This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa
File:                     3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa (raw, json)
Hash identifier:          c3FunXDRl5gfX3tIRwb1QkXqHs0ydNaSaRa4CmWA5Og=
Subject key identifier:   C4:69:D1:77:BA:44:8C:07:C4:78:45:ED:2C:67:A3:58:15:D3:07:4E
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       69B00E228A91F7DB3C06DAD4E7B67D4982821D01
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa
Signing time:             Tue 06 Jan 2026 19:13:05 +0000
ROA not before:           Tue 06 Jan 2026 19:08:05 +0000
ROA not after:            Tue 05 Jan 2027 19:13:05 +0000
asID:                     27839
IP address blocks:        181.177.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b0:0e:22:8a:91:f7:db:3c:06:da:d4:e7:b6:7d:49:82:82:1d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Jan  6 19:08:05 2026 GMT
            Not After : Jan  5 19:13:05 2027 GMT
        Subject: CN=C469D177BA448C07C47845ED2C67A35815D3074E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:d2:de:df:ee:98:74:48:3b:5b:b8:1f:77:
                    eb:23:f5:21:45:60:da:fb:90:7d:d8:f2:af:b9:5d:
                    aa:60:9c:45:4b:ec:3b:a8:15:61:78:fa:bd:fa:ef:
                    27:7b:99:01:d0:26:df:78:d9:ec:de:78:7e:48:03:
                    ae:1f:3d:49:d8:f6:3b:a3:f8:e8:0d:92:e6:d3:7e:
                    18:3b:48:af:01:39:9b:8c:48:19:06:de:62:b7:c7:
                    f5:e1:30:11:30:08:39:46:e8:91:02:19:37:26:fa:
                    53:97:d1:6b:01:3d:fd:57:6e:6f:cb:3e:d0:f4:93:
                    8d:c2:3a:d2:57:2d:6b:c8:a2:57:f8:e6:c3:13:92:
                    5e:1d:b0:66:f4:43:b9:e3:2f:fe:7b:39:c1:ea:2e:
                    97:1a:77:08:9a:75:85:ad:fc:6f:c2:45:1a:ae:51:
                    21:3b:6d:dd:72:30:f6:f8:33:06:8e:53:09:e3:0b:
                    4f:1d:80:fd:40:a7:43:56:fc:17:18:79:eb:1b:e2:
                    11:ef:8f:00:25:b4:31:89:7b:46:5e:ee:9b:89:c7:
                    33:01:ce:cf:72:2c:57:be:b7:8e:c7:3b:5f:98:05:
                    fa:80:37:a1:80:c6:17:5a:31:96:a7:d1:f5:d3:4f:
                    b0:1d:d0:60:02:57:49:73:08:28:03:e5:08:18:fb:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:69:D1:77:BA:44:8C:07:C4:78:45:ED:2C:67:A3:58:15:D3:07:4E
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:b8:73:bf:b3:f4:ab:ac:6e:28:e8:fc:ec:0e:6c:c6:04:ba:
         23:22:eb:30:3b:40:6a:24:77:18:3b:56:2f:b2:2a:08:c5:02:
         58:7e:47:07:b3:38:28:35:a4:5e:cf:3a:8f:bf:b7:01:f3:26:
         6d:ff:28:dc:48:45:19:be:23:d3:f3:70:ed:39:a7:b6:ce:a6:
         1c:0c:01:f6:ee:47:c3:35:a6:b3:4d:e7:d6:da:53:b8:82:58:
         ee:a9:91:f3:e0:4b:01:6a:f0:f6:97:04:b9:dd:02:37:67:bb:
         0d:5f:b7:4d:76:91:5f:bb:71:fb:f0:d1:5b:55:6f:1d:bf:c1:
         c6:26:05:bf:58:a7:70:20:2a:63:f8:ba:66:83:91:95:69:69:
         ee:ab:db:88:e8:70:9f:0b:4a:c0:2f:6a:e2:e2:b7:41:c7:73:
         5d:00:fe:5d:63:0c:e3:1f:bb:60:ed:05:8a:85:a6:f8:03:dd:
         b6:00:c7:db:7f:1b:0e:39:c3:56:b6:32:ee:bb:74:c7:3a:07:
         0d:bc:79:83:ac:bb:63:dd:d6:80:fb:04:e5:24:3d:23:26:df:
         9f:8e:5c:b1:c1:e6:d5:b4:46:af:27:3a:dc:99:d5:89:02:92:
         5e:a8:df:c3:97:21:3a:61:1f:7f:ea:ca:75:5f:41:a1:c2:76:
         b2:98:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:34 2026 by rpki-client