This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137322e302f32332d3234203d3e20323634383330.roa
File:                     3138312e3138392e3137322e302f32332d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          5Lonu6UFTa8qWnkjOzw5Dt50KsHBt3q9/hnqX4tpCmc=
Subject key identifier:   9A:CA:78:8C:E2:96:73:92:C8:33:69:0B:78:02:BC:F1:91:A2:67:C0
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       04833E153E36C02F0058242B8A4FF570BF1051DC
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137322e302f32332d3234203d3e20323634383330.roa
Signing time:             Tue 06 Jan 2026 18:59:27 +0000
ROA not before:           Tue 06 Jan 2026 18:54:27 +0000
ROA not after:            Tue 05 Jan 2027 18:59:27 +0000
asID:                     264830
IP address blocks:        181.189.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:83:3e:15:3e:36:c0:2f:00:58:24:2b:8a:4f:f5:70:bf:10:51:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Jan  6 18:54:27 2026 GMT
            Not After : Jan  5 18:59:27 2027 GMT
        Subject: CN=9ACA788CE2967392C833690B7802BCF191A267C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:0f:cd:89:d3:d8:2b:64:13:42:3b:e5:f1:
                    cf:43:9b:9d:a8:f3:eb:41:1d:8f:0b:76:00:81:94:
                    62:cc:79:3e:ca:d6:47:57:e3:4d:8f:44:25:e1:eb:
                    c9:5a:8f:40:11:6b:c5:eb:39:32:e9:7e:dd:5f:2e:
                    14:d7:1f:9d:84:a0:4b:85:46:39:7d:b2:f7:32:11:
                    1e:ff:0a:41:42:36:b2:2c:a7:1b:01:f7:70:4b:16:
                    01:8a:da:9f:d1:12:c5:01:1d:ca:cd:b7:1d:26:21:
                    9b:5a:1e:e6:29:ca:82:6f:49:ec:cf:d8:57:b6:80:
                    1d:42:b8:31:f1:0a:63:b8:b3:61:1d:12:07:ef:ef:
                    4f:dc:27:e3:d0:9d:88:06:b2:c1:4d:2a:a6:ca:5b:
                    64:34:c5:28:55:38:05:82:51:3b:8a:02:40:bf:89:
                    b2:47:f5:ab:00:e9:90:7d:c7:dd:ca:b7:ae:14:ef:
                    4c:c7:25:11:c3:7a:4f:64:32:28:38:71:45:40:d4:
                    1c:22:a9:e1:a8:8b:dc:c3:06:81:a8:3c:83:46:19:
                    63:35:9f:5e:67:76:f5:22:9c:fc:31:fc:1b:cb:b0:
                    d6:36:3a:4d:4c:69:3e:f5:a5:29:12:06:93:5a:99:
                    f3:18:a7:e6:95:af:ec:3b:ee:f8:c9:c8:e8:2c:ce:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CA:78:8C:E2:96:73:92:C8:33:69:0B:78:02:BC:F1:91:A2:67:C0
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137322e302f32332d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:9b:24:a9:9a:82:0c:ed:a5:c3:57:f1:38:af:0b:01:08:
         b7:c7:71:a8:bb:c2:5f:83:b6:2d:79:5f:05:5e:0b:6f:29:92:
         cd:fa:39:4d:9b:97:7d:4f:f4:e1:5e:7f:e9:38:54:e9:4d:b9:
         c0:de:4e:6b:f8:07:b4:ee:32:d7:95:2d:1b:77:ea:b3:f0:74:
         8e:d4:d3:81:be:ad:a3:c9:05:be:a6:74:c2:3f:b4:3d:d4:32:
         84:81:c5:21:30:e7:56:68:c9:e2:9c:03:d8:f4:5c:da:98:75:
         66:d2:30:8f:e3:a8:f0:c7:a8:8e:e1:8e:e2:f1:d3:0e:20:d4:
         5d:52:92:a5:fa:9f:39:75:bc:46:0d:f3:1b:07:a4:c6:ea:69:
         8b:c8:ff:17:6a:50:69:62:c1:38:22:ea:c9:16:c4:34:24:bc:
         e9:dd:a9:03:09:9f:30:0b:ea:c5:a5:af:64:ab:bf:38:06:69:
         fc:25:a6:e3:3c:16:ce:02:34:74:b6:e1:23:73:f1:1f:e0:ce:
         a0:80:e5:7b:bd:15:47:62:59:a1:98:c8:a4:b6:f5:5d:43:88:
         d4:32:19:f4:3e:2c:45:5b:e2:28:65:5b:7b:c5:3b:ca:1f:f1:
         70:eb:64:7c:c6:d8:96:46:3c:17:03:c8:5b:33:18:15:c5:17:
         69:c0:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:53:46 2026 by rpki-client