This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa
File:                     3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          TnN/eFAzSZTqquLfFlYpUXRutHK2HxOTUt2etVc2rXQ=
Subject key identifier:   F7:2E:73:24:8F:41:23:05:F6:66:82:1A:5C:FB:6C:6B:1B:62:34:72
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       380D2F8C5E0D1963393AAA6231C79FC45CF36462
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 06 Jan 2026 19:31:05 +0000
ROA not before:           Tue 06 Jan 2026 19:26:05 +0000
ROA not after:            Tue 05 Jan 2027 19:31:05 +0000
asID:                     263809
IP address blocks:        181.191.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:2f:8c:5e:0d:19:63:39:3a:aa:62:31:c7:9f:c4:5c:f3:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Jan  6 19:26:05 2026 GMT
            Not After : Jan  5 19:31:05 2027 GMT
        Subject: CN=F72E73248F412305F666821A5CFB6C6B1B623472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:57:b0:81:83:c3:dc:96:a1:0d:52:fb:a0:
                    a4:fa:ca:62:ed:68:a4:65:53:f5:59:f0:a6:4f:ea:
                    95:17:25:6d:fb:45:46:46:61:41:e8:a8:d0:03:25:
                    82:8d:8d:8a:81:d8:a8:06:42:c7:8a:12:b7:92:ec:
                    32:da:5e:65:80:b9:7f:30:e9:8c:cf:6b:c7:71:b9:
                    ea:1b:bf:17:18:0a:11:ee:8b:62:85:e1:e4:6a:52:
                    57:20:9c:61:da:d9:c1:28:9e:82:a2:f0:9a:61:62:
                    00:ec:4b:c0:f2:f6:b5:40:5d:03:34:3e:f2:dd:e1:
                    ea:a4:0b:0f:f5:b5:93:82:03:69:2a:a7:c6:cf:99:
                    45:32:e1:d0:70:79:0b:5d:1c:74:80:70:45:31:89:
                    5b:44:28:4e:29:23:85:75:ef:4d:bf:9b:c9:bb:7f:
                    cc:23:19:24:6a:25:37:e7:58:d5:f5:e6:e6:d4:9d:
                    43:b7:73:10:4e:54:66:9e:16:9d:38:05:76:87:2f:
                    f8:d3:ad:f5:84:08:04:5d:8a:94:47:43:27:cd:f1:
                    ed:8a:11:b7:88:f9:c8:a8:a2:02:e3:79:06:a6:68:
                    0e:c5:92:6b:b0:26:38:28:82:c2:95:ef:f5:4e:79:
                    c0:76:fb:a9:30:fd:2c:20:56:66:03:c1:9b:aa:34:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2E:73:24:8F:41:23:05:F6:66:82:1A:5C:FB:6C:6B:1B:62:34:72
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3c:10:6b:1d:bb:f2:e8:10:97:42:87:d1:45:a4:2c:e1:1f:
         0b:49:0e:a1:09:18:c8:8d:78:9b:35:ae:d5:f0:94:a5:91:8e:
         a2:e7:28:a2:5e:87:c9:71:7c:de:3e:28:6a:3a:99:8f:02:20:
         b2:80:18:c9:ea:d1:15:f6:da:68:56:7a:fd:b0:ad:e0:d6:75:
         19:11:d0:c1:22:2f:5b:82:ff:3a:03:8f:58:a7:8b:e4:ab:57:
         54:7f:58:89:62:be:45:27:8d:75:83:b2:30:38:41:ec:5b:a0:
         8b:77:d1:49:ac:f3:e2:4e:d0:9d:ba:14:4c:06:f4:7a:df:af:
         cc:83:3d:ed:f6:29:85:c6:48:3a:80:ac:82:ae:d2:98:81:64:
         41:84:51:4d:b7:7b:3a:79:70:c6:e2:e8:93:23:0b:0f:56:af:
         94:cf:c9:a1:95:69:3b:a8:54:75:e7:1c:8f:c9:9a:39:9b:0f:
         08:3f:e3:e5:3c:95:53:70:a5:50:a6:67:5c:d0:09:bc:20:1d:
         ec:cd:c9:3c:24:42:49:29:eb:1f:28:49:b0:5c:f1:e1:4e:aa:
         77:b1:99:cd:6b:65:69:1b:e7:5f:f1:51:c2:f7:72:fb:c0:af:
         ae:29:6a:88:a6:5e:fa:61:f5:f6:56:78:e5:5a:80:d4:7a:f4:
         74:44:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:35:34 2026 by rpki-client