This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa
File:                     3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa (raw, json)
Hash identifier:          W8acFCxEil+bJWuDs3gB1H4fz8TDJSmVNfdTci4hFQs=
Subject key identifier:   43:11:F0:24:0E:50:43:F1:A0:07:98:E0:AA:DE:DB:79:0A:AF:22:B8
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       641CB9EDD73ED1855213CE4C127C77A9C041367D
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa
Signing time:             Tue 06 Jan 2026 19:21:47 +0000
ROA not before:           Tue 06 Jan 2026 19:16:47 +0000
ROA not after:            Tue 05 Jan 2027 19:21:47 +0000
asID:                     52308
IP address blocks:        181.114.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1c:b9:ed:d7:3e:d1:85:52:13:ce:4c:12:7c:77:a9:c0:41:36:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Jan  6 19:16:47 2026 GMT
            Not After : Jan  5 19:21:47 2027 GMT
        Subject: CN=4311F0240E5043F1A00798E0AADEDB790AAF22B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:39:cb:c6:fa:54:dc:16:d5:38:68:20:c2:
                    a2:bf:f1:ab:7b:59:87:72:32:4b:72:18:b9:27:91:
                    cc:79:f1:27:ce:89:2b:a0:ff:ce:b0:6c:9e:34:05:
                    34:0f:33:0e:82:2f:ab:58:a7:70:10:0f:70:4b:52:
                    78:59:01:d0:5c:9c:34:9c:07:0f:28:94:41:2b:d3:
                    42:b1:6f:80:71:82:2d:10:36:d5:c3:a4:6e:df:1f:
                    7d:98:40:c3:32:0e:85:22:bb:a1:52:42:43:b4:81:
                    a5:22:8b:f5:36:e4:aa:3a:db:36:a0:42:ea:d6:a6:
                    4b:38:08:9f:52:bb:6f:54:58:ce:75:a9:df:a7:ba:
                    be:24:e9:23:4b:45:64:3e:37:6e:56:4a:ff:66:10:
                    83:fc:b4:1f:48:3a:c1:07:1c:16:24:b9:71:20:8e:
                    21:8f:2a:33:e4:3d:3a:ea:dc:de:a7:fc:a3:e2:de:
                    be:81:b8:ae:e6:96:e5:f9:b0:53:8f:b6:a1:6e:c8:
                    97:52:19:ef:2d:4f:0c:11:db:ce:f7:71:f8:16:29:
                    f8:01:63:75:bd:f0:f3:5a:29:f2:a6:ae:04:59:89:
                    7d:ec:49:0b:05:56:93:d7:4a:7c:20:c7:e6:2a:aa:
                    0d:f2:18:6d:23:09:2c:a9:92:05:fd:1c:6b:b0:91:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:F0:24:0E:50:43:F1:A0:07:98:E0:AA:DE:DB:79:0A:AF:22:B8
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:ee:07:65:45:f8:d9:12:43:07:6f:7a:8f:c2:1e:75:7a:
         15:4f:36:00:2a:e4:6b:ae:88:26:70:5a:5e:c2:80:7b:a8:5a:
         35:85:e4:db:6d:03:68:c8:01:c5:81:4b:ad:49:c4:64:41:d6:
         81:ac:25:ef:79:64:56:b9:80:04:51:d8:08:b6:88:cb:35:65:
