This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137322e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137322e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          5f50CZrO0PvzVwC3BmxRtqMv8yAwRGeug3yX8g8O/hk=
Subject key identifier:   02:9B:CF:47:7B:5F:5C:2D:7C:38:FD:C0:C1:A7:88:14:4C:0F:BA:3C
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       2DC3C2452EC05406F46882403CD4FA834908E6AA
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137322e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:55 +0000
ROA not before:           Tue 06 Jan 2026 19:26:55 +0000
ROA not after:            Tue 05 Jan 2027 19:31:55 +0000
asID:                     52323
IP address blocks:        181.16.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c3:c2:45:2e:c0:54:06:f4:68:82:40:3c:d4:fa:83:49:08:e6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:55 2026 GMT
            Not After : Jan  5 19:31:55 2027 GMT
        Subject: CN=029BCF477B5F5C2D7C38FDC0C1A788144C0FBA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:cd:ff:03:5e:14:09:bb:e4:f2:91:91:3e:
                    fc:da:16:cb:f3:38:02:91:2d:2d:2e:1b:fc:c6:55:
                    04:0c:90:0f:9d:fc:42:e5:51:0a:1a:fb:f8:f3:59:
                    90:ee:9c:55:3a:37:c5:b8:e8:87:31:3e:9d:94:01:
                    b8:dd:1e:e1:06:c2:2e:f6:f2:97:99:ec:66:bd:51:
                    cd:13:06:f3:06:f3:4c:10:2a:24:5f:b6:59:e1:24:
                    0f:c4:da:e1:dd:ec:7a:c8:a5:5c:c5:06:a9:16:a3:
                    fe:7e:03:ea:55:fd:49:48:80:2e:4b:bf:a2:ca:e7:
                    88:52:03:30:b8:a8:cb:82:83:cd:0c:89:0e:39:68:
                    33:f2:d6:87:16:86:e5:80:57:24:39:23:59:30:88:
                    82:73:ac:03:a1:f2:0f:75:6d:f9:52:f6:00:ba:f3:
                    73:43:cd:19:86:a3:23:59:a7:8b:6a:eb:e7:69:d8:
                    e9:17:f0:c8:e1:15:cc:00:0e:82:10:a0:d4:96:c9:
                    b3:70:bb:6f:d8:9c:2d:22:57:a5:68:36:e0:77:5f:
                    9c:9f:8a:f7:24:c1:87:3a:df:d0:f8:74:c6:7e:c5:
                    a3:d1:42:c3:73:25:8e:4f:82:90:36:f8:21:bc:02:
                    36:86:0b:4a:46:f7:55:b1:bd:58:d6:ca:71:d0:3d:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9B:CF:47:7B:5F:5C:2D:7C:38:FD:C0:C1:A7:88:14:4C:0F:BA:3C
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137322e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:18:0c:f8:a2:24:b3:65:c6:f9:fb:38:6b:e0:bd:9a:71:
         bd:aa:15:ca:de:bb:fd:02:8b:f5:10:b8:26:e3:75:ff:a3:7b:
         13:b8:ba:4f:e3:cd:5b:2e:08:59:85:99:8f:8f:0b:ea:01:b1:
         4b:bd:88:8a:cd:26:09:87:ba:eb:57:66:d9:3c:23:db:2d:a1:
         ed:c1:c6:60:d2:69:42:df:11:44:4d:66:01:51:67:24:d2:fe:
         df:16:38:b5:17:c9:4a:ad:eb:b1:ad:61:55:d8:09:25:4d:f2:
         f3:0d:cb:97:e4:b5:67:ce:d6:41:90:1b:43:e9:ac:bc:77:7d:
         48:0d:05:6e:ee:10:8e:3f:85:d0:02:14:49:0a:12:62:3d:9f:
         6b:9c:26:ea:d0:8f:eb:f3:5b:67:84:67:6c:a9:59:55:eb:47:
         6c:f2:a5:32:e5:1b:d0:ea:c1:a7:0d:a3:e3:9b:d9:0e:46:11:
         ec:c9:8f:e4:8b:e5:85:9b:6d:d4:0f:b1:01:fe:ef:b0:4b:ba:
         58:bf:85:bc:14:50:65:95:5a:26:5c:6d:37:ea:81:75:7c:f0:
         68:65:87:d9:1d:b8:c1:f9:4f:da:79:58:27:d7:95:70:01:11:
         37:ec:0e:d7:c3:d0:81:77:cc:f0:14:98:cf:7a:47:ab:cf:44:
         bb:5d:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:42:13 2026 by rpki-client