This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS28011.roa
File:                     AS28011.roa (raw, json)
Hash identifier:          PeKkWpXIbJ4HR/so5kuN2q0anz12pwKLbkxNZc7Iidc=
Subject key identifier:   98:A9:ED:32:F2:12:4B:DB:5C:55:D6:1F:DF:C6:16:C6:DF:73:38:5A
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       38DB7979C5460572E5907E5627441424D64C973A
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS28011.roa
Signing time:             Tue 06 Jan 2026 19:37:30 +0000
ROA not before:           Tue 06 Jan 2026 19:32:30 +0000
ROA not after:            Tue 05 Jan 2027 19:37:30 +0000
asID:                     28011
IP address blocks:        181.112.0.0/21 maxlen: 24
                          181.112.16.0/21 maxlen: 24
                          181.112.24.0/21 maxlen: 24
                          181.112.96.0/21 maxlen: 24
                          181.112.112.0/21 maxlen: 21
                          181.112.128.0/21 maxlen: 24
                          181.113.72.0/21 maxlen: 24
                          181.113.80.0/21 maxlen: 24
                          181.113.88.0/21 maxlen: 24
                          181.113.160.0/20 maxlen: 24
                          181.113.176.0/21 maxlen: 24
                          181.113.184.0/21 maxlen: 24
                          181.113.208.0/21 maxlen: 24
                          181.196.32.0/21 maxlen: 24
                          181.196.64.0/21 maxlen: 24
                          181.196.168.0/21 maxlen: 24
                          181.196.208.0/20 maxlen: 24
                          181.211.16.0/21 maxlen: 24
                          181.211.24.0/21 maxlen: 24
                          181.211.64.0/21 maxlen: 24
                          181.211.72.0/21 maxlen: 24
                          181.211.88.0/21 maxlen: 24
                          181.211.116.0/22 maxlen: 24
                          181.211.120.0/21 maxlen: 24
                          181.211.136.0/21 maxlen: 24
                          181.211.152.0/21 maxlen: 24
                          181.211.168.0/21 maxlen: 24
                          181.211.192.0/21 maxlen: 24
                          181.211.224.0/21 maxlen: 24
                          181.211.232.0/21 maxlen: 24
                          186.42.116.0/24 maxlen: 24
                          186.42.236.0/22 maxlen: 24
                          186.47.168.0/21 maxlen: 24
                          186.47.216.0/21 maxlen: 24
                          186.47.248.0/21 maxlen: 24
                          186.178.13.0/24 maxlen: 24
                          186.178.14.0/24 maxlen: 24
                          186.178.24.0/21 maxlen: 24
                          186.178.56.0/21 maxlen: 24
                          186.178.72.0/21 maxlen: 24
                          186.178.104.0/21 maxlen: 24
                          186.178.172.0/22 maxlen: 24
                          186.178.176.0/21 maxlen: 24
                          186.178.184.0/21 maxlen: 24
                          190.11.10.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.152.40.0/24 maxlen: 24
                          190.152.41.0/24 maxlen: 24
                          190.152.44.0/24 maxlen: 24
                          190.152.45.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.47.0/24 maxlen: 24
                          190.152.48.0/23 maxlen: 24
                          190.152.50.0/23 maxlen: 24
                          190.152.52.0/24 maxlen: 24
                          190.152.56.0/22 maxlen: 24
                          190.152.132.0/22 maxlen: 24
                          190.152.136.0/21 maxlen: 24
                          190.152.152.0/24 maxlen: 24
                          190.152.192.0/24 maxlen: 24
                          190.152.240.0/22 maxlen: 24
                          190.152.252.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.214.64.0/21 maxlen: 24
                          190.214.88.0/21 maxlen: 24
                          190.214.112.0/22 maxlen: 24
                          190.214.116.0/22 maxlen: 24
                          190.214.152.0/21 maxlen: 24
                          190.214.168.0/22 maxlen: 24
                          190.214.172.0/22 maxlen: 24
                          190.214.192.0/21 maxlen: 24
                          190.214.200.0/21 maxlen: 24
                          190.214.224.0/21 maxlen: 24
                          200.73.204.0/22 maxlen: 24
                          200.107.11.0/24 maxlen: 24
                          200.107.26.0/23 maxlen: 24
                          200.107.32.0/23 maxlen: 24
                          200.107.40.0/21 maxlen: 24
                          200.107.53.0/24 maxlen: 24
                          200.125.203.0/24 maxlen: 24
                          200.125.208.0/24 maxlen: 24
