This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa
File:                     3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa (raw, json)
Hash identifier:          TtsnFJYpocV9A13N9SyBZyBsu+0P4MvLpi3zlIVSWpU=
Subject key identifier:   72:1B:A1:D1:59:A6:DF:72:E9:69:80:23:0B:89:E0:5E:98:2A:0D:C5
Certificate issuer:       /CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
Certificate serial:       5A9F7838D7ABE58C9216C5D625AA7E1CEDFDB039
Authority key identifier: D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa
Signing time:             Tue 06 Jan 2026 19:00:51 +0000
ROA not before:           Tue 06 Jan 2026 18:55:51 +0000
ROA not after:            Tue 05 Jan 2027 19:00:51 +0000
asID:                     262213
IP address blocks:        181.225.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9f:78:38:d7:ab:e5:8c:92:16:c5:d6:25:aa:7e:1c:ed:fd:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
        Validity
            Not Before: Jan  6 18:55:51 2026 GMT
            Not After : Jan  5 19:00:51 2027 GMT
        Subject: CN=721BA1D159A6DF72E96980230B89E05E982A0DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:75:be:f3:8d:34:ad:f9:19:7b:e1:e0:ed:
                    d6:6d:a6:89:a2:23:8f:65:c8:61:b8:42:6e:d7:d5:
                    79:bc:6e:be:2f:c2:d1:75:ba:ef:94:eb:a4:f3:3a:
                    66:36:0a:13:5c:a3:6a:2e:ad:a1:39:6a:5b:ca:92:
                    de:bf:7a:22:78:9b:94:fd:46:27:1e:f1:0e:58:f4:
                    0e:0e:19:b6:05:65:0a:7d:1a:52:39:a8:f8:a2:77:
                    3e:07:d4:37:3e:6f:62:5e:c3:63:af:43:26:8f:c1:
                    92:e3:ca:ed:04:78:d8:e5:d8:ab:e7:4d:98:43:4a:
                    a1:dd:49:bd:bc:10:f7:1e:22:73:74:7f:62:db:f9:
                    fc:de:ea:1f:e7:51:df:fa:cc:08:c0:09:f4:60:8e:
                    dc:75:3a:78:b0:07:7e:f9:ba:29:41:f1:e2:cd:f0:
                    96:cd:29:e4:76:58:51:8d:aa:0c:66:8a:db:a6:0a:
                    fc:78:f3:cf:b0:4c:55:02:cf:e9:c3:68:50:3f:ca:
                    c2:a7:b7:33:1d:9a:2d:e6:80:f6:97:e0:0f:ed:8f:
                    a9:db:9e:b4:de:30:4c:11:ae:49:fb:1e:40:dd:70:
                    41:af:5a:46:48:a7:2e:3c:49:8e:48:03:42:1e:66:
                    6a:71:d5:59:ce:7c:ea:ee:41:54:77:a7:9b:cf:58:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1B:A1:D1:59:A6:DF:72:E9:69:80:23:0B:89:E0:5E:98:2A:0D:C5
            X509v3 Authority Key Identifier:
                keyid:D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:29:24:8e:e3:1a:99:89:85:bc:fb:d5:ff:c0:97:fe:c0:78:
         d7:3e:06:e1:d6:9f:d3:69:eb:f8:28:f6:19:01:e2:cb:18:77:
