:C3:09:92:C5:5B:7C:D6:F3:62:52:F4:31:36:77:55:9B
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       67FD2172D09D0AE125995B058937CCD7D1D60124
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa
Signing time:             Tue 06 Jan 2026 19:20:33 +0000
ROA not before:           Tue 06 Jan 2026 19:15:33 +0000
ROA not after:            Tue 05 Jan 2027 19:20:33 +0000
asID:                     264764
IP address blocks:        181.199.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 04:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fd:21:72:d0:9d:0a:e1:25:99:5b:05:89:37:cc:d7:d1:d6:01:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Jan  6 19:15:33 2026 GMT
            Not After : Jan  5 19:20:33 2027 GMT
        Subject: CN=4F74977FC30992C55B7CD6F36252F4313677559B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:aa:77:01:80:c7:65:3f:32:cd:d3:a8:22:
                    07:15:96:34:6d:14:e0:5b:ce:73:1e:39:3d:5c:9a:
                    20:b4:d8:24:db:b3:8b:a1:28:c0:e9:7f:58:da:b8:
                    b0:75:2f:48:e8:6c:36:da:79:5a:c7:ed:76:e0:59:
                    62:48:68:3a:ce:52:e4:dd:d0:51:a0:a2:6a:28:6b:
                    ec:5a:92:3e:4e:c1:c3:04:14:92:78:8f:a0:f1:a2:
                    15:e8:ae:f2:6a:5b:1b:64:56:35:a5:e8:cc:5f:5c:
                    76:a9:b2:8d:41:07:90:05:47:b0:c0:66:8f:d4:ac:
                    75:0e:fd:1c:2b:b9:41:7d:1a:74:9a:af:48:8b:2e:
                    8b:4a:a3:b5:ea:98:3c:04:5b:1a:2a:e5:bc:10:6d:
                    25:5d:ca:13:72:68:83:f8:79:9a:ed:fd:6c:5d:9a:
                    51:66:12:aa:db:65:d1:d6:3f:8a:df:bf:08:a4:de:
                    c5:39:02:53:81:19:63:ed:71:58:f1:26:f4:e4:f9:
                    07:d9:8b:44:db:91:ab:ba:12:36:54:cc:62:6b:34:
                    d2:07:27:04:55:c0:84:46:8d:a5:15:0f:20:a7:0d:
                    74:86:5d:3a:00:6a:92:41:5e:b7:76:77:c9:55:e8:
                    c6:49:47:f9:83:ff:6d:7b:83:8a:eb:36:b9:61:fc:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:74:97:7F:C3:09:92:C5:5B:7C:D6:F3:62:52:F4:31:36:77:55:9B
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3138312e3139392e3231302e302f32332d3234203d3e20323634373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:7a:77:a8:c5:ec:d3:e8:8e:71:7d:4d:9a:4f:c2:b9:2b:
         b4:9c:a8:37:04:c0:43:a4:8f:69:5d:03:50:e0:81:13:c0:1e:
         ed:d6:e2:56:e5:48:2f:e5:78:cc:09:ff:20:b5:0f:02:c8:c4:
         11:37:55:a4:10:71:e1:82:38:eb:b5:4c:aa:43:ce:1b:6c:a5:
         ce:ad:cd:69:b4:21:78:b3:ba:68:c0:df:e8:2c:76:1b:4e:4f:
         eb:b0:83:53:7a:dc:3e:86:46:9e:ff:89:26:5a:8c:f6:57:78:
         07:8a:b0:c0:06:6c:17:aa:f6:37:27:b9:e6:9a:5e:82:bf:4e:
         cb:28:78:5c:d6:e4:23:2f:d1:c6:a5:93:0c:53:4b:51:9e:72:
         d8:b8:29:a2:d2:e7:ab:2f:91:8f:8e:14:8c:f6:49:71:5e:e1:
         9b:31:00:49:ab:e7:1a:fd:fe:e8:a0:6e:ba:d3:c4:04:06:0f:
         33:70:22:6d:8e:36:86:41:0e:c6:d9:2b:64:b9:21:eb:53:ab:
         c4:c3:8b:df:17:32:16:41:39:f0:d9:90:c6:56:99:82:e4:57:
         84:55:73:84:bf:97:dc:11:9e:18:0b:16:3d:e9:17:78:2c:99:
         23:36:d8:29:30:bf:d5:dd:fb:b6:4b:dd:9f:40:d9:39:5b:29:
         3a:23:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:43 2026 by rpki-client