This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3234312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          L7E7G5rzeudYi9q6BFiqRxL6uhqyaJVFLD2l30QWl7g=
Subject key identifier:   01:D9:D5:E7:E8:12:D8:7E:5C:AB:B4:CD:1B:BE:91:50:A7:65:B0:38
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3DBD93AFDC9A16124448D85C7CDB3EF98F7FC85C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:45 +0000
ROA not before:           Tue 06 Jan 2026 19:26:45 +0000
ROA not after:            Tue 05 Jan 2027 19:31:45 +0000
asID:                     52323
IP address blocks:        181.16.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bd:93:af:dc:9a:16:12:44:48:d8:5c:7c:db:3e:f9:8f:7f:c8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:45 2026 GMT
            Not After : Jan  5 19:31:45 2027 GMT
        Subject: CN=01D9D5E7E812D87E5CABB4CD1BBE9150A765B038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:87:46:26:bb:e6:6b:b0:f1:5e:b2:35:dd:
                    52:d5:03:55:2b:66:26:b8:60:bb:7d:6c:96:46:7b:
                    fe:9f:e0:fd:08:6d:ba:10:ae:38:d2:70:0c:82:49:
                    a1:b1:f7:93:b1:0a:5d:f6:3d:e8:78:7e:b3:56:f4:
                    23:1c:12:c1:fe:77:93:65:23:9a:d1:96:d1:03:24:
                    b4:57:56:86:b0:53:74:6f:c5:9f:68:08:39:27:7f:
                    fd:e1:f4:b2:f8:15:b8:16:fd:18:78:34:36:ba:cf:
                    fd:2a:86:8f:aa:fe:2e:90:d0:f0:25:1c:8f:9c:45:
                    2d:f3:83:f8:63:a4:3c:c7:e3:bc:46:e3:1c:aa:c4:
                    00:c6:52:57:15:d7:b4:23:8c:3b:e2:9f:a9:c6:fb:
                    80:40:ef:10:ad:91:da:4b:5e:e0:9b:9e:e3:87:b8:
                    77:b2:1f:c0:94:df:5e:e2:bc:e7:53:e8:70:78:77:
                    f7:74:a3:3c:9b:53:7f:c5:08:8a:5f:ce:72:19:a8:
                    3a:a3:6c:7d:db:78:9c:2f:3b:95:3e:dc:bc:32:4d:
                    a5:66:1b:61:1c:4f:19:3c:14:02:09:9b:fd:66:14:
                    6c:5b:26:9d:18:fd:e1:db:58:cb:7a:93:b0:f3:ef:
                    ae:e4:0d:48:74:22:85:c0:3c:0f:82:da:f6:16:29:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:D5:E7:E8:12:D8:7E:5C:AB:B4:CD:1B:BE:91:50:A7:65:B0:38
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:ce:c5:14:87:91:29:8a:03:83:88:b5:64:1a:25:57:8d:
         5d:f2:0d:4e:08:08:64:cb:42:74:ae:69:1c:88:d3:0c:e1:fe:
         f3:b2:4f:ad:ed:58:ed:4f:4d:37:18:0a:3f:d2:b1:2e:34:14:
         ba:00:ce:64:af:af:3c:f8:9f:41:41:01:a0:0b:04:2a:55:01:
         f3:62:3f:5e:e5:8a:4c:d4:ad:10:2f:a6:47:0f:bd:02:68:d7:
         a6:25:82:91:55:2c:28:a9:81:8a:a3:46:62:73:30:c6:a4:e3:
         01:e1:7a:a7:dd:42:08:db:bd:d5:9b:5d:99:fe:3d:ca:72:0a:
         73:9d:b9:cf:4e:a5:31:c3:64:2e:4e:b3:7a:5f:41:a2:cb:c0:
         a8:fb:c7:48:2c:62:c6:9b:a6:5d:55:b6:a4:97:a3:9e:7a:ce:
         80:1a:29:51:ab:09:b3:c6:36:8c:58:ce:13:a7:9a:2a:6b:9b:
         36:29:07:b0:06:fa:99:50:fb:6c:b9:02:19:70:0a:fc:2d:19:
         5d:65:bb:22:a9:1e:1e:3e:ad:99:f9:14:27:8d:6d:c7:70:44:
         56:94:c6:aa:e4:45:dc:74:7e:59:f0:18:a1:5a:16:bc:37:9c:
         d7:b1:9f:f7:31:54:f6:30:a3:b0:d8:9a:28:95:96:1e:77:9f:
         77:f2:77:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPb2Tr9yaFhJESNhcfNs++Y9/yFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNjAxMDYxOTI2NDVaFw0yNzAxMDUxOTMxNDVaMDMxMTAvBgNV
BAMTKDAxRDlENUU3RTgxMkQ4N0U1Q0FCQjRDRDFCQkU5MTUwQTc2NUIwMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJYdGJrvma7DxXrI13VLVA1Ur
Zia4YLt9bJZGe/6f4P0IbboQrjjScAyCSaGx95OxCl32Peh4frNW9CMcEsH+d5Nl
I5rRltEDJLRXVoawU3RvxZ9oCDknf/3h9LL4FbgW/Rh4NDa6z/0qho+q/i6Q0PAl
HI+cRS3zg/hjpDzH47xG4xyqxADGUlcV17QjjDvin6nG+4BA7xCtkdpLXuCbnuOH
uHeyH8CU317ivOdT6HB4d/d0ozybU3/FCIpfznIZqDqjbH3beJwvO5U+3LwyTaVm
G2EcTxk8FAIJm/1mFGxbJp0Y/eHbWMt6k7Dz767kDUh0IoXAPA+C2vYWKc+HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAdnV5+gS2H5cq7TNG76RUKdlsDgwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzNDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALUQ8TAN
BgkqhkiG9w0BAQsFAAOCAQEAn8bOxRSHkSmKA4OItWQaJVeNXfINTggIZMtCdK5p
HIjTDOH+87JPre1Y7U9NNxgKP9KxLjQUugDOZK+vPPifQUEBoAsEKlUB82I/XuWK
TNStEC+mRw+9AmjXpiWCkVUsKKmBiqNGYnMwxqTjAeF6p91CCNu91Ztdmf49ynIK
c525z06lMcNkLk6zel9BosvAqPvHSCxixpumXVW2pJejnnrOgBopUasJs8Y2jFjO
E6eaKmubNikHsAb6mVD7bLkCGXAK/C0ZXWW7IqkeHj6tmfkUJ41tx3BEVpTGquRF
3HR+WfAYoVoWvDec17Gf9zFU9jCjsNiaKJWWHnefd/J3Ag==
-----END CERTIFICATE-----
Generated at Tue Jan 13 03:42:16 2026 by rpki-client