This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa
File:                     3138312e31362e3231362e302f32312d3234203d3e203532323731.roa (raw, json)
Hash identifier:          7XC9RfiWqgSkdAW06P9DfgVN5p+uZonrZOWqfh/w/dU=
Subject key identifier:   41:F9:33:CA:78:84:FB:EB:40:4F:3A:F6:B6:9E:FE:77:A1:CE:99:17
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7A24FECBFE5EFD5DCA1ABB36F5D23898DA2D7484
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa
Signing time:             Tue 06 Jan 2026 19:31:39 +0000
ROA not before:           Tue 06 Jan 2026 19:26:39 +0000
ROA not after:            Tue 05 Jan 2027 19:31:39 +0000
asID:                     52271
IP address blocks:        181.16.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:24:fe:cb:fe:5e:fd:5d:ca:1a:bb:36:f5:d2:38:98:da:2d:74:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:39 2026 GMT
            Not After : Jan  5 19:31:39 2027 GMT
        Subject: CN=41F933CA7884FBEB404F3AF6B69EFE77A1CE9917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:9c:ae:55:f5:b4:0e:bc:d8:b9:2d:4a:8a:
                    3d:e1:7a:b9:7f:7b:2b:69:67:d1:e0:51:c2:6e:17:
                    42:4f:46:87:0e:f6:a4:c7:08:d0:28:37:48:27:28:
                    42:c6:30:51:06:24:ba:79:cd:a0:c2:02:1f:30:da:
                    bc:69:46:85:2c:a3:e1:53:58:0e:6f:2d:bf:9c:92:
                    46:0c:57:74:3b:39:01:f3:0e:f7:ea:ec:96:ec:13:
                    f3:5e:1e:a9:f9:af:51:e4:5e:67:ff:56:f6:9e:3e:
                    f1:f4:6e:66:f8:7d:ff:77:25:18:70:54:3d:06:e2:
                    d9:e5:d1:01:f2:82:b2:58:c6:bb:27:f3:69:8c:3a:
                    3c:99:25:71:7b:cd:4c:13:28:c1:fa:f3:27:12:ae:
                    47:a2:e4:bd:bf:bf:f3:59:1d:40:ba:42:c8:47:36:
                    1c:a0:78:ae:bb:69:22:25:fc:c5:dd:01:ab:81:ba:
                    ab:3f:fa:ae:93:78:f6:db:b3:3c:76:5e:16:e1:5a:
                    06:64:73:6b:b4:45:7a:8b:30:65:74:bb:29:17:b8:
                    4a:fd:9c:ba:8c:13:b8:54:46:08:83:fd:44:9f:0a:
                    c1:13:a9:57:1c:4e:e3:23:22:32:24:24:cd:47:de:
                    6e:2c:f2:ef:a9:26:d2:e3:17:17:2d:dc:68:4b:51:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:33:CA:78:84:FB:EB:40:4F:3A:F6:B6:9E:FE:77:A1:CE:99:17
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:33:e3:00:2c:ec:c0:6f:3b:f8:6f:ad:bc:4c:1f:79:08:f5:
         12:5d:a2:6d:df:e2:d0:c1:7d:66:38:ce:b3:b7:4a:97:8b:75:
         2b:dd:c5:9b:50:d5:eb:07:35:9e:f8:c1:07:26:1a:6c:0a:d4:
         38:ff:42:c0:b3:e9:fd:f7:50:48:14:88:ff:a1:df:f6:44:89:
         05:3e:46:d7:ab:07:6c:e5:e9:8e:1e:a3:34:43:c7:30:23:6b:
         f8:3c:64:1f:9e:44:fb:aa:93:ef:56:00:fc:41:0c:fd:04:38:
         76:f3:c0:03:21:27:68:3c:ea:5f:3d:da:89:b1:5b:ba:46:f4:
         5c:25:ca:bc:0e:73:a9:32:14:41:97:de:f8:18:19:0c:16:22:
         05:91:c1:05:80:fc:4b:e7:fb:f1:c8:eb:84:90:e2:1a:6a:84:
         41:f4:41:75:31:41:2b:28:d0:8d:7f:85:bc:19:b0:e7:57:22:
         5b:92:46:3d:5a:c0:9f:ef:e4:53:10:41:f1:a6:64:7b:51:0a:
         93:d8:4d:d4:13:2d:f7:b8:a8:f2:92:6e:50:e9:1c:93:04:de:
         09:16:03:58:48:93:bb:c2:79:6b:b7:6b:54:6a:ad:17:75:c4:
         07:4d:87:22:6b:fb:14:9c:92:58:a0:19:6e:51:8e:0b:83:61:
         49:36:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:54:29 2026 by rpki-client