This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138312e31372e302e302f31362d3230203d3e203237383839.roa
File:                     3138312e31372e302e302f31362d3230203d3e203237383839.roa (raw, json)
Hash identifier:          ntb24vK/lZvuSnTPOeccli+T5IUL4XBjaNwEtm6giws=
Subject key identifier:   D7:DC:12:72:3F:03:72:96:9E:33:21:E3:E3:4F:8A:D5:CC:62:4A:E2
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       4FFE3DA7588DE9270B6B9E906A038F1DBA8776FF
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138312e31372e302e302f31362d3230203d3e203237383839.roa
Signing time:             Tue 06 Jan 2026 19:28:56 +0000
ROA not before:           Tue 06 Jan 2026 19:23:56 +0000
ROA not after:            Tue 05 Jan 2027 19:28:56 +0000
asID:                     27889
IP address blocks:        181.17.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fe:3d:a7:58:8d:e9:27:0b:6b:9e:90:6a:03:8f:1d:ba:87:76:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Jan  6 19:23:56 2026 GMT
            Not After : Jan  5 19:28:56 2027 GMT
        Subject: CN=D7DC12723F0372969E3321E3E34F8AD5CC624AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:45:be:c2:f1:98:7f:f1:86:d8:0d:ca:f2:
                    26:45:f4:89:b4:6c:6c:34:b0:77:5d:33:1b:6e:76:
                    a6:c2:30:92:55:f0:99:5c:60:82:a9:ac:14:92:e8:
                    1e:5e:dd:d2:bd:6d:de:1d:b0:86:af:5c:fa:d9:85:
                    eb:99:3f:9f:ab:c6:f5:7c:05:90:08:72:01:c7:28:
                    4d:54:6d:e1:8b:9f:88:44:3c:95:d2:10:4d:c4:80:
                    92:77:1d:50:07:81:80:f9:fe:cd:59:e0:b0:65:d2:
                    e1:2e:a6:11:65:65:5b:f8:92:ee:1c:d5:d3:2d:ba:
                    ec:fb:5a:8c:39:de:a5:96:ed:72:a4:aa:4f:eb:e0:
                    4b:0e:c2:75:c1:f1:21:1e:f4:2f:62:a8:22:5f:77:
                    a3:bc:7c:b7:5c:30:eb:b1:e0:c2:63:75:29:20:31:
                    6e:2a:7f:9d:40:e6:dd:2a:af:5a:b8:f9:cb:3e:e9:
                    c9:f6:fb:51:16:a6:79:d5:3e:2e:ff:ba:42:e3:53:
                    20:09:eb:88:cb:a0:90:f3:e7:2d:f4:28:12:38:fe:
                    ed:f5:bf:43:05:e3:9c:89:6c:06:6e:04:9e:56:a3:
                    28:61:be:04:a1:06:67:4d:a9:3d:a6:88:ac:0b:fa:
                    2e:bb:16:f1:2f:44:b6:05:84:8d:43:e2:92:84:59:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:12:72:3F:03:72:96:9E:33:21:E3:E3:4F:8A:D5:CC:62:4A:E2
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138312e31372e302e302f31362d3230203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:fe:f0:5f:80:da:73:98:cf:3b:b6:6f:93:58:33:44:b7:8f:
         e2:d4:7f:98:c8:95:76:77:6d:fd:80:f7:46:f6:bc:94:0c:0c:
