This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa
File:                     3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          eLZ708yEzdNJJ5duW1435Fs4VuqepsD8Paab5Wohq8Q=
Subject key identifier:   5D:B1:62:3B:C6:4F:8C:A1:02:C0:10:FB:C9:F8:84:A7:1D:7C:7B:EB
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       04F3113191AD901EE170BCCA6E71D1B3E2C5BEE4
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:41 +0000
ROA not before:           Tue 06 Jan 2026 19:00:41 +0000
ROA not after:            Tue 05 Jan 2027 19:05:41 +0000
asID:                     27823
IP address blocks:        168.181.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f3:11:31:91:ad:90:1e:e1:70:bc:ca:6e:71:d1:b3:e2:c5:be:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:41 2026 GMT
            Not After : Jan  5 19:05:41 2027 GMT
        Subject: CN=5DB1623BC64F8CA102C010FBC9F884A71D7C7BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:0e:a1:4b:e9:2f:b5:ae:c9:6c:1c:00:9b:
                    76:01:97:08:d9:1e:97:c5:06:40:f4:85:04:d5:e7:
                    df:d2:58:28:5c:7b:cb:d8:d4:f2:df:ec:c5:90:ff:
                    c7:0a:3a:db:03:82:16:28:33:f5:f6:96:4a:7b:fe:
                    89:14:3e:0a:b8:15:57:ae:d8:9d:52:17:a1:f0:af:
                    32:f0:f8:8b:84:d7:9e:ce:55:bd:cb:37:b6:11:3e:
                    3b:57:dd:f8:c2:95:41:e4:70:d9:23:5b:60:01:71:
                    5c:11:8f:ed:fd:a4:c0:bc:31:86:bd:ec:4d:17:f3:
                    b9:36:8a:1b:78:6e:28:16:93:bf:c1:70:64:93:48:
                    27:82:77:3c:a2:4c:cb:d0:27:86:5c:8c:4a:01:8c:
                    93:03:d9:db:e5:70:e0:b6:7d:2a:5f:4c:f9:26:c1:
                    9f:32:f6:b2:e4:13:8a:58:51:36:68:cb:48:a9:32:
                    99:af:84:73:42:25:f9:58:f1:85:e5:7d:c4:ee:1a:
                    8a:1d:92:c8:fe:72:3f:f0:91:ab:c3:c4:d7:bd:a2:
                    50:d8:e1:1a:1f:2f:d5:f1:09:e2:e1:9c:85:da:fd:
                    08:26:49:82:de:89:a3:10:b2:6a:ea:d5:25:0d:4f:
                    6c:d2:2a:b8:83:ca:51:06:a4:22:83:e7:01:b5:47:
                    5b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:62:3B:C6:4F:8C:A1:02:C0:10:FB:C9:F8:84:A7:1D:7C:7B:EB
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:47:ff:ee:e3:11:4e:2d:bb:9b:85:8b:67:77:0b:64:00:15:
         31:59:45:71:04:47:24:f8:b1:e9:64:59:4d:2c:4a:db:a7:db:
         db:08:fb:c5:75:c9:09:a0:27:58:90:24:e0:33:07:c6:ec:32:
         6c:f8:ba:6c:3e:86:51:f3:80:78:fa:74:f8:c3:05:e4:02:ce:
         cc:07:a5:60:97:12:11:50:c9:f5:a0:33:f9:3b:a8:e6:b7:b3:
         e1:80:6a:33:50:2c:86:35:0b:5a:c3:f8:d0:44:24:f3:8a:f7:
         60:d6:50:40:a2:71:c4:4a:4f:6e:66:85:95:b5:99:bf:13:09:
         c1:f8:ea:dd:cb:b9:d8:ae:a6:61:98:a0:24:d3:f7:fd:e5:07:
         aa:6e:4a:56:c3:e5:b1:37:e9:b2:07:c1:dd:08:df:79:52:a6:
         ca:98:d9:2e:58:d9:45:fc:44:9a:65:0d:6b:e4:11:9a:b8:66:
         31:29:22:be:1b:b7:e5:f3:42:b2:b2:d4:6d:a1:ec:80:5e:92:
         6f:39:bb:d2:10:35:66:2f:4c:c3:16:e9:be:25:ac:e2:f0:0f:
         29:40:7c:60:5c:39:14:47:f3:0e:79:02:f2:ab:6d:74:f0:1b:
         80:1e:72:e8:54:ae:56:af:44:e3:b4:36:f1:e8:9e:e1:5c:4e:
         2a:e7:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:52 2026 by rpki-client