This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
File:                     3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          WgbiAmxVAnJN8mu92BrYGpkpltajdzf6gA/D9q2Rp78=
Subject key identifier:   71:22:65:96:40:AD:5F:F8:04:48:69:AF:FB:55:B8:7C:9B:45:65:24
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       89DFE258D237C490050EF75A2C7C321545ABC5
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 06 Jan 2026 19:31:05 +0000
ROA not before:           Tue 06 Jan 2026 19:26:05 +0000
ROA not after:            Tue 05 Jan 2027 19:31:05 +0000
asID:                     263809
IP address blocks:        181.191.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:df:e2:58:d2:37:c4:90:05:0e:f7:5a:2c:7c:32:15:45:ab:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Jan  6 19:26:05 2026 GMT
            Not After : Jan  5 19:31:05 2027 GMT
        Subject: CN=7122659640AD5FF8044869AFFB55B87C9B456524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:1e:b7:55:7f:e0:30:ae:b2:e7:03:18:81:
                    b6:96:b1:fb:93:c4:f7:27:71:b5:eb:85:64:c9:4c:
                    62:bc:1c:75:d7:13:27:a6:19:22:03:f7:72:fb:31:
                    1b:1c:12:35:af:c2:01:42:9c:f4:79:82:1d:ca:d9:
                    22:52:d4:16:3b:fc:60:df:48:8f:c9:df:cb:fe:ee:
                    09:7d:38:4a:46:46:31:16:93:a8:94:65:de:d4:53:
                    6a:23:3d:b0:79:62:21:07:56:11:b5:13:a5:5c:63:
                    d5:9b:a7:70:c3:f3:ee:b9:03:a8:0d:6f:46:e3:59:
                    dd:12:c8:42:03:ae:1c:be:20:78:00:fc:c8:2b:3a:
                    d6:11:bd:e9:64:7d:2f:61:ea:c8:0c:8f:dd:4c:34:
                    41:29:9e:83:ec:62:32:27:dd:10:d8:b4:2d:b2:28:
                    39:24:74:7e:b1:1e:cb:6b:fd:fa:9c:8c:2e:6a:25:
                    1d:d9:b9:2e:b1:1a:9b:29:55:4a:34:3b:9f:47:71:
                    e3:0a:44:4b:39:d0:1e:68:b5:c4:a9:4e:2a:00:01:
                    5e:68:40:a2:5d:b8:44:e3:33:37:3f:22:d4:dc:87:
                    d2:1b:50:3d:d8:cb:8f:46:86:fb:78:d0:c7:19:8f:
                    3d:3d:8d:fa:4a:7f:9d:3d:41:96:ad:51:d0:7a:c9:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:22:65:96:40:AD:5F:F8:04:48:69:AF:FB:55:B8:7C:9B:45:65:24
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:97:76:52:38:74:bf:ad:36:7a:ae:4c:f4:4f:9d:18:91:17:
         e1:23:88:52:67:cb:47:0b:4b:5d:be:e3:dc:68:19:80:54:48:
         76:f1:ea:47:cd:e0:97:7b:f7:66:a6:2c:38:25:77:cc:cc:72:
         db:84:04:56:13:04:f0:7c:6a:0e:cf:85:1e:a7:e7:b6:e5:91:
         b9:df:74:56:01:b9:cb:37:9a:3c:1d:8b:5a:c8:7f:37:90:10:
         f3:8b:c7:f6:f5:b2:23:61:90:d3:62:e8:61:b7:74:88:a4:5c:
         3b:b2:10:dd:bc:6c:ce:ca:c0:bb:e2:7c:17:5f:d1:63:ee:48:
         5b:21:32:2e:0b:ba:76:d7:eb:c6:9e:eb:66:69:19:48:b2:c7:
         ad:ef:f5:f1:a7:4a:b9:2a:8a:d8:10:bc:56:f1:bc:f6:57:31:
         80:60:49:06:43:89:af:00:80:a1:41:e1:0b:7f:54:6e:5c:8b:
         7f:4e:96:ba:04:28:20:fc:6c:54:9b:67:a5:17:6f:3d:10:1f:
         60:54:48:40:9f:e0:5f:f8:de:c3:dd:17:35:fc:c8:33:20:f6:
         f3:54:12:ea:4a:68:6d:68:ac:a6:93:ca:5f:d2:c0:e7:f5:6d:
         6a:4b:a8:b9:0a:69:23:ce:d6:a0:63:5f:97:a2:e5:0b:96:0e:
         72:14:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:56 2026 by rpki-client