This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3233382e302f32342d3234203d3e203532323836.roa
File:                     3138312e3138392e3233382e302f32342d3234203d3e203532323836.roa (raw, json)
Hash identifier:          ti9bMgLqXrndyc2OBJyN8KsnA1vAtwBeLw2mZv0/nYg=
Subject key identifier:   B8:C9:33:8A:CE:BB:E7:D0:41:9E:D0:23:16:A5:C9:CE:B1:D0:F5:77
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       3BD488C9FBC9F63EC31B9DF8A259C9DD8441F09F
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3233382e302f32342d3234203d3e203532323836.roa
Signing time:             Mon 12 Jan 2026 16:59:57 +0000
ROA not before:           Mon 12 Jan 2026 16:54:57 +0000
ROA not after:            Mon 11 Jan 2027 16:59:57 +0000
asID:                     52286
IP address blocks:        181.189.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d4:88:c9:fb:c9:f6:3e:c3:1b:9d:f8:a2:59:c9:dd:84:41:f0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Jan 12 16:54:57 2026 GMT
            Not After : Jan 11 16:59:57 2027 GMT
        Subject: CN=B8C9338ACEBBE7D0419ED02316A5C9CEB1D0F577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:df:20:bc:64:8b:0d:62:c4:43:dd:29:a6:
                    b9:59:f9:cf:f2:6d:a8:6e:b5:41:86:fc:1a:f2:07:
                    40:9d:2b:7d:6e:f6:39:a8:ed:a1:90:25:f6:5b:b4:
                    5e:14:7c:33:5d:ae:6e:c4:aa:38:b4:fc:5b:ce:f2:
                    88:24:11:d9:3d:f0:21:40:fe:7b:d1:4d:22:4f:39:
                    6d:49:ec:ad:12:18:c5:5e:f0:f1:93:1a:66:13:c3:
                    18:4f:c5:ed:75:bc:42:e2:74:f9:d2:f3:ee:d2:eb:
                    81:77:e0:a5:20:9e:ba:5e:6e:51:11:e5:cf:07:ea:
                    f4:24:c5:36:07:71:77:58:b5:8f:99:45:b1:9f:20:
                    84:b7:bb:3f:a8:4a:76:3c:e1:58:64:2c:92:9b:34:
                    ae:65:76:8e:82:73:c0:78:42:19:05:a6:db:e3:7d:
                    0c:00:d4:f2:fa:ee:0a:4a:c3:64:c4:f8:b8:dc:91:
                    b1:b4:3f:6f:e2:ed:4b:21:69:07:a6:c4:58:e2:49:
                    66:19:19:33:e8:2e:44:74:fd:d0:54:b0:ec:e8:78:
                    33:de:c4:fb:98:cf:ec:9d:7d:5e:b4:c5:81:e6:30:
                    cb:8e:1b:66:bf:f6:43:e8:80:1a:53:01:f0:ca:97:
                    d8:22:0e:6b:cd:d9:38:30:ce:be:95:96:df:fd:87:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C9:33:8A:CE:BB:E7:D0:41:9E:D0:23:16:A5:C9:CE:B1:D0:F5:77
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3233382e302f32342d3234203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:8a:67:4f:ba:4d:a7:16:d5:65:a3:de:0b:95:46:dc:0e:
         3b:80:63:d8:8a:c2:71:c8:25:eb:0d:eb:e8:32:c2:4c:c2:22:
         95:a5:73:0f:eb:f7:9a:07:d2:99:95:67:06:c7:5f:27:d9:9d:
         fc:a0:45:a7:50:99:61:68:6d:1a:b6:37:41:26:dc:fe:fe:df:
         7c:61:bb:e6:85:a5:be:c4:f8:ff:e4:34:b0:23:b5:cc:cb:94:
         37:45:d2:97:9f:d5:d3:48:55:e2:11:be:2c:1e:fd:7b:d6:20:
         4d:24:4d:50:40:23:70:99:ab:74:55:cb:8e:44:a3:f6:9e:a1:
         ad:e4:fc:b2:a6:d0:cf:bf:e7:3c:2c:be:3e:f2:77:ff:16:8e:
         23:66:1a:d7:18:7d:03:25:17:be:00:48:d9:cc:9a:6a:b0:92:
         4e:99:c4:99:49:55:5a:ee:d0:04:9d:51:f0:c9:31:39:98:03:
         26:07:76:7e:59:4f:36:a5:06:e7:ec:82:f9:d6:78:93:6d:7d:
         57:ea:c3:89:df:65:8b:8f:51:b9:e6:6a:37:b8:ae:45:57:92:
         d7:f0:40:83:5b:96:93:10:03:95:86:dc:d8:6c:1b:3d:8c:fa:
         48:51:86:e6:e9:f2:25:53:18:dd:72:df:c8:4c:14:42:be:a5:
         02:68:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:23:09 2026 by rpki-client