This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134312e302f32342d3234203d3e20323639383531.roa
File:                     3138312e3139312e3134312e302f32342d3234203d3e20323639383531.roa (raw, json)
Hash identifier:          GXUohvOz+ACD235yMzgHB3ew8zfn4i7iQ8TVgHo0jvM=
Subject key identifier:   21:FB:F2:87:72:97:66:18:73:38:E8:E6:0B:4C:04:A7:E9:8E:40:C9
Certificate issuer:       /CN=8DA187B6784AB92BC5FCB172157C2EAD2698915C
Certificate serial:       0D233B1BEEB3825FF66EA41D269529B0D6A98F1C
Authority key identifier: 8D:A1:87:B6:78:4A:B9:2B:C5:FC:B1:72:15:7C:2E:AD:26:98:91:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134312e302f32342d3234203d3e20323639383531.roa
Signing time:             Sat 27 Dec 2025 12:45:00 +0000
ROA not before:           Sat 27 Dec 2025 12:40:00 +0000
ROA not after:            Sat 26 Dec 2026 12:45:00 +0000
asID:                     269851
IP address blocks:        181.191.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:23:3b:1b:ee:b3:82:5f:f6:6e:a4:1d:26:95:29:b0:d6:a9:8f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA187B6784AB92BC5FCB172157C2EAD2698915C
        Validity
            Not Before: Dec 27 12:40:00 2025 GMT
            Not After : Dec 26 12:45:00 2026 GMT
        Subject: CN=21FBF287729766187338E8E60B4C04A7E98E40C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:42:86:f9:96:fd:74:dc:a8:0e:ae:1d:12:ea:
                    5a:e2:79:fb:1b:9c:5d:48:b2:a7:4f:e4:23:28:38:
                    f3:e0:f7:b9:77:1d:25:15:46:fc:75:30:ee:e5:3f:
                    4c:09:cb:d4:b0:d8:a5:5f:05:55:43:9e:c6:df:3c:
                    3a:da:65:e3:f1:ba:bf:5d:cc:7c:62:68:8e:cf:4b:
                    4f:eb:50:e2:cf:93:90:e7:19:cb:47:bc:be:83:2e:
                    95:b3:77:3e:6b:16:2c:d0:49:fe:25:38:fb:ff:21:
                    59:08:e8:2a:8f:d3:44:01:d9:26:02:bf:7f:94:50:
                    14:75:58:92:a4:e2:eb:e1:b2:04:a5:0a:11:18:c0:
                    36:bf:5c:80:b2:6d:f4:6c:c1:78:0b:1b:17:f4:2f:
                    83:0e:6c:2b:48:c6:31:b0:34:12:4e:1f:ab:2e:81:
                    f9:2a:6f:ae:20:03:1a:98:94:c3:ef:c2:b4:67:b5:
                    9b:8f:47:15:8d:22:54:a3:53:3d:a1:af:04:3e:3b:
                    1e:b0:af:0f:cc:53:45:24:6a:02:7f:2c:ee:01:f5:
                    a6:60:47:df:2c:1a:f5:27:52:5a:ba:8c:4f:d4:27:
                    23:59:20:9f:c4:ce:83:e6:ab:0d:9c:8d:8f:09:bb:
                    4e:3f:dd:c4:11:86:5a:09:58:10:84:d0:e6:b0:78:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:F2:87:72:97:66:18:73:38:E8:E6:0B:4C:04:A7:E9:8E:40:C9
            X509v3 Authority Key Identifier:
                keyid:8D:A1:87:B6:78:4A:B9:2B:C5:FC:B1:72:15:7C:2E:AD:26:98:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134312e302f32342d3234203d3e20323639383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:11:1f:15:a5:e4:13:b1:c6:95:f9:7e:7f:9e:87:b8:db:
