This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3138312e3131382e3139322e302f32302d3234203d3e203532343035.roa
File:                     3138312e3131382e3139322e302f32302d3234203d3e203532343035.roa (raw, json)
Hash identifier:          2rSHw9EcYuoQPeLE0BnHjZIAlbYi3AcaMQlY2HIbUjc=
Subject key identifier:   56:BD:E0:D0:97:51:9A:AF:89:E8:24:DE:11:93:EC:8F:A2:11:95:75
Certificate issuer:       /CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
Certificate serial:       31B745EA16B5232EC591FA45F0BD7FEAC5CE37DC
Authority key identifier: C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3138312e3131382e3139322e302f32302d3234203d3e203532343035.roa
Signing time:             Tue 06 Jan 2026 19:03:40 +0000
ROA not before:           Tue 06 Jan 2026 18:58:40 +0000
ROA not after:            Tue 05 Jan 2027 19:03:40 +0000
asID:                     52405
IP address blocks:        181.118.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b7:45:ea:16:b5:23:2e:c5:91:fa:45:f0:bd:7f:ea:c5:ce:37:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F
        Validity
            Not Before: Jan  6 18:58:40 2026 GMT
            Not After : Jan  5 19:03:40 2027 GMT
        Subject: CN=56BDE0D097519AAF89E824DE1193EC8FA2119575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:53:d5:2e:33:99:a7:3f:19:22:80:1a:46:
                    62:84:c9:29:b3:9c:72:1b:2a:e8:18:04:ac:2b:b7:
                    16:4e:5f:f6:8e:14:13:97:2a:3d:3e:13:9d:33:ec:
                    34:86:08:42:ea:54:20:1b:a9:1f:92:62:41:5f:d6:
                    89:47:50:b6:ed:8b:bd:e2:be:39:b0:50:ca:a4:ab:
                    a8:3f:a7:31:fb:69:3f:77:fc:91:aa:2b:77:56:aa:
                    d3:5c:9b:0b:06:f0:50:30:9d:b2:66:7b:8d:18:8c:
                    c9:67:d1:1b:af:ad:f1:bf:26:30:bf:c7:14:d5:a3:
                    2d:61:e6:b2:24:5a:e2:2e:ed:d4:41:1e:f6:85:76:
                    e4:0b:59:0c:e5:ef:3d:fc:2d:d6:56:57:85:b5:98:
                    92:9f:f9:44:83:ea:e0:6b:b4:30:fe:62:02:50:ab:
                    49:5e:ce:f1:da:49:18:95:7a:b3:6a:a5:29:02:6a:
                    76:e0:1c:2d:96:98:60:f3:ea:68:7e:e8:35:0a:01:
                    16:3d:41:28:f4:96:0f:3f:76:c9:0e:a6:bf:c0:9a:
                    97:46:c9:88:58:5a:5c:d0:24:54:2a:9b:62:f4:6e:
                    c6:75:97:0d:89:ac:e3:9d:0f:3a:21:e8:6a:46:cf:
                    ee:fb:99:7e:1e:09:6e:02:f5:9d:1f:8c:27:d4:3c:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:E0:D0:97:51:9A:AF:89:E8:24:DE:11:93:EC:8F:A2:11:95:75
            X509v3 Authority Key Identifier:
                keyid:C6:BF:92:55:E3:5C:F2:85:1E:CF:DF:AC:16:1E:95:CC:C7:E5:C2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6BF9255E35CF2851ECFDFAC161E95CCC7E5C22F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAFE3A1457ABBD6D75176B3D24D7025C8312489FF4C52CAE83B8A0D2D1D1BC7A/0/3138312e3131382e3139322e302f32302d3234203d3e203532343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:8c:78:4e:59:aa:b1:8b:4b:d2:0a:b2:c6:63:3f:65:05:48:
         86:39:5e:cc:23:87:61:46:d5:4b:70:98:95:58:0b:db:3f:31:
         3e:fd:a0:71:d3:65:3c:8f:61:f0:d2:80:2b:07:c9:f8:b9:07:
         b4:7c:0c:9b:c1:24:ef:87:e3:2a:95:2f:89:b3:05:97:20:50:
         25:d9:80:5d:28:87:d7:b0:36:6c:f4:54:48:6d:ea:7e:5c:4a:
         da:61:5e:b3:7f:3c:1b:25:92:6c:e7:37:e8:08:42:05:7f:68:
         1a:af:e1:a8:fd:e6:5e:4f:49:ca:57:65:4f:ee:03:d1:1d:be:
         f1:66:b4:30:44:95:7d:87:50:13:f9:e7:86:de:48:05:15:f1:
         94:24:14:b8:f3:b2:5c:66:fb:b3:0f:97:6c:c3:ba:06:e9:eb:
         7d:be:0d:60:c7:65:58:c6:c8:a5:d8:10:ce:c9:a6:8b:2d:02:
         3d:3d:6e:8f:85:39:0b:ac:e1:ac:d9:d0:8d:a3:28:5c:38:ad:
         45:20:75:bc:5f:eb:21:9c:39:ff:ee:6b:59:d0:3b:93:19:3b:
         24:ee:de:c3:af:fe:4f:22:37:7c:09:33:44:45:1d:a7:14:ae:
         63:8e:bc:35:0c:ba:b6:b4:1e:6f:46:e5:66:a5:ee:d6:98:37:
         b9:63:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:20:59 2026 by rpki-client