         37:ab:56:eb:e4:f4:04:26:0e:33:d8:fe:82:18:8e:d2:00:ba:
         2d:41:68:53:69:c9:a2:d1:12:c4:09:88:c3:53:f5:bd:ce:d9:
         e9:27:7a:8e:f0:66:62:bd:9e:4d:d7:07:2a:97:d9:4f:98:5a:
         1a:ed:cc:fd:bf:6c:49:31:bb:c3:af:a5:9a:e5:c5:41:40:7e:
         e2:df:14:57:0d:15:06:be:13:b7:16:d7:6d:32:59:e4:b1:90:
         7d:20:a7:60:4f:54:d2:57:a3:9a:dd:84:ec:b5:20:63:21:66:
         1b:39:f4:7e:1b:5f:78:d8:07:de:2c:05:ad:52:eb:75:5c:4e:
         36:19:3e:35:bb:f5:58:22:ea:f4:76:c2:75:c3:99:4c:14:d0:
         3e:34:be:9f:c3:5d:ab:c5:c9:12:27:a7:42:00:c6:2e:c6:8d:
         c5:ce:3e:fc:7c:81:b7:d5:6c:66:aa:56:26:a7:b5:c8:a8:a4:
         ef:da:e3:c8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZBy57dc+0YVSE85MEnx3qcBBNn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMkUwRTU3OUM2MDM2OUI5RTU5NjJCQzdFNzAwNDI3
QjY5MTVCNjAeFw0yNjAxMDYxOTE2NDdaFw0yNzAxMDUxOTIxNDdaMDMxMTAvBgNV
BAMTKDQzMTFGMDI0MEU1MDQzRjFBMDA3OThFMEFBREVEQjc5MEFBRjIyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0DnLxvpU3BbVOGggwqK/8at7
WYdyMktyGLknkcx58SfOiSug/86wbJ40BTQPMw6CL6tYp3AQD3BLUnhZAdBcnDSc
Bw8olEEr00Kxb4Bxgi0QNtXDpG7fH32YQMMyDoUiu6FSQkO0gaUii/U25Ko62zag
QurWpks4CJ9Su29UWM51qd+nur4k6SNLRWQ+N25WSv9mEIP8tB9IOsEHHBYkuXEg
jiGPKjPkPTrq3N6n/KPi3r6BuK7mluX5sFOPtqFuyJdSGe8tTwwR2873cfgWKfgB
Y3W98PNaKfKmrgRZiX3sSQsFVpPXSnwgx+Yqqg3yGG0jCSypkgX9HGuwkaJ3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQxHwJA5QQ/GgB5jgqt7beQqvIrgwHwYDVR0j
BBgwFoAUjALg5XnGA2m55ZYrx+cAQntpFbYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMUY1MTM0RDNGNzg0MkZDODNBMTVERUJBMjRCNTFDNzBC
RTcyNkRBRjlGMkQxNkFDNTQ1RUVBRDc0NDMyN0ZFLzAvOEMwMkUwRTU3OUM2MDM2
OUI5RTU5NjJCQzdFNzAwNDI3QjY5MTVCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzAyRTBFNTc5QzYwMzY5QjlF
NTk2MkJDN0U3MDA0MjdCNjkxNUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjFGNTEzNEQzRjc4NDJGQzgzQTE1REVCQTI0QjUxQzcwQkU3MjZEQUY5
RjJEMTZBQzU0NUVFQUQ3NDQzMjdGRS8wLzMxMzgzMTJlMzEzMTM0MmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNTMyMzMzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFtXLA
MA0GCSqGSIb3DQEBCwUAA4IBAQCZfu4HZUX42RJDB296j8IedXoVTzYAKuRrrogm
cFpewoB7qFo1heTbbQNoyAHFgUutScRkQdaBrCXveWRWuYAEUdgItojLNWU3q1br
5PQEJg4z2P6CGI7SALotQWhTacmi0RLECYjDU/W9ztnpJ3qO8GZivZ5N1wcql9lP
mFoa7cz9v2xJMbvDr6Wa5cVBQH7i3xRXDRUGvhO3FtdtMlnksZB9IKdgT1TSV6Oa
3YTstSBjIWYbOfR+G1942AfeLAWtUut1XE42GT41u/VYIur0dsJ1w5lMFNA+NL6f
w12rxckSJ6dCAMYuxo3Fzj78fIG31WxmqlYmp7XIqKTv2uPI
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:01:37 2026 by rpki-client