This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa
File:                     3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa (raw, json)
Hash identifier:          CnwMDrBCONmo676kcW8meC3HAuMS698VOgf/TQXrnUs=
Subject key identifier:   E7:56:85:09:6A:C5:76:02:B2:FD:A5:C4:BE:18:FA:29:B1:F0:AE:6C
Certificate issuer:       /CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
Certificate serial:       599B3B02F7800EB46DD969628B694AD5F0B2D918
Authority key identifier: 3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa
Signing time:             Tue 06 Jan 2026 19:39:21 +0000
ROA not before:           Tue 06 Jan 2026 19:34:21 +0000
ROA not after:            Tue 05 Jan 2027 19:39:21 +0000
asID:                     263182
IP address blocks:        181.225.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 14:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:3b:02:f7:80:0e:b4:6d:d9:69:62:8b:69:4a:d5:f0:b2:d9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091
        Validity
            Not Before: Jan  6 19:34:21 2026 GMT
            Not After : Jan  5 19:39:21 2027 GMT
        Subject: CN=E75685096AC57602B2FDA5C4BE18FA29B1F0AE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:00:39:66:bd:a6:18:ea:00:1d:7f:d6:b7:
                    9e:58:b3:f2:14:1d:c4:29:93:94:4e:3c:ad:00:ca:
                    74:f6:e3:db:5d:4c:00:51:ef:f5:45:4b:c3:e6:0c:
                    f4:d2:b7:f9:33:5d:cf:25:94:9f:f9:8b:55:4e:2f:
                    e6:15:94:c2:68:36:a3:8d:12:52:c3:53:eb:a5:aa:
                    37:21:00:b0:7c:1b:ec:a7:9f:bf:84:7e:bf:ce:6a:
                    76:60:89:ca:d8:07:08:07:a5:78:e6:a6:d6:61:04:
                    b1:42:3c:a6:4e:f3:2d:21:8e:8d:6a:4e:4c:8c:01:
                    27:73:e6:b8:6e:b6:1a:09:d7:45:b4:92:9d:f9:7a:
                    25:c0:17:19:e3:dd:f7:a8:9a:ad:99:40:9d:46:35:
                    e9:d8:6f:9b:0c:cc:79:c9:83:e4:32:36:40:0f:1d:
                    82:f3:21:d1:14:27:e3:af:f7:fb:40:b9:52:59:d0:
                    d4:56:c3:5e:5d:43:b2:b6:25:57:a8:a2:bb:d7:3e:
                    25:92:17:85:fb:b0:32:7f:4d:ef:74:46:34:65:3b:
                    bb:f6:69:49:d0:dc:05:17:69:f1:cb:bb:a6:64:ae:
                    2c:d3:c7:c5:25:27:8d:0e:d3:17:76:be:c5:8a:3b:
                    63:e2:8e:89:47:50:d9:d2:da:33:66:10:b2:61:54:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:85:09:6A:C5:76:02:B2:FD:A5:C4:BE:18:FA:29:B1:F0:AE:6C
            X509v3 Authority Key Identifier:
                keyid:3C:48:A5:D3:7B:5C:07:1F:F1:A8:25:8C:AF:CE:4A:DC:F5:FA:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C48A5D37B5C071FF1A8258CAFCE4ADCF5FA6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300C3B33A1D251C6BC15825335FA2351103109E1D1B08AE54E8448585AEBFC8A/0/3138312e3232352e36322e302f32342d3234203d3e20323633313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:42:42:04:41:75:7d:eb:8f:65:34:e1:eb:35:da:52:9e:c5:
         27:98:4f:68:f7:10:86:44:5e:dd:23:be:a8:7b:6e:9c:9a:d1:
         59:db:77:b7:b5:26:a1:61:9c:c9:57:cb:47:76:4a:90:1e:29:
         e2:59:ed:1d:56:9d:c9:0f:33:a5:72:4b:b8:26:08:4b:49:c5:
         e4:59:7f:d6:97:d5:da:e2:a6:b7:44:ef:2c:18:d8:db:25:c8:
         2a:c0:bd:90:e5:c2:28:0e:7f:ea:fc:48:45:ad:c7:77:89:41:
         39:2c:67:aa:f2:df:96:78:97:05:f5:72:14:d3:0b:fb:12:7a:
         c3:dc:00:49:6a:99:67:79:7f:61:d5:4f:34:90:f2:ad:21:d2:
         c3:66:3d:c5:ce:0d:89:bb:5c:74:7e:13:02:d1:05:fd:6b:bf:
         2c:43:82:eb:e9:83:ca:4a:38:84:f1:a1:21:8e:e9:06:88:01:
         41:d9:4e:e4:0a:a6:59:f0:27:b1:04:32:63:bd:f3:1e:a3:ac:
         e2:54:df:51:c9:09:1d:a4:91:1a:f1:b0:df:aa:8f:b0:f2:ae:
         3a:2c:59:af:29:ae:bb:52:24:be:f3:aa:7d:4e:c9:da:53:f4:
         8f:1a:9f:6e:13:79:b3:1e:50:4a:58:7d:e2:18:28:ca:5e:30:
         a4:fd:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:06 2026 by rpki-client