         07:10:71:c7:93:7e:af:7d:f7:78:10:7a:ff:4a:72:87:3b:ea:
         1c:fc:16:93:dd:d1:2b:6c:02:50:39:60:e8:6b:73:24:aa:f7:
         b7:65:bb:83:95:47:ac:8b:30:1b:7e:e5:a7:b3:8d:5d:46:89:
         cb:9e:ef:42:aa:c1:23:ae:a4:82:b3:a8:01:5f:69:d8:de:06:
         9c:5b:ff:ae:ea:53:7a:bc:94:98:ce:79:fd:c7:c8:f6:31:b6:
         96:bd:62:f3:c2:ce:c2:2d:87:51:35:6f:16:70:83:b9:12:8e:
         df:17:b6:46:fd:8b:ec:de:00:be:42:80:d8:78:4d:32:a4:c2:
         9f:bb:99:61:93:2d:70:89:ce:3c:e3:37:3a:be:35:38:da:28:
         db:6a:31:ee:ce:1a:00:89:c2:d7:97:27:15:bf:04:8f:7e:cb:
         58:b5:83:3c:54:a8:5e:02:56:db:f0:9a:55:89:e7:4a:2c:85:
         6d:84:ad:10:57:6a:2c:af:f9:2a:2d:fc:a5:27:42:80:0d:35:
         85:5e:75:a8:d0:6d:03:f4:47:2c:bb:a2:22:f1:59:db:a1:aa:
         ea:6c:58:f7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUT/49p1iN6ScLa56QagOPHbqHdv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyQzA2NUM5NzRFNzAwQjEzNjlFREY0QURCRTFCRDEx
MjcyQjA5QTAeFw0yNjAxMDYxOTIzNTZaFw0yNzAxMDUxOTI4NTZaMDMxMTAvBgNV
BAMTKEQ3REMxMjcyM0YwMzcyOTY5RTMzMjFFM0UzNEY4QUQ1Q0M2MjRBRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTEW+wvGYf/GG2A3K8iZF9Im0
bGw0sHddMxtudqbCMJJV8JlcYIKprBSS6B5e3dK9bd4dsIavXPrZheuZP5+rxvV8
BZAIcgHHKE1UbeGLn4hEPJXSEE3EgJJ3HVAHgYD5/s1Z4LBl0uEuphFlZVv4ku4c
1dMtuuz7Wow53qWW7XKkqk/r4EsOwnXB8SEe9C9iqCJfd6O8fLdcMOux4MJjdSkg
MW4qf51A5t0qr1q4+cs+6cn2+1EWpnnVPi7/ukLjUyAJ64jLoJDz5y30KBI4/u31
v0MF45yJbAZuBJ5WoyhhvgShBmdNqT2miKwL+i67FvEvRLYFhI1D4pKEWV7FAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU19wScj8DcpaeMyHj40+K1cxiSuIwHwYDVR0j
BBgwFoAUPSwGXJdOcAsTae30rb4b0RJysJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjE3NDg3OEY2NUMzMDk5REVFMjZFQTI5NjUxODVERDJD
MDEwMTUzQzVEQzM0MzcyM0I1MEE0MDYwQThBMEVBLzAvM0QyQzA2NUM5NzRFNzAw
QjEzNjlFREY0QURCRTFCRDExMjcyQjA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDJDMDY1Qzk3NEU3MDBCMTM2
OUVERjRBREJFMUJEMTEyNzJCMDlBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUYxNzQ4NzhGNjVDMzA5OURFRTI2RUEyOTY1MTg1REQyQzAxMDE1M0M1
REMzNDM3MjNCNTBBNDA2MEE4QTBFQS8wLzMxMzgzMTJlMzEzNzJlMzAyZTMwMmYz
MTM2MmQzMjMwMjAzZDNlMjAzMjM3MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAtREwDQYJKoZI
hvcNAQELBQADggEBAAb+8F+A2nOYzzu2b5NYM0S3j+LUf5jIlXZ3bf2A90b2vJQM
DAcQcceTfq9993gQev9Kcoc76hz8FpPd0StsAlA5YOhrcySq97dlu4OVR6yLMBt+
5aezjV1Gicue70KqwSOupIKzqAFfadjeBpxb/67qU3q8lJjOef3HyPYxtpa9YvPC
zsIth1E1bxZwg7kSjt8Xtkb9i+zeAL5CgNh4TTKkwp+7mWGTLXCJzjzjNzq+NTja
KNtqMe7OGgCJwteXJxW/BI9+y1i1gzxUqF4CVtvwmlWJ50oshW2ErRBXaiyv+Sot
/KUnQoANNYVedajQbQP0Ryy7oiLxWduhqupsWPc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:56 2026 by rpki-client