         27:3d:81:d5:e6:10:22:0b:ee:e3:02:1a:31:b5:d4:ae:03:38:
         f4:17:11:c8:8b:63:e5:cb:d5:87:98:49:6b:d6:17:b7:83:e8:
         62:3a:f9:a4:89:a6:ec:10:59:40:03:ef:6e:25:85:e9:07:a7:
         d3:58:3b:a6:63:0b:ff:60:61:68:bd:cc:ba:99:2c:e5:ca:36:
         10:40:b3:d2:a0:71:06:8d:c8:60:4d:ff:18:84:9d:62:02:de:
         ec:85:7a:7e:22:3f:c7:a0:e7:82:58:49:4c:87:ab:f7:89:8f:
         58:00:df:39:cd:2c:aa:fa:ec:66:4c:de:8d:77:d2:45:0f:22:
         c9:24:da:89:9a:e6:e2:35:cf:33:b4:82:34:a1:bc:95:25:ad:
         ff:5f:66:4c:9b:59:01:a4:11:d4:09:5d:52:32:0e:c5:9b:10:
         c2:cc:85:b4:ba:0d:ee:2e:78:db:58:b7:45:09:d2:6f:1a:bb:
         f0:91:9b:ff:67:09:06:3c:d7:2d:45:48:df:dd:c7:07:75:6f:
         f2:f3:6c:c2:8a:f0:da:48:83:fc:42:a3:a0:6a:ae:13:a6:d2:
         54:6b:6d:af
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUWp94ONer5YySFsXWJap+HO39sDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFREY1Qjc1MUIxNTE0NjRGRDMxNUE2OEJGMEM0NzIz
NkEwRTI0MTAeFw0yNjAxMDYxODU1NTFaFw0yNzAxMDUxOTAwNTFaMDMxMTAvBgNV
BAMTKDcyMUJBMUQxNTlBNkRGNzJFOTY5ODAyMzBCODlFMDVFOTgyQTBEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkXW+8400rfkZe+Hg7dZtpomi
I49lyGG4Qm7X1Xm8br4vwtF1uu+U66TzOmY2ChNco2ouraE5alvKkt6/eiJ4m5T9
Rice8Q5Y9A4OGbYFZQp9GlI5qPiidz4H1Dc+b2Jew2OvQyaPwZLjyu0EeNjl2Kvn
TZhDSqHdSb28EPceInN0f2Lb+fze6h/nUd/6zAjACfRgjtx1OniwB375uilB8eLN
8JbNKeR2WFGNqgxmitumCvx488+wTFUCz+nDaFA/ysKntzMdmi3mgPaX4A/tj6nb
nrTeMEwRrkn7HkDdcEGvWkZIpy48SY5IA0IeZmpx1VnOfOruQVR3p5vPWFoFAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUchuh0Vmm33LpaYAjC4ngXpgqDcUwHwYDVR0j
BBgwFoAU1+31t1GxUUZP0xWmi/DEcjag4kEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MEE1M0IxQUYxNDEzRTlCRDVGMkQ2NkVCN0FDMjM0OTIw
QjM4MTkxOTNGMjdFQ0RFMzY2NkI1ODYyQTI4NEVFLzAvRDdFREY1Qjc1MUIxNTE0
NjRGRDMxNUE2OEJGMEM0NzIzNkEwRTI0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VERjVCNzUxQjE1MTQ2NEZE
MzE1QTY4QkYwQzQ3MjM2QTBFMjQxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTBBNTNCMUFGMTQxM0U5QkQ1RjJENjZFQjdBQzIzNDkyMEIzODE5MTkz
RjI3RUNERTM2NjZCNTg2MkEyODRFRS8wLzMxMzgzMTJlMzIzMjM1MmUzMTM0MzQy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMxMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO1
4ZAwDQYJKoZIhvcNAQELBQADggEBAEApJI7jGpmJhbz71f/Al/7AeNc+BuHWn9Np
6/go9hkB4ssYdyc9gdXmECIL7uMCGjG11K4DOPQXEciLY+XL1YeYSWvWF7eD6GI6
+aSJpuwQWUAD724lhekHp9NYO6ZjC/9gYWi9zLqZLOXKNhBAs9KgcQaNyGBN/xiE
nWIC3uyFen4iP8eg54JYSUyHq/eJj1gA3znNLKr67GZM3o130kUPIskk2oma5uI1
zzO0gjShvJUlrf9fZkybWQGkEdQJXVIyDsWbEMLMhbS6De4ueNtYt0UJ0m8au/CR
m/9nCQY81y1FSN/dxwd1b/LzbMKK8NpIg/xCo6BqrhOm0lRrba8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:23 2026 by rpki-client