This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203532323537.roa
File:                     3138312e33392e302e302f31362d3234203d3e203532323537.roa (raw, json)
Hash identifier:          MwXpQNR9k8LVHxOg/xQSDqhUjBY/RcOnwGvrpUzBV0M=
Subject key identifier:   FD:7F:92:F1:0D:AC:B8:72:BE:A9:87:14:51:49:EB:1D:EF:0C:F9:67
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       0774807A20E2BF154C3B51EADFD2BA309389D77D
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203532323537.roa
Signing time:             Tue 06 Jan 2026 19:08:31 +0000
ROA not before:           Tue 06 Jan 2026 19:03:31 +0000
ROA not after:            Tue 05 Jan 2027 19:08:31 +0000
asID:                     52257
IP address blocks:        181.39.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:74:80:7a:20:e2:bf:15:4c:3b:51:ea:df:d2:ba:30:93:89:d7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Jan  6 19:03:31 2026 GMT
            Not After : Jan  5 19:08:31 2027 GMT
        Subject: CN=FD7F92F10DACB872BEA987145149EB1DEF0CF967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:dc:0e:b3:01:41:0d:52:1d:c3:75:78:9f:
                    eb:03:c8:67:1a:7a:5b:4a:d1:3b:f7:d0:01:df:99:
                    23:2b:7b:a5:b8:62:8a:b7:51:1b:73:05:9c:b3:65:
                    64:c3:27:97:6a:e8:d7:00:ad:2f:99:db:b5:f2:2f:
                    05:37:fa:0e:7c:20:93:c5:47:cc:9e:ac:b4:49:91:
                    f7:b0:e3:9e:c3:27:50:ae:53:5e:ef:a0:c4:98:2e:
                    7d:13:e1:28:e1:ff:00:03:7c:23:68:51:0e:5d:ca:
                    11:98:39:67:83:c0:62:56:25:31:31:7c:84:5a:1f:
                    1a:a4:57:a2:92:fe:61:8e:63:74:01:aa:71:f4:55:
                    87:4d:06:77:6d:9e:75:0f:4d:eb:b0:e9:48:33:c4:
                    57:06:a1:be:5d:30:a7:ea:67:48:51:34:c8:7e:77:
                    8c:04:85:ec:f3:a0:c7:91:5d:fa:54:7a:6c:a7:53:
                    14:6c:14:b2:eb:d2:a1:36:8d:f4:2a:47:59:c7:5a:
                    6a:73:07:2c:94:b6:4c:d1:b9:d1:01:1e:05:9a:c7:
                    9f:25:37:07:24:bf:28:a7:c6:a7:03:64:f1:86:09:
                    6e:33:c2:77:c7:8f:5a:e9:15:36:cf:b9:e3:57:8c:
                    4d:47:f0:37:7d:51:2f:85:67:dc:83:0a:3a:68:e5:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7F:92:F1:0D:AC:B8:72:BE:A9:87:14:51:49:EB:1D:EF:0C:F9:67
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:fb:b6:fb:d5:ef:91:90:a0:6a:69:eb:6e:9b:3f:2d:2d:
         1e:9b:44:18:f6:6b:c5:67:21:47:7e:84:5e:26:e1:80:97:ff:
         48:e8:98:48:6e:7d:c3:b2:f0:12:90:ef:4e:f3:a8:0d:8c:b3:
         62:a2:33:b5:89:a4:0e:e0:cb:e7:a5:af:0b:e3:6f:67:8e:d5:
         13:c2:56:20:bd:a4:9b:1b:cd:c1:16:a8:9b:17:c1:de:d5:a8:
         6b:b5:1b:bd:87:90:eb:10:50:37:32:1a:bb:17:33:b8:6f:fe:
         67:6e:09:4b:f7:0b:b2:63:49:72:ca:04:5b:6e:1f:ba:67:5f:
         7d:43:49:8c:20:55:af:42:48:72:db:1f:0a:39:5d:80:f2:0b:
         b1:7a:a4:53:be:6c:b1:38:bb:a5:93:86:94:f8:9a:b4:d7:13:
         56:f3:a0:4a:c6:f5:22:2d:2a:e3:af:b0:f2:7d:55:41:a1:84:
         cb:5f:14:aa:74:86:7b:88:7b:2f:69:5c:5c:8d:da:bf:a0:08:
         ec:9b:eb:2b:cc:0a:94:3d:ac:25:44:f4:6b:36:dd:c1:7b:2c:
         b4:58:43:0b:88:60:29:6b:26:54:d3:b1:ed:d3:40:b4:85:93:
         ac:fe:7a:a7:93:76:ae:1f:e2:17:0c:c6:c5:89:4b:77:0d:13:
         41:91:40:45
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUB3SAeiDivxVMO1Hq39K6MJOJ130wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNjAxMDYxOTAzMzFaFw0yNzAxMDUxOTA4MzFaMDMxMTAvBgNV
BAMTKEZEN0Y5MkYxMERBQ0I4NzJCRUE5ODcxNDUxNDlFQjFERUYwQ0Y5NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXtwOswFBDVIdw3V4n+sDyGca
eltK0Tv30AHfmSMre6W4Yoq3URtzBZyzZWTDJ5dq6NcArS+Z27XyLwU3+g58IJPF
R8yerLRJkfew457DJ1CuU17voMSYLn0T4Sjh/wADfCNoUQ5dyhGYOWeDwGJWJTEx
fIRaHxqkV6KS/mGOY3QBqnH0VYdNBndtnnUPTeuw6UgzxFcGob5dMKfqZ0hRNMh+
d4wEhezzoMeRXfpUemynUxRsFLLr0qE2jfQqR1nHWmpzByyUtkzRudEBHgWax58l
NwckvyinxqcDZPGGCW4zwnfHj1rpFTbPueNXjE1H8Dd9US+FZ9yDCjpo5Yi5AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU/X+S8Q2suHK+qYcUUUnrHe8M+WcwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzMTJlMzMzOTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtScwDQYJKoZI
hvcNAQELBQADggEBADku+7b71e+RkKBqaetumz8tLR6bRBj2a8VnIUd+hF4m4YCX
/0jomEhufcOy8BKQ707zqA2Ms2KiM7WJpA7gy+elrwvjb2eO1RPCViC9pJsbzcEW
qJsXwd7VqGu1G72HkOsQUDcyGrsXM7hv/mduCUv3C7JjSXLKBFtuH7pnX31DSYwg
Va9CSHLbHwo5XYDyC7F6pFO+bLE4u6WThpT4mrTXE1bzoErG9SItKuOvsPJ9VUGh
hMtfFKp0hnuIey9pXFyN2r+gCOyb6yvMCpQ9rCVE9Gs23cF7LLRYQwuIYClrJlTT
se3TQLSFk6z+eqeTdq4f4hcMxsWJS3cNE0GRQEU=
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:43:36 2026 by rpki-client