This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32372e302f32342d3234203d3e203532343235.roa
File:                     3138312e3139312e32372e302f32342d3234203d3e203532343235.roa (raw, json)
Hash identifier:          sJHrn4yDBN+N5Rhpw6N7oSSMyrs17fR59Nls8dnotZU=
Subject key identifier:   89:E1:50:E3:9B:84:85:1F:93:8F:BF:0C:CD:C4:C7:2F:C9:C7:D5:8E
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       0155171BD1753263E844C024141F4F29088C6D93
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32372e302f32342d3234203d3e203532343235.roa
Signing time:             Tue 06 Jan 2026 19:31:05 +0000
ROA not before:           Tue 06 Jan 2026 19:26:05 +0000
ROA not after:            Tue 05 Jan 2027 19:31:05 +0000
asID:                     52425
IP address blocks:        181.191.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:55:17:1b:d1:75:32:63:e8:44:c0:24:14:1f:4f:29:08:8c:6d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Jan  6 19:26:05 2026 GMT
            Not After : Jan  5 19:31:05 2027 GMT
        Subject: CN=89E150E39B84851F938FBF0CCDC4C72FC9C7D58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9d:13:43:37:df:21:bd:9c:ba:bf:de:df:1c:
                    ca:60:75:fa:b6:71:94:4e:48:07:99:a7:a9:ff:cc:
                    7f:3c:6e:f6:6c:21:73:17:4d:28:eb:e3:69:2f:f5:
                    40:ed:c7:56:db:bd:1f:2f:bd:e3:1c:95:9d:c0:cf:
                    8c:c5:10:46:31:fc:d5:ee:21:0a:6a:2b:d6:3a:0b:
                    0d:9d:6f:09:3d:b4:1b:41:ec:cd:45:4f:cb:26:6a:
                    82:cc:af:86:85:14:f9:65:56:ce:51:5e:08:13:30:
                    2e:00:1e:df:2b:ed:02:14:67:28:95:89:fe:e2:87:
                    5c:d9:a5:ed:5b:3d:a2:2a:2d:1f:0e:54:ab:5a:18:
                    b0:a6:b7:ac:08:0a:d0:7c:03:f5:88:87:5e:ef:df:
                    13:34:26:44:28:2b:ae:ae:4b:67:9b:4c:d0:06:c3:
                    2f:93:33:6f:b1:e7:7a:3b:44:f5:70:de:86:e5:2b:
                    6b:22:0f:38:5a:5a:55:3e:b7:06:a7:be:5e:f0:8b:
                    ad:ac:a9:b7:ab:9c:ed:50:e1:a3:4e:e9:0d:dd:d5:
                    dd:41:57:91:a5:a4:f0:8e:4f:a4:06:b8:52:82:36:
                    02:a4:05:dd:ec:a0:0e:61:3f:62:03:5e:6d:fa:35:
                    65:80:44:78:f2:2e:0e:c3:cc:12:c8:af:45:84:40:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:50:E3:9B:84:85:1F:93:8F:BF:0C:CD:C4:C7:2F:C9:C7:D5:8E
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32372e302f32342d3234203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:36:77:db:a0:04:1e:eb:5c:7f:9d:b3:93:3e:10:77:c9:66:
         60:63:df:bd:93:0b:4c:df:49:22:b2:5e:ee:83:e2:0a:67:ca:
         b0:97:b4:db:b0:3e:5e:1a:75:e0:fb:0d:79:3f:9f:0b:48:81:
         01:14:5c:3f:59:df:43:5d:cc:a1:3b:9d:58:a1:28:00:70:74:
         79:9c:98:e8:c5:1b:16:5f:41:2f:0f:e8:8f:ef:06:8a:1d:9b:
         26:fe:8d:70:e1:95:eb:73:ff:c2:1c:d7:fe:30:eb:21:db:0c:
         fa:a9:a7:dc:46:36:c8:0e:ab:1e:03:49:b4:0a:06:14:18:e2:
         9e:db:a9:1a:aa:59:2e:1d:5f:46:c2:87:6e:d3:da:6f:a8:66:
         84:c3:cb:08:47:1a:2d:34:2c:1d:6e:2b:a5:ad:43:35:9a:3f:
         4b:cc:42:d1:f1:4e:1c:3b:5d:96:b4:e8:02:65:4a:be:6f:f3:
         c8:84:1d:76:9c:b6:9b:1c:eb:05:56:7a:86:32:14:80:a6:62:
         33:7a:16:68:8e:96:3c:ff:b9:8b:ff:84:8d:bd:a2:a1:68:dd:
         4c:72:17:25:40:a4:7d:f2:d3:06:42:43:62:26:97:c3:18:54:
         a2:f7:3e:a3:36:97:70:56:1d:15:41:e2:42:dc:e9:d5:3f:5d:
         f0:8a:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:35:25 2026 by rpki-client