This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa
File:                     3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa (raw, json)
Hash identifier:          myZ3QiGD5CedJIxyEKez4w+aVQLqbflJL3K48IYKhX8=
Subject key identifier:   AA:A6:E2:C7:80:00:98:86:5E:EF:E6:FA:89:41:B9:21:01:08:52:59
Certificate issuer:       /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial:       2D5C665F643651ECD9AC3689E4FF5453E24988BE
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa
Signing time:             Mon 10 Nov 2025 14:52:09 +0000
ROA not before:           Mon 10 Nov 2025 14:47:09 +0000
ROA not after:            Mon 09 Nov 2026 14:52:09 +0000
asID:                     273854
IP address blocks:        181.103.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5c:66:5f:64:36:51:ec:d9:ac:36:89:e4:ff:54:53:e2:49:88:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
        Validity
            Not Before: Nov 10 14:47:09 2025 GMT
            Not After : Nov  9 14:52:09 2026 GMT
        Subject: CN=AAA6E2C7800098865EEFE6FA8941B92101085259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:8b:88:72:65:e1:b1:78:f0:37:e7:45:72:
                    c3:48:65:f5:5e:c5:19:b9:b2:8f:e5:b3:0d:dc:8f:
                    cd:c7:9e:84:cc:89:b1:7c:bf:bb:39:d7:93:60:67:
                    85:4d:2e:b0:2e:1d:60:bd:60:c4:18:24:3b:e8:ee:
                    36:61:71:1f:cd:2a:0c:c7:a3:54:9d:b5:c8:29:03:
                    e6:dd:1c:af:de:6f:c2:8c:a7:67:ab:71:91:8c:9b:
                    cd:17:d0:f3:13:3a:03:1f:de:6f:c7:5f:18:ec:a6:
                    54:ad:eb:6c:af:8f:c6:ca:95:01:59:5f:77:27:58:
                    ea:d0:77:1e:63:47:49:90:78:a7:c6:15:49:63:bb:
                    9f:9c:ca:df:41:8d:80:4a:72:1b:e2:bc:91:28:07:
                    3e:62:d2:ec:74:3b:fc:23:04:fb:29:d8:62:c6:0c:
                    de:0e:e0:0f:a3:67:a2:63:c9:e2:38:d8:ef:61:95:
                    b8:e9:41:74:70:88:62:4b:b2:6d:b5:e5:73:f5:3e:
                    88:5c:8c:a0:2e:c5:27:fe:72:87:3a:76:3e:12:14:
                    67:40:61:29:54:9e:47:6d:49:d6:a2:32:cc:53:9a:
                    fa:26:a0:55:8c:56:a1:00:a5:bb:06:19:84:3b:a3:
                    9c:84:32:08:e4:a0:e9:4e:37:1e:9c:91:d9:a9:81:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:E2:C7:80:00:98:86:5E:EF:E6:FA:89:41:B9:21:01:08:52:59
            X509v3 Authority Key Identifier:
                keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.103.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:62:9e:a5:a6:8e:4b:83:90:45:60:08:4a:70:a8:b3:31:
         a8:15:0b:fa:6d:68:4f:74:93:54:95:c7:b4:c2:b3:47:ae:ff:
         8f:5d:1f:76:33:e5:23:a0:69:6d:94:87:bb:d9:60:19:19:34:
         71:f7:8a:48:9e:93:e3:57:aa:72:17:f1:80:f6:6e:fb:fc:af:
         6c:34:5f:05:b4:37:2d:9d:e0:9a:3b:e5:e5:30:6a:b5:a3:a7:
         9b:dc:3a:0c:0c:17:68:d0:09:45:62:f5:09:76:85:68:09:b6:
         fc:6b:45:43:e5:a4:1b:e7:cd:e6:3e:29:ea:cc:d8:27:30:7b:
         e8:ba:3d:86:b3:1e:ab:b6:28:3e:ae:96:f8:35:ca:22:be:e2:
         97:6a:6d:01:e4:26:ee:ee:ef:0f:ce:d3:8b:f8:b2:f0:8b:14:
         c4:03:e3:38:08:7b:27:c5:dd:38:a5:00:32:53:38:a2:aa:a2:
         e1:77:04:da:fb:62:de:ae:d1:cb:2c:0f:f2:36:58:3f:9d:fa:
         03:d7:69:1f:69:9b:46:45:52:d4:c9:10:75:b1:a0:53:33:0b:
         80:47:e8:7a:a6:c2:95:eb:c5:1c:87:68:07:45:24:37:50:ea:
         15:35:27:c6:68:4c:45:d6:f9:96:d2:f7:48:24:2a:78:d0:9e:
         77:cc:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:22:19 2025 by rpki-client