This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/3138312e3138392e31362e302f32342d3234203d3e20323637383332.roa
File:                     3138312e3138392e31362e302f32342d3234203d3e20323637383332.roa (raw, json)
Hash identifier:          f7BsIew9WQ/u/VTwg+gofPlLi8/MVpJJPshh/yQ5zSw=
Subject key identifier:   55:7C:4C:B2:EB:8F:2E:71:4D:7E:F1:13:46:01:49:F6:25:24:39:A4
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       7BDD099951279640D3A65A15298026ABF1ACA720
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/3138312e3138392e31362e302f32342d3234203d3e20323637383332.roa
Signing time:             Fri 07 Nov 2025 14:50:08 +0000
ROA not before:           Fri 07 Nov 2025 14:45:08 +0000
ROA not after:            Fri 06 Nov 2026 14:50:08 +0000
asID:                     267832
IP address blocks:        181.189.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 11:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dd:09:99:51:27:96:40:d3:a6:5a:15:29:80:26:ab:f1:ac:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Nov  7 14:45:08 2025 GMT
            Not After : Nov  6 14:50:08 2026 GMT
        Subject: CN=557C4CB2EB8F2E714D7EF113460149F6252439A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:12:4d:e8:59:eb:76:fd:47:d6:cf:f1:63:
                    21:0e:f9:1d:80:40:3e:5e:d3:5f:19:4c:b9:3b:f1:
                    cb:24:97:3a:64:aa:64:e5:18:05:26:8f:82:40:90:
                    b1:11:dc:81:a9:51:49:df:cc:36:c5:2a:97:ab:fd:
                    f3:15:69:ac:e5:09:84:44:33:d3:63:27:b0:7e:69:
                    4e:b7:41:07:65:40:01:2d:29:ad:04:f2:39:64:8c:
                    f8:0b:d2:d1:8b:44:4f:26:b7:bd:2a:af:9c:26:06:
                    41:4b:39:45:82:6f:5c:2d:65:00:7e:46:05:7d:ba:
                    40:b1:be:ff:94:b1:b7:5e:75:e5:30:fd:b9:63:45:
                    22:93:eb:77:2a:a0:b5:4c:42:bc:50:0a:65:6c:07:
                    16:77:e0:f8:c3:85:fc:3e:5c:e4:c9:ae:01:49:19:
                    37:b7:8c:07:1e:e8:26:80:a2:95:e6:0a:f9:99:5a:
                    b8:c5:ad:06:a6:33:08:23:b0:3f:34:75:30:c3:7e:
                    79:5b:10:ff:89:6e:7c:45:6d:1c:0c:45:73:94:bc:
                    74:97:9e:ba:51:94:cb:a9:17:e0:cd:34:08:86:50:
                    4c:52:b6:c0:b8:da:d2:39:46:67:7b:a6:d0:68:f0:
                    ca:bd:95:d6:a5:9a:c6:b0:3b:a3:87:b9:1c:df:eb:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7C:4C:B2:EB:8F:2E:71:4D:7E:F1:13:46:01:49:F6:25:24:39:A4
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/3138312e3138392e31362e302f32342d3234203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:1a:61:5e:67:d8:25:fe:a7:04:5c:19:50:fe:59:e4:ee:
         2a:b9:37:b3:eb:ef:d3:49:17:e5:99:27:4b:2e:81:be:8f:9e:
         5c:48:b4:bb:fe:f6:6c:4b:90:6f:47:6c:08:33:25:2b:9e:0e:
         e3:da:97:ce:7b:f4:fa:2c:04:42:4e:fd:50:0a:23:cb:f4:6a:
         93:f6:e9:e9:0d:7f:05:a1:64:6e:85:e4:b8:f8:16:2d:0a:77:
         fd:fd:c3:5d:7e:f7:00:ca:63:69:fc:e9:7a:86:15:a3:55:2c:
         a6:19:98:6d:6d:31:e6:6e:75:91:be:bb:bb:12:36:4a:8c:ff:
         fd:c6:c0:51:66:49:b6:2b:37:f5:f7:21:73:06:8c:ae:d2:ec:
         9c:a7:97:4f:df:d0:86:cb:18:10:92:d8:2e:7b:b9:cf:23:be:
         90:1c:75:e6:54:78:6a:b5:9f:17:7a:12:36:f1:3d:eb:05:1e:
         2f:04:a7:42:ca:58:ad:cd:d8:a7:b3:43:96:48:ce:ca:0a:6b:
         47:21:f9:5c:cf:77:61:60:f1:e5:22:76:44:06:6f:b8:93:31:
         6f:53:0d:20:e9:e8:2f:29:ec:40:7b:03:01:e1:3c:be:a8:24:
         00:f1:49:0d:c0:6f:5b:19:bb:03:50:ce:9a:eb:ef:d6:c5:9b:
         2f:a7:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:31:11 2025 by rpki-client