         4a:8c:85:78:6c:a4:82:81:dd:77:be:da:85:c0:2c:67:3c:d3:
         a7:49:d0:c8:f0:1a:1c:55:5f:79:01:4b:94:7f:eb:34:99:1b:
         49:eb:8d:8d:33:17:7c:60:e9:d1:e2:a6:5b:8a:d4:56:af:b4:
         15:31:f8:34:e0:13:4a:4e:4d:c2:18:a9:a1:d8:aa:75:4f:20:
         ae:1a:6d:f7:2e:1a:37:0e:ac:d4:20:6a:27:06:44:11:6a:ab:
         ce:52:75:b4:c4:aa:bb:4d:24:af:49:ce:3a:14:a4:83:c8:43:
         79:b9:9a:a5:4a:80:b4:80:46:69:8d:9c:c6:81:10:7c:25:08:
         5c:6e:31:a7:ae:c5:a1:97:d3:ca:e3:c1:15:db:7c:f2:25:64:
         2f:a6:27:8d:66:e3:f2:15:da:1f:b8:c9:91:0f:37:6a:4e:1c:
         36:d2:d7:6f:c6:76:6a:7c:83:f5:3e:34:a5:31:6d:50:36:71:
         9f:b5:fc:d2:cd:25:32:7a:d7:01:27:ea:f8:cb:5d:b4:94:5c:
         91:07:8b:da:f3:2e:60:9d:84:e9:35:3b:b7:92:61:99:d1:e8:
         67:09:af:d2:b3:98:e1:ab:8f:65:15:d6:ca:7f:be:2e:16:e8:
         0f:1d:e6:60
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDSM7G+6zgl/2bqQdJpUpsNapjxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBMTg3QjY3ODRBQjkyQkM1RkNCMTcyMTU3QzJFQUQy
Njk4OTE1QzAeFw0yNTEyMjcxMjQwMDBaFw0yNjEyMjYxMjQ1MDBaMDMxMTAvBgNV
BAMTKDIxRkJGMjg3NzI5NzY2MTg3MzM4RThFNjBCNEMwNEE3RTk4RTQwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Qob5lv103KgOrh0S6lriefsb
nF1IsqdP5CMoOPPg97l3HSUVRvx1MO7lP0wJy9Sw2KVfBVVDnsbfPDraZePxur9d
zHxiaI7PS0/rUOLPk5DnGctHvL6DLpWzdz5rFizQSf4lOPv/IVkI6CqP00QB2SYC
v3+UUBR1WJKk4uvhsgSlChEYwDa/XICybfRswXgLGxf0L4MObCtIxjGwNBJOH6su
gfkqb64gAxqYlMPvwrRntZuPRxWNIlSjUz2hrwQ+Ox6wrw/MU0UkagJ/LO4B9aZg
R98sGvUnUlq6jE/UJyNZIJ/EzoPmqw2cjY8Ju04/3cQRhloJWBCE0OaweHXnAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUIfvyh3KXZhhzOOjmC0wEp+mOQMkwHwYDVR0j
BBgwFoAUjaGHtnhKuSvF/LFyFXwurSaYkVwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OUQxQTM4NTcyQTcxRUVFRUFGQzBFMUJGOTczRDI1RTNB
Q0UwQTU2REJBNkY2MjhDNDE0MzgyMkIxNUI1RDM1LzAvOERBMTg3QjY3ODRBQjky
QkM1RkNCMTcyMTU3QzJFQUQyNjk4OTE1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REExODdCNjc4NEFCOTJCQzVG
Q0IxNzIxNTdDMkVBRDI2OTg5MTVDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDlEMUEzODU3MkE3MUVFRUVBRkMwRTFCRjk3M0QyNUUzQUNFMEE1NkRC
QTZGNjI4QzQxNDM4MjJCMTVCNUQzNS8wLzMxMzgzMTJlMzEzOTMxMmUzMTM0MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzODM1MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
v40wDQYJKoZIhvcNAQELBQADggEBAIq2ER8VpeQTscaV+X5/noe420qMhXhspIKB
3Xe+2oXALGc806dJ0MjwGhxVX3kBS5R/6zSZG0nrjY0zF3xg6dHipluK1FavtBUx
+DTgE0pOTcIYqaHYqnVPIK4abfcuGjcOrNQgaicGRBFqq85SdbTEqrtNJK9JzjoU
pIPIQ3m5mqVKgLSARmmNnMaBEHwlCFxuMaeuxaGX08rjwRXbfPIlZC+mJ41m4/IV
2h+4yZEPN2pOHDbS12/Gdmp8g/U+NKUxbVA2cZ+1/NLNJTJ61wEn6vjLXbSUXJEH
i9rzLmCdhOk1O7eSYZnR6GcJr9KzmOGrj2UV1sp/vi4W6A8d5mA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:02 2026 by rpki-client