This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e31362e302e302f31382d3234203d3e203237393834.roa
File:                     3138312e31362e302e302f31382d3234203d3e203237393834.roa (raw, json)
Hash identifier:          pfT8nqf6gC+mXNQ36/cXmj9mSsRZ39lJj1TGdeQ0+2E=
Subject key identifier:   46:F8:DD:19:22:AD:99:83:39:95:3C:6D:2A:DE:31:EE:73:52:C6:85
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       400A044B372B8A3CC144AD99D29099AE51EC3E97
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e31362e302e302f31382d3234203d3e203237393834.roa
Signing time:             Tue 06 Jan 2026 19:02:49 +0000
ROA not before:           Tue 06 Jan 2026 18:57:49 +0000
ROA not after:            Tue 05 Jan 2027 19:02:49 +0000
asID:                     27984
IP address blocks:        181.16.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:04:4b:37:2b:8a:3c:c1:44:ad:99:d2:90:99:ae:51:ec:3e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Jan  6 18:57:49 2026 GMT
            Not After : Jan  5 19:02:49 2027 GMT
        Subject: CN=46F8DD1922AD998339953C6D2ADE31EE7352C685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:5b:58:79:4f:ff:1d:8f:28:df:76:2a:25:
                    38:b3:15:11:73:e4:ec:00:3a:7a:4a:6d:8f:91:66:
                    de:0f:cb:d1:5d:c3:8d:1b:6b:aa:d1:55:85:b5:d1:
                    a9:f5:fe:2a:2c:d1:b6:ed:4f:54:35:9a:61:dc:e4:
                    17:40:f9:e2:a3:c5:8c:d9:7a:0b:f4:36:85:a1:9b:
                    9a:82:dc:80:fd:38:d0:2b:de:26:be:b9:bf:e3:68:
                    17:fc:f3:c5:9c:ca:5a:6f:8b:2d:b1:48:2d:b3:ed:
                    25:3a:98:3c:3c:74:e3:f5:84:23:e8:ab:ef:69:2b:
                    cf:6b:27:e8:4e:6c:bd:ce:11:27:2c:82:77:bf:70:
                    17:ce:fc:ed:77:49:ad:d9:3a:be:50:1d:4f:fb:77:
                    d2:d1:df:f1:96:1e:74:87:f4:fe:c0:5e:ba:f5:6d:
                    25:cf:15:d9:5e:7d:1d:0a:65:61:3d:f5:10:5f:63:
                    82:6a:ae:17:46:b8:bf:0d:49:4d:bb:14:48:a4:d4:
                    5e:ea:e1:2f:69:08:c7:e1:05:3c:ef:c2:cf:89:30:
                    08:a5:4d:23:c3:1d:f5:6f:dd:33:12:31:10:82:51:
                    6e:c8:92:25:3d:d0:88:16:dd:08:00:aa:b3:fd:2f:
                    c6:0c:d8:3e:2a:ed:94:59:ce:61:e8:24:1d:66:92:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:DD:19:22:AD:99:83:39:95:3C:6D:2A:DE:31:EE:73:52:C6:85
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3138312e31362e302e302f31382d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:08:84:04:83:a1:63:2d:70:43:11:c1:83:6e:eb:b7:63:
         28:4e:85:99:02:79:fe:ee:3a:77:49:0a:73:c5:82:e3:f9:b9:
         f0:24:4d:49:e3:7b:17:c4:7c:11:29:b0:ff:2f:d4:d7:64:17:
         83:14:31:9d:8f:0f:9a:32:69:b9:d8:ce:30:27:97:5d:8b:5b:
         a8:3d:18:21:1f:28:d8:89:9e:87:2b:69:9f:05:4d:ed:a9:bc:
         27:92:0d:7a:0f:83:3a:63:ea:22:a7:de:95:2c:af:b4:c1:d4:
         2a:d8:72:cc:47:39:e1:1c:60:ac:94:ef:d3:c4:46:66:8a:d2:
         ee:f1:56:b6:0a:da:4a:da:5d:6c:38:cc:6b:f0:67:97:a5:11:
         31:46:0c:80:ac:9a:4b:7c:3c:4d:98:87:81:ea:4e:4d:d7:6e:
         8d:b4:86:3c:4c:9c:3f:1f:0e:c7:6c:36:8e:8f:22:52:c8:87:
         2b:80:f8:57:b2:7e:b0:2f:01:c2:97:82:78:29:2d:34:78:cb:
         53:25:68:eb:a8:9f:79:f3:e8:89:e3:a3:b1:c7:4a:39:f9:94:
         04:96:30:d3:b2:34:32:3b:cc:1d:ad:c7:ca:bd:01:b7:48:91:
         2d:25:ec:03:0d:f5:1f:44:00:34:ff:81:87:14:75:f6:9b:56:
         c1:05:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:19 2026 by rpki-client