This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e36342e302f31382d3232203d3e203139383633.roa
File:                     3138312e34312e36342e302f31382d3232203d3e203139383633.roa (raw, json)
Hash identifier:          M9Or4hzREQMJC06Lu7FlVttvfG5q9z7UohTt+kZEn+4=
Subject key identifier:   BC:C2:69:AC:58:63:73:B3:AC:93:72:97:83:82:12:30:30:C5:2B:0D
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       2839DAC7A3E09006329D14DDB7DB18E98C3B1AAC
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e36342e302f31382d3232203d3e203139383633.roa
Signing time:             Tue 06 Jan 2026 18:59:47 +0000
ROA not before:           Tue 06 Jan 2026 18:54:47 +0000
ROA not after:            Tue 05 Jan 2027 18:59:47 +0000
asID:                     19863
IP address blocks:        181.41.64.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 00:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:39:da:c7:a3:e0:90:06:32:9d:14:dd:b7:db:18:e9:8c:3b:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Jan  6 18:54:47 2026 GMT
            Not After : Jan  5 18:59:47 2027 GMT
        Subject: CN=BCC269AC586373B3AC9372978382123030C52B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:38:d3:35:cd:e7:5f:23:ff:31:2d:b7:e8:
                    11:18:d2:3d:e1:6c:6e:1c:05:e4:d3:a6:1e:c2:11:
                    e1:d9:32:11:b2:9b:43:f6:39:7c:78:7a:7d:98:8f:
                    e5:05:f7:23:d7:07:34:a0:06:f1:9f:f6:67:b5:e5:
                    29:ee:20:0b:2a:89:66:e1:ee:fe:e7:24:60:3d:ac:
                    60:e4:e3:e9:7e:51:5a:cd:f9:5c:4d:6e:0f:75:7c:
                    73:44:c6:11:05:83:81:ea:f0:e8:b9:a1:56:d1:35:
                    7c:d4:0b:5e:02:f1:45:83:b3:8b:cb:91:33:74:d9:
                    16:21:a1:01:16:23:39:6b:cd:b8:fe:1b:a0:e7:39:
                    9b:17:13:ad:38:c1:38:a2:86:79:76:03:aa:df:5f:
                    aa:9c:f3:6e:a8:0b:a5:36:73:ce:74:52:c5:0a:13:
                    e0:d1:af:f7:e7:c8:9d:3c:ec:c3:e9:2a:e5:87:aa:
                    96:51:91:34:af:93:23:78:15:25:f2:d9:e1:e8:99:
                    8b:96:36:6a:d7:bf:ff:ac:c6:4d:43:e7:96:e6:84:
                    fb:c7:44:77:dd:2b:10:e2:4d:2b:5c:61:35:11:c7:
                    58:8c:8b:f1:1d:ab:1b:a6:55:58:65:f6:3f:05:97:
                    ea:d9:5f:68:fb:14:32:1b:55:d4:64:14:0b:81:19:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C2:69:AC:58:63:73:B3:AC:93:72:97:83:82:12:30:30:C5:2B:0D
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3138312e34312e36342e302f31382d3232203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:5d:78:b0:5a:8b:08:a2:8f:47:3e:fd:a6:41:cd:00:2b:42:
         62:2c:e9:c9:07:6b:59:ad:3c:96:d7:55:46:ae:4a:38:f5:ab:
         11:2a:c3:98:b9:07:ed:7a:01:85:95:90:40:1e:62:ba:58:1e:
         cc:45:5a:03:9d:26:8a:37:7a:d4:29:1d:65:43:b5:77:5f:ee:
         db:24:91:af:c8:4c:66:d2:c9:ff:1f:76:41:93:8f:7d:ca:57:
         2f:b1:1b:09:71:31:f8:57:23:85:8e:9c:19:d3:69:f6:5d:b8:
         96:c8:68:69:37:71:8a:75:51:2e:56:f2:2b:6c:62:d2:7f:01:
         7e:88:d3:c2:d0:c0:8e:a0:e1:80:e9:69:80:e1:6e:b9:68:4e:
         a0:d9:e4:6c:0f:a2:84:e0:f2:9e:50:de:db:c1:df:94:5e:ab:
         ff:0d:10:31:e2:02:11:37:0b:34:17:13:57:58:d9:ec:aa:d7:
         60:c1:f2:ca:fa:42:b4:f7:2d:aa:eb:57:9d:f1:85:69:ff:64:
         04:3c:ff:82:82:e3:e5:70:05:78:eb:f8:a4:2a:aa:d2:55:69:
         75:b6:4d:bc:a8:d6:16:6f:c8:58:f8:ef:57:72:6c:15:0e:95:
         58:2f:af:11:e3:ca:39:9e:78:d5:d8:74:08:19:3f:e2:8c:10:
         91:99:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:52:54 2026 by rpki-client