This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa
File:                     3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa (raw, json)
Hash identifier:          D4aBUHxBGs0trh1riYNGDgZMWAGtopiVUrebJNpgYJk=
Subject key identifier:   29:AD:16:63:3A:B3:89:78:D4:F8:EB:DF:76:3B:4C:82:8B:CB:2F:FA
Certificate issuer:       /CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
Certificate serial:       65F533B75A37A24F376F878729937AE44235207B
Authority key identifier: 16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa
Signing time:             Tue 06 Jan 2026 19:00:26 +0000
ROA not before:           Tue 06 Jan 2026 18:55:26 +0000
ROA not after:            Tue 05 Jan 2027 19:00:26 +0000
asID:                     52242
IP address blocks:        190.181.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f5:33:b7:5a:37:a2:4f:37:6f:87:87:29:93:7a:e4:42:35:20:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581
        Validity
            Not Before: Jan  6 18:55:26 2026 GMT
            Not After : Jan  5 19:00:26 2027 GMT
        Subject: CN=29AD16633AB38978D4F8EBDF763B4C828BCB2FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:04:f1:e7:43:60:e6:27:72:cc:a2:2d:36:
                    63:17:a9:49:67:e9:f7:4c:75:61:5b:e7:42:75:2a:
                    2f:b1:e0:af:0f:84:0f:19:78:8d:58:60:c8:dd:64:
                    bd:15:08:2e:72:c0:7b:81:db:12:5c:84:e7:2a:47:
                    b8:1c:f0:a1:e1:5f:fe:25:97:01:11:7d:b0:92:41:
                    97:09:5f:33:5e:85:83:09:71:7b:e5:32:20:26:ed:
                    bb:22:97:5e:2d:f9:a4:18:35:a0:c9:6c:e2:57:23:
                    89:2f:12:a0:3b:ce:13:02:98:f0:82:ce:1a:36:e8:
                    94:9b:c1:0c:b3:8c:30:ca:94:51:8b:ba:2a:b6:56:
                    3f:07:9e:14:e4:25:72:8c:57:17:db:f6:c3:71:9c:
                    97:92:45:f6:60:67:9d:6f:fa:5a:1c:d1:4e:e1:9d:
                    51:8a:63:cf:5e:fa:a1:14:e9:82:fe:42:89:6e:d3:
                    d7:c2:e1:23:aa:ba:07:1b:ee:4a:ca:ff:11:94:b8:
                    ee:4a:b8:72:dc:79:b3:70:ff:71:e8:68:75:52:90:
                    c6:b7:72:c2:7a:c5:ae:bc:77:a6:b3:27:8d:7a:6d:
                    05:cb:b5:da:fd:bd:5f:1a:1d:c1:db:7d:3d:8c:0e:
                    08:95:bd:68:e1:55:6a:0f:d4:90:2e:98:b0:d2:0e:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AD:16:63:3A:B3:89:78:D4:F8:EB:DF:76:3B:4C:82:8B:CB:2F:FA
            X509v3 Authority Key Identifier:
                keyid:16:B8:B4:85:2A:1C:88:45:AD:B2:F8:E8:F7:CD:40:D7:AD:13:A5:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16B8B4852A1C8845ADB2F8E8F7CD40D7AD13A581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AE318C22FAD245D5C58F79678E8663BF57322F025ED851A60AA09628C5B0D9E/0/3139302e3138312e3132382e302f31382d3234203d3e203532323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:54:54:d7:f1:96:c4:4d:16:ce:c1:71:7e:0a:82:68:ac:
         72:85:ca:4e:6f:c0:e8:a6:0c:15:6b:e9:80:53:ce:37:cf:10:
         4c:c6:2b:ba:22:44:b5:ee:fa:68:bf:5c:aa:f7:3f:5c:85:6f:
         49:87:eb:5b:8c:65:ab:fc:8f:2a:01:a0:f6:00:4b:1b:60:55:
         f2:34:62:bf:c1:25:aa:40:6a:01:1b:80:a0:17:36:48:cf:43:
         fa:47:f1:93:c9:fb:da:64:39:e1:42:c5:dd:8a:95:46:f0:57:
         f1:20:5a:e1:82:1c:f3:69:5f:e8:3e:93:5f:73:89:b7:77:4d:
         36:0e:a3:f4:56:fa:3e:bd:1e:29:0e:dd:39:58:1e:a0:e3:37:
         87:75:90:34:94:b1:65:46:0a:15:2b:4f:33:f0:53:d4:1e:91:
         2b:02:41:8c:71:c9:8a:56:87:84:51:5d:02:29:e8:2b:2a:4e:
         9f:73:59:f5:4a:50:72:f3:1c:90:c0:82:e9:82:39:6f:6a:93:
         2f:43:b1:a7:cc:cc:6f:68:25:6e:07:c7:0c:27:e1:f7:e2:54:
         38:91:4d:a3:13:9c:97:3f:fa:3f:96:93:e0:42:23:b2:a6:35:
         96:97:51:cf:91:c1:84:73:51:ce:89:13:cf:e9:aa:5e:53:51:
         d1:42:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:04 2026 by rpki-client