This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa
File:                     3138312e34322e3132382e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          MyBXC6jjHBpFi89nb6x0jmFwG+nsOOKnl7YsgIM88gI=
Subject key identifier:   79:52:64:65:74:97:F1:D2:5E:CC:57:74:FE:92:08:ED:CF:BC:FA:C7
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       62EEE171BA833A6F3A691CF788007EDB47C6FD23
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 06 Jan 2026 19:37:40 +0000
ROA not before:           Tue 06 Jan 2026 19:32:40 +0000
ROA not after:            Tue 05 Jan 2027 19:37:40 +0000
asID:                     27651
IP address blocks:        181.42.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:e1:71:ba:83:3a:6f:3a:69:1c:f7:88:00:7e:db:47:c6:fd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Jan  6 19:32:40 2026 GMT
            Not After : Jan  5 19:37:40 2027 GMT
        Subject: CN=795264657497F1D25ECC5774FE9208EDCFBCFAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:11:38:47:fb:e5:55:4a:e2:8e:bb:9d:79:
                    a7:5e:b2:2c:2f:f1:b0:86:45:78:f4:c4:ec:3d:c4:
                    54:13:69:20:c2:d3:4d:81:03:87:8e:84:3b:c2:c2:
                    95:17:16:0d:fe:01:7c:9f:7e:51:64:2b:9c:01:03:
                    a3:01:01:fb:d8:f7:ab:41:30:25:a7:57:6c:00:5e:
                    bd:aa:28:b5:f8:4d:e9:a0:a2:92:e1:3d:7a:04:25:
                    fd:e1:22:47:72:ad:af:d7:1c:20:50:c3:cd:ec:d4:
                    1b:d7:81:1e:e3:13:c6:7c:c9:bd:7b:bc:57:bd:e7:
                    9e:30:ec:11:e9:97:21:80:31:69:de:e9:b3:65:b6:
                    58:bc:ac:ca:55:79:95:2f:7a:cf:de:72:c8:45:9f:
                    2b:2b:80:f9:19:85:f5:ac:1a:18:95:3d:d7:0a:a6:
                    82:62:d8:81:c1:f8:ca:6c:ae:59:e5:82:dd:3e:fb:
                    d8:52:1c:59:7a:57:11:e0:24:4d:95:70:6b:44:e5:
                    42:e7:00:01:fa:cd:25:a5:e9:36:07:0f:f1:cb:c6:
                    10:fb:35:17:27:c4:c7:e3:89:b4:0a:cc:23:e5:4a:
                    b6:94:f9:96:46:30:8a:95:bb:9e:dd:4c:cc:a2:35:
                    18:e8:2f:53:bb:ef:2a:ae:14:67:41:94:a2:ef:37:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:64:65:74:97:F1:D2:5E:CC:57:74:FE:92:08:ED:CF:BC:FA:C7
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:92:f0:c3:80:db:04:a5:30:1a:ea:98:cd:6b:31:f9:6b:
         9c:11:13:b4:1e:be:78:ce:bf:bd:e1:53:a4:48:2e:cb:33:17:
         86:24:3b:43:50:35:d0:c9:94:a2:33:93:a9:4a:5b:e0:0e:36:
         79:a2:4f:b2:d3:f4:39:86:31:5f:27:99:f5:d1:94:a6:02:a5:
         d2:15:5b:a1:c6:c0:a1:1e:d1:47:5e:7d:13:51:ef:f8:61:05:
         be:a4:98:21:f6:47:d1:cf:3a:85:5f:7b:9a:e2:f6:30:ae:1f:
         97:98:55:5b:68:21:b7:33:fe:4d:ef:19:dc:0d:77:df:1c:f0:
         04:f4:3a:53:c6:d2:57:e5:d7:cf:7b:72:14:11:79:92:57:a6:
         c5:f4:e9:8f:55:a9:fd:31:fb:17:07:69:01:e2:d4:bf:96:84:
         d1:cd:8d:49:c6:1d:49:25:fd:82:ce:61:20:64:b1:58:4f:67:
         f4:93:dc:72:6a:f6:00:d8:4c:cb:16:4a:9f:86:69:d1:aa:27:
         3d:a5:4f:ae:46:30:48:1a:73:97:81:1c:1b:36:f7:53:6d:07:
         61:46:0a:24:62:88:24:a4:2d:5c:6c:a2:56:04:06:e0:86:14:
         ca:81:e8:e1:5c:4b:57:5c:2d:b5:6c:dc:2f:83:45:42:9a:46:
         1c:23:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:11 2026 by rpki-client