This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa
File:                     3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa (raw, json)
Hash identifier:          GPwFgqfQpN0fd0HUgFc0fgTAxGCcZ0C5Iihv9nrtMbQ=
Subject key identifier:   19:C5:6A:F6:82:BB:0C:56:C3:9D:C9:ED:2D:4E:E9:8B:4C:7E:87:F5
Certificate issuer:       /CN=4538D7686904F5F08B68B3D1367B00E808A7CD76
Certificate serial:       71D44ECFD53DDE324C56F051A21A0954B3B94E54
Authority key identifier: 45:38:D7:68:69:04:F5:F0:8B:68:B3:D1:36:7B:00:E8:08:A7:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa
Signing time:             Tue 06 Jan 2026 19:06:58 +0000
ROA not before:           Tue 06 Jan 2026 19:01:58 +0000
ROA not after:            Tue 05 Jan 2027 19:06:58 +0000
asID:                     271829
IP address blocks:        181.233.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d4:4e:cf:d5:3d:de:32:4c:56:f0:51:a2:1a:09:54:b3:b9:4e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538D7686904F5F08B68B3D1367B00E808A7CD76
        Validity
            Not Before: Jan  6 19:01:58 2026 GMT
            Not After : Jan  5 19:06:58 2027 GMT
        Subject: CN=19C56AF682BB0C56C39DC9ED2D4EE98B4C7E87F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:f7:bd:83:6b:e9:ee:21:a2:b2:09:27:c9:
                    77:3b:eb:54:20:67:1c:f6:2a:c6:86:d7:c8:ca:0a:
                    15:34:da:d1:74:bb:a0:21:2d:b0:bd:cc:a7:20:a4:
                    9e:15:f3:7a:ac:14:fc:ff:7b:e9:d6:46:1b:8a:7b:
                    8e:ca:79:4a:31:9c:37:5d:f3:23:27:52:82:61:9b:
                    d9:7d:32:fb:1e:cb:92:b7:40:97:4f:29:db:64:9c:
                    b9:c1:9f:e6:22:3f:ca:88:1b:a6:2a:48:89:a5:d0:
                    ca:4f:38:7e:8d:ad:8b:0a:6d:1e:e4:19:6c:e8:b6:
                    1f:b9:45:49:ee:eb:d3:1e:05:f1:5b:e2:9d:17:52:
                    bf:84:cf:bc:47:7e:af:a2:52:01:36:9a:6a:9f:5f:
                    9a:37:fa:8d:a9:86:44:07:52:81:a8:d9:e1:b0:0b:
                    1c:9c:73:70:b1:46:d8:25:32:69:e2:52:cf:c5:ac:
                    b7:40:1a:3c:48:1d:e4:eb:1f:a3:71:26:ac:d5:6d:
                    91:d4:a0:05:60:ca:e8:17:56:00:a4:6d:e0:55:13:
                    b0:02:a9:58:55:90:76:fb:93:3c:e1:37:c2:1a:74:
                    31:01:80:7c:97:4d:e1:24:ec:2e:e6:0d:25:ac:27:
                    a6:35:f4:dd:39:b3:d2:d4:dc:c8:a1:31:68:c9:3c:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:6A:F6:82:BB:0C:56:C3:9D:C9:ED:2D:4E:E9:8B:4C:7E:87:F5
            X509v3 Authority Key Identifier:
                keyid:45:38:D7:68:69:04:F5:F0:8B:68:B3:D1:36:7B:00:E8:08:A7:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4538D7686904F5F08B68B3D1367B00E808A7CD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80AE15E0B310CFC64BC95B9B470AA5E600FBAAC96BAF91F4DF595168DE76F423/0/3138312e3233332e3134342e302f32332d3233203d3e20323731383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:17:73:3e:70:5d:f4:35:8e:8d:4c:78:d5:d5:fe:29:fb:ba:
         ef:6c:36:7c:c9:7a:fc:c1:e2:97:08:10:a8:71:a2:47:36:78:
         19:a1:f1:a9:c8:b6:c9:85:7a:5b:96:f5:cd:1f:fc:62:31:77:
         6e:5e:dc:27:f3:04:9b:0f:9b:3f:dc:bf:b2:cf:e3:26:b8:e9:
         1a:6e:a6:8b:ce:43:b7:c2:99:f5:09:0b:4d:ce:33:c8:d2:7d:
         89:83:04:6d:6f:e1:94:d1:d7:7c:8d:e1:a0:74:84:f0:2c:5e:
         4d:a8:0f:c8:38:84:19:b4:b6:03:64:91:74:38:c2:c7:ae:6d:
         04:3a:4c:af:30:5a:57:e6:09:89:af:84:b1:36:5e:aa:76:f4:
         e7:4b:b9:75:d8:95:23:35:84:20:35:6f:f1:b1:0a:45:39:5f:
         0a:bf:95:82:4b:80:2a:2b:75:03:50:8f:b5:65:a5:8b:d3:c1:
         35:2c:71:dd:25:52:96:85:fc:1e:ec:30:7d:d0:13:9d:1d:52:
         44:2e:a6:c6:51:31:cb:a0:f4:fb:a0:5b:c5:ea:b8:6d:ed:a9:
         18:45:22:44:2a:07:73:2c:35:e2:22:1c:4b:b9:3c:09:fb:8d:
         4e:87:7d:b3:d0:74:25:c6:e4:cd:3d:aa:e3:e0:48:49:54:97:
         b7:7a:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:17 2026 by rpki-client