                          200.125.240.0/23 maxlen: 24
                          200.125.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:db:79:79:c5:46:05:72:e5:90:7e:56:27:44:14:24:d6:4c:97:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Jan  6 19:32:30 2026 GMT
            Not After : Jan  5 19:37:30 2027 GMT
        Subject: CN=98A9ED32F2124BDB5C55D61FDFC616C6DF73385A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:bd:6d:6d:04:29:0f:00:d3:6f:a8:0c:59:
                    bb:ca:5b:03:62:0f:33:5e:6a:1e:02:9a:dc:97:f3:
                    25:8a:d8:68:d3:db:d8:b7:1d:76:29:ed:09:c5:98:
                    c9:3c:56:72:48:67:2b:c6:a7:61:83:7f:86:ef:cd:
                    a7:19:e1:31:4e:72:28:21:cc:27:4d:58:40:68:70:
                    13:43:fa:a3:96:c2:b8:b5:76:9e:8c:39:5f:15:9f:
                    60:f3:ef:9e:e0:ee:72:86:a9:9c:6b:8d:45:e4:c7:
                    cb:a7:fd:e5:45:20:43:05:9f:1c:ab:54:24:77:79:
                    c8:a2:28:49:69:b9:18:b3:92:ff:78:14:34:06:24:
                    e4:e2:2d:b6:2a:36:a9:4f:46:19:1d:11:45:44:8d:
                    56:55:09:2a:72:d5:e1:4d:08:6b:d5:51:21:2c:51:
                    3d:51:72:a3:c1:8d:ac:03:d0:8a:46:c3:48:7d:cb:
                    cd:5b:d7:55:25:14:76:ab:b2:98:41:5d:43:a0:30:
                    1f:36:3a:cd:d7:8b:88:3f:38:32:77:c4:7c:3a:66:
                    a9:c9:db:52:2a:8c:a0:b9:68:86:68:e1:cd:b1:cd:
                    c1:71:32:b2:00:5f:e6:7a:69:7f:cd:e9:67:f7:77:
                    9a:a3:26:04:ec:5b:44:3c:8d:e7:03:d6:57:41:96:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A9:ED:32:F2:12:4B:DB:5C:55:D6:1F:DF:C6:16:C6:DF:73:38:5A
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS28011.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.0.0/21
                  181.112.16.0/20
                  181.112.96.0/21
                  181.112.112.0/21
                  181.112.128.0/21
                  181.113.72.0-181.113.95.255
                  181.113.160.0/19
                  181.113.208.0/21
                  181.196.32.0/21
                  181.196.64.0/21
                  181.196.168.0/21
                  181.196.208.0/20
                  181.211.16.0/20
                  181.211.64.0/20
                  181.211.88.0/21
                  181.211.116.0-181.211.127.255
                  181.211.136.0/21
                  181.211.152.0/21
                  181.211.168.0/21
                  181.211.192.0/21
                  181.211.224.0/20
                  186.42.116.0/24
                  186.42.236.0/22
                  186.47.168.0/21
                  186.47.216.0/21
                  186.47.248.0/21
                  186.178.13.0-186.178.14.255
                  186.178.24.0/21
                  186.178.56.0/21
                  186.178.72.0/21
                  186.178.104.0/21
                  186.178.172.0-186.178.191.255
                  190.11.10.0/24
                  190.11.20.0/24
                  190.152.40.0/23
                  190.152.44.0-190.152.52.255
                  190.152.56.0/22
                  190.152.132.0-190.152.143.255
                  190.152.152.0/24
                  190.152.192.0/24
                  190.152.240.0/22
                  190.152.252.0/24
                  190.152.254.0/24
                  190.214.64.0/21
                  190.214.88.0/21
                  190.214.112.0/21
                  190.214.152.0/21
                  190.214.168.0/21
                  190.214.192.0/20
                  190.214.224.0/21
                  200.73.204.0/22
                  200.107.11.0/24
                  200.107.26.0/23
                  200.107.32.0/23
                  200.107.40.0/21
                  200.107.53.0/24
                  200.125.203.0/24
                  200.125.208.0/24
                  200.125.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:55:81:ff:6c:86:ff:94:24:ea:77:c9:48:af:f6:3c:f8:96:
         82:48:b4:2e:71:69:59:45:64:70:f3:5e:84:99:85:16:67:80:
         7e:6b:98:4c:f3:20:0d:38:7d:19:19:aa:34:0d:b8:da:53:a0:
         fb:c6:67:31:d3:35:87:26:d0:f2:e6:bd:e5:84:5d:a8:74:4f:
         b4:a9:cf:77:e5:63:04:59:90:ab:ed:d6:cc:1f:af:4c:bb:17:
         e9:0e:d5:e9:75:3b:09:07:27:02:cc:9f:59:ed:3b:b6:04:8b:
         90:45:f1:8f:40:79:90:84:a8:e1:1c:43:ed:35:7d:17:36:db:
         7d:d3:35:3c:c0:a5:07:32:40:80:91:7f:01:7d:99:4c:54:ea:
         d5:f8:03:d9:6e:11:76:23:27:d0:26:18:f0:6e:a1:96:f1:7f:
         41:31:8d:df:77:d8:03:81:22:49:95:e2:2b:3b:5e:7c:82:fe:
         83:80:fe:0e:49:80:b3:88:a5:e8:fe:6e:41:24:8d:1b:b3:95:
         4b:01:f2:7e:8c:3a:c6:ae:da:3c:2c:ae:d7:0c:20:67:b2:9c:
         ba:fd:b6:42:9f:9f:79:5b:b2:11:44:b6:3f:e8:d2:68:2f:9e:
         5f:8b:3c:51:c6:09:83:5d:12:7b:45:b0:d6:55:77:9d:15:4b:
         49:76:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:45:18 2026 by rpki-client