This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3232203d3e20323632353839.roa
File:                     3138312e3232342e3136302e302f32322d3232203d3e20323632353839.roa (raw, json)
Hash identifier:          +vGKewz17/NNXrTW6ATpsLFZZpHIVocsZFUZO7qaFQo=
Subject key identifier:   12:5C:C1:B1:9A:52:2B:B8:F1:97:08:2E:1B:3E:98:FF:CF:3E:FD:AC
Certificate issuer:       /CN=253120D1807C995036BC4D9454329185DF025960
Certificate serial:       4E5A0E6292816DE49005A87D3F5A6D705921352D
Authority key identifier: 25:31:20:D1:80:7C:99:50:36:BC:4D:94:54:32:91:85:DF:02:59:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3232203d3e20323632353839.roa
Signing time:             Wed 31 Dec 2025 14:56:51 +0000
ROA not before:           Wed 31 Dec 2025 14:51:51 +0000
ROA not after:            Wed 30 Dec 2026 14:56:51 +0000
asID:                     262589
IP address blocks:        181.224.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.crl
                          rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5a:0e:62:92:81:6d:e4:90:05:a8:7d:3f:5a:6d:70:59:21:35:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253120D1807C995036BC4D9454329185DF025960
        Validity
            Not Before: Dec 31 14:51:51 2025 GMT
            Not After : Dec 30 14:56:51 2026 GMT
        Subject: CN=125CC1B19A522BB8F197082E1B3E98FFCF3EFDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:bb:8b:ed:18:e4:37:a6:51:0f:cd:0a:c5:
                    09:ae:82:29:57:f0:78:e5:45:b7:8c:00:13:87:10:
                    de:0d:95:d5:17:7f:13:fa:90:77:8e:37:5a:8c:0e:
                    62:a7:87:ab:1d:da:81:51:c4:12:73:27:76:69:f9:
                    17:a1:d0:4a:6a:c6:9e:f0:fe:48:09:b0:81:53:6e:
                    81:44:88:1a:93:5c:d7:5d:e7:56:27:e2:66:9c:a3:
                    b2:e1:7d:57:1a:76:36:0a:b4:59:7a:d3:45:2e:1e:
                    f7:90:77:d9:b5:63:01:22:9a:6e:41:50:6b:0b:c0:
                    14:e3:93:f4:e1:ca:6e:d3:40:cb:03:82:8f:44:54:
                    18:cb:8f:3a:55:f2:5d:1a:45:2e:46:f3:98:0d:6a:
                    b7:55:1b:56:3b:04:f8:48:7a:70:8c:3a:0e:fb:75:
                    a0:72:73:de:d4:92:9f:e0:c3:67:d0:c7:7e:b0:21:
                    3d:08:0f:23:ea:8f:cd:f7:07:1e:cf:d3:b0:c6:34:
                    ac:12:4d:39:99:a2:89:67:d3:98:f1:5e:5d:2b:23:
                    6b:77:48:f8:09:88:ca:bb:50:2a:a4:c1:9c:a3:27:
                    cd:e7:3a:49:b4:3d:65:87:e3:33:1b:ec:eb:93:61:
                    6c:a0:44:58:97:ed:2b:9e:3d:64:c1:3a:f8:cd:97:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:C1:B1:9A:52:2B:B8:F1:97:08:2E:1B:3E:98:FF:CF:3E:FD:AC
            X509v3 Authority Key Identifier:
                keyid:25:31:20:D1:80:7C:99:50:36:BC:4D:94:54:32:91:85:DF:02:59:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3232203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:d2:29:b0:e9:2f:35:5d:20:29:13:16:e3:e2:f9:5a:b5:
