This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa
File:                     3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa (raw, json)
Hash identifier:          mlXoePJxL1DZvqYE9Y6028aIdpC8fhF5yo6QYr0LCX0=
Subject key identifier:   0A:1F:21:7A:1B:F5:B6:BA:E0:78:8E:3A:30:51:08:D6:A7:49:84:26
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       07191CB8D60F28B201AB24BC135D2E8A14F890F1
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa
Signing time:             Tue 06 Jan 2026 19:21:47 +0000
ROA not before:           Tue 06 Jan 2026 19:16:47 +0000
ROA not after:            Tue 05 Jan 2027 19:21:47 +0000
asID:                     52308
IP address blocks:        181.174.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:19:1c:b8:d6:0f:28:b2:01:ab:24:bc:13:5d:2e:8a:14:f8:90:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Jan  6 19:16:47 2026 GMT
            Not After : Jan  5 19:21:47 2027 GMT
        Subject: CN=0A1F217A1BF5B6BAE0788E3A305108D6A7498426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:9c:79:a6:ec:59:6f:24:62:48:05:f7:d3:
                    66:c8:b3:92:16:5f:42:6f:fa:81:7d:9c:2d:0e:da:
                    08:e2:73:1f:77:17:05:83:72:de:5e:e5:0c:a4:fe:
                    96:78:da:a6:5d:c1:2b:16:77:d6:35:57:c9:3e:8a:
                    6e:b3:75:a4:05:93:9b:43:c2:5f:78:3a:7f:5f:4c:
                    23:16:f7:3d:13:ed:58:79:4e:61:46:dd:b9:34:e5:
                    e0:37:75:64:04:0b:69:9a:4c:b2:bf:44:d5:95:77:
                    b8:41:56:a3:fc:df:15:63:9d:14:98:68:83:f3:b7:
                    ca:cb:b1:d2:8a:51:ee:14:4c:cd:1e:c1:92:2d:30:
                    ba:6c:b4:f0:b8:45:5f:5c:7b:37:1a:c3:81:67:7b:
                    82:98:bb:85:30:12:d1:a6:4c:1c:4b:32:1a:dd:68:
                    63:a7:4b:ef:2a:5e:13:24:d7:0c:2b:f5:56:1f:52:
                    da:1a:fc:f7:e8:a0:a7:a3:e9:1b:9e:cf:0b:d5:6a:
                    4b:e3:83:1d:b2:09:d1:d7:e4:31:12:43:0d:f2:77:
                    07:98:9f:ff:86:30:5b:a7:5d:3d:a6:bc:68:e0:7f:
                    20:e3:42:48:8a:1a:18:49:c4:03:15:4f:52:77:95:
                    bd:95:d6:e0:a6:64:f1:6e:89:76:5c:6b:b1:bc:d5:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:21:7A:1B:F5:B6:BA:E0:78:8E:3A:30:51:08:D6:A7:49:84:26
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3137342e3132382e302f31392d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:8a:f4:44:bc:18:6b:39:37:0b:3c:ce:06:38:2b:b1:75:
         11:75:33:74:0e:d7:1b:e6:56:e9:d5:0b:94:34:7d:b8:f8:0f:
         ea:b8:0d:b5:c9:0f:bb:91:aa:ff:0c:31:87:e6:09:b7:21:41:
         16:b1:2a:a5:8f:36:69:2d:8d:2f:8b:d9:c8:7b:00:e3:fa:4b:
         e8:5d:c9:87:fa:c3:44:34:50:a0:07:4c:9a:0c:1f:63:b8:6a:
         e7:62:72:8b:4f:f2:0d:da:8c:27:74:0a:f9:26:65:a3:a6:5f:
         9c:9a:6b:fc:24:10:f6:62:37:72:fe:81:0e:e5:d4:e4:c4:fc:
         7c:89:f5:04:b6:94:cc:e4:ba:95:2d:32:54:48:ac:22:a5:b6:
         20:30:43:8e:bb:b2:b7:ef:48:72:97:ec:4a:14:71:90:3f:ee:
         52:5d:d1:58:62:6f:b5:64:ce:50:15:ea:49:c1:ca:bd:82:3f:
         36:03:95:2e:83:45:02:18:25:1f:92:e4:d1:a4:47:61:f5:0d:
         16:1b:63:09:e2:bf:a0:c8:ad:f3:43:30:c1:3b:5b:8a:32:3e:
         ae:a2:11:c7:19:f5:03:a6:12:50:d7:30:c9:c9:fc:21:44:14:
         7a:97:81:9c:a8:00:bb:9f:2c:47:a3:b0:2b:33:f8:24:02:c0:
         f1:5b:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:57:31 2026 by rpki-client