This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa
File:                     3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa (raw, json)
Hash identifier:          q++NCDpizalv3L29ImgwchVahP64d68TaqBXi8r5T7c=
Subject key identifier:   48:38:2B:80:E8:45:9D:19:AB:0B:0E:C6:E2:49:74:4E:08:62:C2:5E
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       2D23C1E002EC262D37C765013EA557C73746D3A7
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:54 +0000
ROA not before:           Tue 06 Jan 2026 18:58:54 +0000
ROA not after:            Tue 05 Jan 2027 19:03:54 +0000
asID:                     27843
IP address blocks:        181.177.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:23:c1:e0:02:ec:26:2d:37:c7:65:01:3e:a5:57:c7:37:46:d3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:54 2026 GMT
            Not After : Jan  5 19:03:54 2027 GMT
        Subject: CN=48382B80E8459D19AB0B0EC6E249744E0862C25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:3b:d9:42:71:11:ff:b6:35:c3:62:46:a1:
                    04:94:06:f5:e0:7d:f8:f5:c5:5e:d0:e3:e1:dc:3f:
                    d0:25:b3:e3:4e:81:e8:23:52:5c:6c:5b:12:36:dd:
                    66:a1:cf:f7:f3:72:0d:00:e3:0d:63:be:2e:5b:5b:
                    ab:4c:42:d6:0c:3f:cf:26:9e:57:bc:21:30:37:54:
                    f8:8c:ab:76:a6:25:7a:1f:cf:12:11:11:3b:87:e5:
                    90:d1:2c:a5:63:a1:4b:80:5a:4b:72:0f:7c:6e:89:
                    a8:dc:f8:46:10:f6:29:ab:85:0b:ad:00:43:5e:7c:
                    00:52:e3:6b:e9:be:36:b2:d6:b6:ff:2f:1e:a3:87:
                    e3:60:2e:ec:93:a7:a3:01:70:9c:0c:d4:dd:82:50:
                    02:4e:3b:b5:d5:4b:4b:ce:0b:6f:ab:50:71:72:93:
                    f3:b3:25:69:dd:53:a1:bf:50:79:56:be:03:eb:45:
                    87:b1:bc:d3:a4:f0:0e:39:04:ba:19:22:cd:3a:ab:
                    86:e8:27:94:78:2c:80:48:bf:e7:85:8a:1e:69:6e:
                    bc:52:db:5a:78:0b:ab:10:f0:76:07:5d:c6:93:e0:
                    c9:19:17:a7:48:06:fe:fd:57:55:7b:95:23:dc:75:
                    18:59:5f:d4:67:79:c2:d4:ff:28:f7:12:99:54:89:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:2B:80:E8:45:9D:19:AB:0B:0E:C6:E2:49:74:4E:08:62:C2:5E
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:54:5e:07:54:09:82:fa:ed:61:39:80:39:e0:e5:e7:f7:
         e5:fc:b8:fd:ec:6c:2b:29:11:c7:01:e8:04:fe:27:c8:94:9a:
         a7:98:04:d7:51:fb:9f:8b:55:74:ce:b0:a0:5f:db:f0:01:d7:
         92:a9:b5:d5:9c:9e:31:fd:02:2c:ba:33:f6:35:dc:5d:75:87:
         4f:ec:4e:e3:55:7e:51:c2:0b:58:2f:5c:b7:0b:a4:ca:10:24:
         96:5b:30:42:41:c5:1f:60:24:01:4d:8d:b4:dc:22:7f:6b:17:
         6e:80:c7:df:9b:b6:98:08:db:a8:f8:8f:19:a7:1e:ac:76:21:
         f6:b1:51:4b:89:a8:8d:4a:d1:96:4a:13:6d:51:f2:81:26:2d:
         29:04:1c:95:60:fa:7a:6d:44:d5:4a:86:5f:36:c8:22:20:e2:
         82:47:50:a5:36:de:16:e3:09:06:36:1d:1f:36:6c:35:30:dd:
         5c:ee:13:40:13:ad:67:e9:4f:5a:b8:4e:e6:79:f9:e6:2a:75:
         ec:bd:19:02:7f:b1:7b:78:d6:9f:17:dc:34:af:e9:8e:0c:07:
         7a:c7:98:53:4b:11:e2:e4:b7:12:39:9b:09:08:6e:9f:2d:22:
         92:cb:3f:fa:d9:ef:0b:12:68:74:af:36:a0:f8:25:92:07:40:
         db:7f:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:01 2026 by rpki-client