         37:0d:67:39:fc:35:4b:4d:0a:2c:ca:f8:1b:62:8e:3c:2c:ec:
         f1:dd:53:ba:b9:cd:f1:40:a6:c4:ad:0f:3a:0c:2b:9f:f5:ac:
         c1:6a:b4:24:52:c5:37:b2:31:4b:7e:64:c0:b4:69:69:79:15:
         cf:5e:cd:19:89:05:d0:14:fa:89:28:ca:23:9f:1a:ac:ea:d6:
         3d:1c:b8:e8:a4:f8:9e:74:33:3e:d7:b2:95:11:64:82:09:d2:
         45:7b:a6:c7:e9:23:b6:d0:ec:4e:49:31:6b:7a:0f:57:cb:fb:
         12:14:af:4b:80:20:3f:53:65:c8:3c:3e:b7:e0:88:ce:0b:28:
         00:30:3e:41:75:2c:d1:08:e4:82:0e:dc:70:76:8a:71:8b:a5:
         8c:a8:c5:51:15:12:a7:01:8e:4e:46:a6:bd:c4:5a:dd:ee:d8:
         22:70:52:c4:eb:1b:f4:87:15:92:f1:7f:9f:19:4d:ba:06:79:
         ba:a5:06:1b:37:ea:35:ba:1c:1c:50:a4:1d:e0:82:0b:d4:4f:
         f0:f9:ac:3c:5f:11:ef:97:75:61:d1:bf:06:81:4c:7d:01:54:
         ab:78:79:4c:e5:fc:b0:d2:80:3a:0d:5f:02:a4:0c:30:65:34:
         45:89:1d:9a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUTloOYpKBbeSQBah9P1ptcFkhNS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUzMTIwRDE4MDdDOTk1MDM2QkM0RDk0NTQzMjkxODVE
RjAyNTk2MDAeFw0yNTEyMzExNDUxNTFaFw0yNjEyMzAxNDU2NTFaMDMxMTAvBgNV
BAMTKDEyNUNDMUIxOUE1MjJCQjhGMTk3MDgyRTFCM0U5OEZGQ0YzRUZEQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMruL7RjkN6ZRD80KxQmugilX
8HjlRbeMABOHEN4NldUXfxP6kHeON1qMDmKnh6sd2oFRxBJzJ3Zp+Reh0Epqxp7w
/kgJsIFTboFEiBqTXNdd51Yn4maco7LhfVcadjYKtFl600UuHveQd9m1YwEimm5B
UGsLwBTjk/Thym7TQMsDgo9EVBjLjzpV8l0aRS5G85gNardVG1Y7BPhIenCMOg77
daByc97Ukp/gw2fQx36wIT0IDyPqj833Bx7P07DGNKwSTTmZooln05jxXl0rI2t3
SPgJiMq7UCqkwZyjJ83nOkm0PWWH4zMb7OuTYWygRFiX7SuePWTBOvjNl437AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUElzBsZpSK7jxlwguGz6Y/88+/awwHwYDVR0j
BBgwFoAUJTEg0YB8mVA2vE2UVDKRhd8CWWAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzlGNzJDM0FEOUIwMDQ4OTk5MjNFQzhEQjk1Q0IxREI1
ODQ3MkFCNkQ5NkZBOUMxMjVBREM2M0RCQUVBMEY3LzAvMjUzMTIwRDE4MDdDOTk1
MDM2QkM0RDk0NTQzMjkxODVERjAyNTk2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNTMxMjBEMTgwN0M5OTUwMzZC
QzREOTQ1NDMyOTE4NURGMDI1OTYwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDM5RjcyQzNBRDlCMDA0ODk5OTIzRUM4REI5NUNCMURCNTg0NzJBQjZE
OTZGQTlDMTI1QURDNjNEQkFFQTBGNy8wLzMxMzgzMTJlMzIzMjM0MmUzMTM2MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK1
4KAwDQYJKoZIhvcNAQELBQADggEBAFri0imw6S81XSApExbj4vlatTcNZzn8NUtN
CizK+Btijjws7PHdU7q5zfFApsStDzoMK5/1rMFqtCRSxTeyMUt+ZMC0aWl5Fc9e
zRmJBdAU+okoyiOfGqzq1j0cuOik+J50Mz7XspURZIIJ0kV7psfpI7bQ7E5JMWt6
D1fL+xIUr0uAID9TZcg8PrfgiM4LKAAwPkF1LNEI5IIO3HB2inGLpYyoxVEVEqcB
jk5Gpr3EWt3u2CJwUsTrG/SHFZLxf58ZTboGebqlBhs36jW6HBxQpB3gggvUT/D5
rDxfEe+XdWHRvwaBTH0BVKt4eUzl/LDSgDoNXwKkDDBlNEWJHZo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:47 2026 by rpki-client