This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36382e302f32342d3332203d3e20323733383534.roa
File:                     3138312e3130332e36382e302f32342d3332203d3e20323733383534.roa (raw, json)
Hash identifier:          KLibndJisWWSGu9T2QlmHNwMupSWbDHOvNm5JzJqL64=
Subject key identifier:   3E:CA:D3:86:CA:FE:17:09:17:A5:22:90:C7:84:D0:96:B8:83:74:3D
Certificate issuer:       /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial:       3135B300DCDCF9E28DFA23DFBFECAA8C0C914D7D
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36382e302f32342d3332203d3e20323733383534.roa
Signing time:             Mon 10 Nov 2025 14:52:09 +0000
ROA not before:           Mon 10 Nov 2025 14:47:09 +0000
ROA not after:            Mon 09 Nov 2026 14:52:09 +0000
asID:                     273854
IP address blocks:        181.103.68.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:35:b3:00:dc:dc:f9:e2:8d:fa:23:df:bf:ec:aa:8c:0c:91:4d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
        Validity
            Not Before: Nov 10 14:47:09 2025 GMT
            Not After : Nov  9 14:52:09 2026 GMT
        Subject: CN=3ECAD386CAFE170917A52290C784D096B883743D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:dc:ce:ea:8c:89:0f:32:de:9f:a8:47:ea:
                    2b:44:3c:02:83:09:a3:d4:55:6f:2a:f8:61:4b:65:
                    83:93:a7:d3:89:b6:bb:cd:f7:22:4a:d6:50:cf:e1:
                    e1:b4:36:88:57:99:f1:2a:14:bc:e3:be:20:30:ec:
                    99:bb:d8:c5:8c:32:ff:2e:1d:41:5e:27:02:88:fc:
                    38:00:7d:d5:9f:a0:e4:fc:ef:af:e9:d7:48:1a:aa:
                    e6:81:9e:8d:f1:74:75:80:f8:2f:32:49:53:26:9f:
                    ac:ea:0f:50:ba:46:ee:5a:e8:2b:71:2f:0f:c0:ce:
                    4c:29:f6:e5:45:1f:dd:dd:43:c9:4c:f1:67:12:78:
                    7c:6a:0c:53:fb:45:ac:f5:7b:8a:ae:89:c0:7b:2c:
                    19:08:3f:82:ac:d1:41:d7:6f:2a:6d:7a:2c:50:c5:
                    7f:a8:58:eb:54:09:b3:e1:c8:25:ac:69:65:fc:a6:
                    d0:88:3f:e8:6c:31:3f:d2:34:7f:a9:3d:c6:52:ab:
                    07:cf:44:81:94:7c:42:9e:90:f0:02:97:d1:b9:28:
                    d4:3f:81:b7:3f:6f:0d:9f:08:4e:61:53:b1:bb:28:
                    d9:e8:3a:48:45:9a:78:e5:06:6b:ab:11:84:63:45:
                    9a:34:98:4b:e9:cd:2b:4a:f0:f1:86:30:9f:40:1d:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CA:D3:86:CA:FE:17:09:17:A5:22:90:C7:84:D0:96:B8:83:74:3D
            X509v3 Authority Key Identifier:
                keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36382e302f32342d3332203d3e20323733383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.103.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:d4:9f:40:b9:8c:c1:a8:72:43:43:1f:71:6b:1f:23:e2:
         80:9e:17:2e:fd:86:9c:81:85:24:7f:89:95:ec:f4:da:62:65:
         57:6d:19:5a:5c:7d:ca:e8:e7:9f:84:ea:0f:ba:f4:41:dd:54:
         7a:6e:e7:27:71:86:fb:e0:d9:ab:8c:b3:8c:bf:48:1a:47:fd:
         91:f8:3d:a9:e1:02:2f:0f:78:53:d5:38:54:63:0e:4d:85:61:
         1c:11:c1:f6:32:91:d8:65:e2:39:4c:51:64:ae:03:7a:d7:ca:
         3c:f3:0c:db:93:82:44:63:90:02:f2:dc:a0:39:ea:a7:c7:5c:
         f3:2e:bb:23:6e:98:41:6f:b9:7b:21:0f:cc:ff:5c:36:1e:78:
         50:8b:a3:35:fd:33:48:63:7e:80:5f:74:e8:0f:97:34:e1:82:
         17:3a:f2:73:e5:37:01:39:cf:e4:c0:61:3c:2a:e5:bb:ee:6a:
         59:01:c0:c2:34:dd:80:3a:8c:e3:56:51:68:b7:e0:76:e3:76:
         1f:82:55:cf:30:68:53:ae:d5:02:13:42:91:15:1c:4c:f2:85:
         da:52:62:c9:05:e0:f2:54:23:55:68:6e:29:77:cb:2f:51:f2:
         8e:23:01:09:c8:49:29:dc:1d:7a:24:4d:da:a4:ae:fa:c9:80:
         21:02:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:22:05 2025 by rpki-client