This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
File:                     3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa (raw, json)
Hash identifier:          9hjLRQ2A/MJUTb+76twLK3hPAY+bPxpAKYIhN+QlRPY=
Subject key identifier:   64:B7:9E:B9:F3:E3:32:E4:4E:67:D9:C2:99:0B:B5:DE:4D:B8:A8:FC
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       7840B5ACE6B375CF44F9496E8FD973232D2AFAEC
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
Signing time:             Tue 06 Jan 2026 19:24:11 +0000
ROA not before:           Tue 06 Jan 2026 19:19:11 +0000
ROA not after:            Tue 05 Jan 2027 19:24:11 +0000
asID:                     27696
IP address blocks:        181.189.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:b5:ac:e6:b3:75:cf:44:f9:49:6e:8f:d9:73:23:2d:2a:fa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Jan  6 19:19:11 2026 GMT
            Not After : Jan  5 19:24:11 2027 GMT
        Subject: CN=64B79EB9F3E332E44E67D9C2990BB5DE4DB8A8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3d:43:55:57:12:5d:1b:10:87:72:24:4c:95:
                    b4:75:d3:10:6e:87:d2:69:3e:46:80:49:5b:7d:03:
                    7f:26:1a:97:89:f9:57:7f:a6:61:90:94:6f:7e:15:
                    bc:af:82:fc:a1:67:4e:78:29:37:cb:3a:4b:8c:24:
                    b2:69:91:40:e6:18:6b:3c:de:e2:81:b4:29:d0:27:
                    67:06:52:2c:a9:00:60:3a:50:83:b5:77:69:d4:e9:
                    a9:dd:f3:61:9f:5b:a8:20:30:63:b8:2f:af:33:b3:
                    33:c4:3e:72:2c:13:3d:12:4e:03:af:e0:b7:cf:aa:
                    6e:64:d2:ff:ff:c6:94:d2:bf:f3:ec:86:5e:97:3f:
                    ec:cf:83:63:31:89:83:cf:d1:c8:b7:5f:a0:99:ee:
                    69:8b:ab:04:26:24:03:b2:99:70:8f:50:e2:f5:2b:
                    a8:12:23:09:4d:40:78:6a:e6:15:b1:d3:c9:a6:9d:
                    22:2c:9f:dc:46:ea:70:29:1e:79:57:13:52:e5:a5:
                    46:07:f6:61:c2:37:fd:a6:bc:aa:39:cc:46:32:33:
                    45:ee:79:e9:7f:62:08:62:1d:39:5f:86:d8:00:39:
                    da:cf:a3:9c:4c:e1:5a:e6:2a:39:12:20:e0:6c:f0:
                    5d:75:1e:b6:f2:fd:a8:0b:14:1e:e9:d8:70:74:36:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:9E:B9:F3:E3:32:E4:4E:67:D9:C2:99:0B:B5:DE:4D:B8:A8:FC
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:59:ef:4c:d7:87:3e:8b:43:7e:26:cb:6e:2b:58:5a:7b:
         05:73:57:82:ee:cd:63:41:32:b7:ac:34:71:b3:e3:32:8c:8b:
         7d:34:c9:0d:93:1b:f1:ab:26:cb:ce:98:31:59:3b:eb:c8:6c:
         3a:5e:06:91:50:7f:bc:20:a9:20:90:ef:44:ae:cd:c5:48:76:
         5e:86:f0:79:cc:c8:be:9d:45:ee:c4:d6:70:a6:50:47:c1:65:
         6a:06:8a:c7:fc:f8:ea:c7:9b:32:c0:46:c5:43:2a:0b:a5:54:
         99:d7:05:7d:24:33:db:92:14:7b:59:64:00:d6:b2:17:bf:21:
         91:fd:0b:2d:eb:ac:e5:fd:75:47:ee:86:e1:bc:37:4b:43:76:
         b0:12:b7:f1:06:39:77:54:5f:52:3e:49:0b:15:28:1d:7a:47:
         99:89:62:7d:66:30:0b:6f:d2:d5:24:99:da:b8:a1:e2:d0:f7:
         7c:86:db:17:c3:f3:73:67:2e:bb:c0:e5:f8:4e:e1:55:5c:e1:
         9f:be:85:17:fa:70:da:66:48:f7:1c:31:ec:25:de:5c:23:af:
         8c:e0:6b:a6:69:31:b7:50:b8:2c:d7:38:8d:64:c9:2b:d7:72:
         71:ad:26:eb:c5:3b:d5:a4:a9:38:fd:89:87:08:01:fc:19:00:
         78:09:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:07 2026 by rpki-client