This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3137322e302e302f31352d3234203d3e2037343138.roa
File:                     3138312e3137322e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          YgXBiAh9CqmSPW8wpWsadThsSuy2nyLwvGw1raDxijo=
Subject key identifier:   CE:B8:41:4C:63:BD:65:00:37:FA:C6:0D:4D:43:26:D5:2C:80:3D:F6
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5336518C4D98E0BBF87D6C4BADC999675702DD7C
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3137322e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 06 Jan 2026 19:09:59 +0000
ROA not before:           Tue 06 Jan 2026 19:04:59 +0000
ROA not after:            Tue 05 Jan 2027 19:09:59 +0000
asID:                     7418
IP address blocks:        181.172.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:51:8c:4d:98:e0:bb:f8:7d:6c:4b:ad:c9:99:67:57:02:dd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:04:59 2026 GMT
            Not After : Jan  5 19:09:59 2027 GMT
        Subject: CN=CEB8414C63BD650037FAC60D4D4326D52C803DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:51:f3:f2:7f:6f:98:0e:0e:ab:ee:49:06:
                    3f:f7:95:e9:c6:68:76:90:f6:e1:6b:a4:ad:99:10:
                    29:cd:ab:66:7e:57:97:33:f7:d6:d8:d9:a0:72:61:
                    1d:4e:1c:a2:f5:df:27:a6:f9:c3:c3:1d:b9:ab:d5:
                    3c:d3:d4:21:03:2c:7a:7f:ee:98:ae:52:23:2e:07:
                    89:1f:8c:84:05:1d:ec:4c:e4:d1:d5:10:72:82:af:
                    7a:4c:fb:40:13:7f:af:c8:43:a6:31:44:b3:08:d7:
                    ad:03:49:17:96:19:9e:f3:8b:dd:71:91:d6:4f:5d:
                    20:7d:84:45:d6:49:77:bd:09:d2:7e:ce:69:80:69:
                    5e:6a:41:ff:03:bb:51:70:4e:81:59:fa:ad:33:d4:
                    76:c6:6b:83:99:34:46:2b:4c:c3:0b:13:c3:1c:f8:
                    f5:34:9f:c7:05:47:32:e7:f2:1d:99:ff:d8:83:f6:
                    fa:cf:35:d2:f8:e1:0f:70:57:31:51:b6:ca:8e:2c:
                    25:7a:ff:ec:5c:16:9c:d2:92:2a:dc:5f:5d:25:44:
                    42:b9:47:85:75:53:7a:f9:54:39:dd:28:1b:eb:81:
                    7e:85:de:c2:9d:0d:ef:6a:99:13:75:58:6a:ba:1a:
                    cb:26:06:f2:3e:59:0a:e0:7e:58:d2:ff:89:da:9e:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:41:4C:63:BD:65:00:37:FA:C6:0D:4D:43:26:D5:2C:80:3D:F6
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3137322e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         91:94:1f:03:c9:86:59:c1:3f:ba:7e:15:a3:e6:b7:4d:a9:a9:
         c0:1a:3a:99:00:4c:af:0e:f4:9f:a2:cc:c2:6c:68:3a:eb:f4:
         00:bd:05:b3:df:63:a2:21:91:05:a9:80:58:b6:fc:8a:90:e5:
         e0:eb:72:96:2c:39:18:a1:54:00:8f:b1:95:e6:ea:17:92:7a:
         d3:1c:39:8b:29:59:45:35:b3:e2:82:60:71:d1:66:a5:67:d7:
         74:6f:0f:06:1e:63:c4:90:df:f6:ca:10:15:ca:fe:a5:0b:c1:
         bc:5b:6c:06:4d:3b:d1:fa:08:bd:b7:c6:3a:be:f2:f6:7f:88:
         e7:0a:c7:df:00:c8:fe:04:9f:73:b6:a5:81:2b:96:3b:81:af:
         3f:87:e5:40:c1:ea:74:f5:c7:19:25:e8:80:6e:9e:85:15:44:
         c3:cd:42:b9:4c:51:bb:50:ef:d0:00:c2:f1:e0:ae:74:29:c9:
         9c:d2:a2:53:75:0f:60:9f:c3:02:af:e7:46:39:ce:e6:27:e3:
         e5:af:04:b4:71:e9:08:c1:9d:53:67:24:c5:4c:c8:c7:6c:bb:
         80:34:56:7f:c2:42:33:3c:38:68:4e:4b:84:75:e2:f6:aa:51:
         21:d5:4d:14:2c:50:93:a9:00:fb:41:c0:3c:e5:ee:b9:07:f6:
         c1:25:de:9e
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUUzZRjE2Y4Lv4fWxLrcmZZ1cC3XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlCMzkxRjU1Nzc1MTRFMzBGNjRFREY2RTM2MTkwNUNB
MDhDRjU3MjAeFw0yNjAxMDYxOTA0NTlaFw0yNzAxMDUxOTA5NTlaMDMxMTAvBgNV
BAMTKENFQjg0MTRDNjNCRDY1MDAzN0ZBQzYwRDRENDMyNkQ1MkM4MDNERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyFHz8n9vmA4Oq+5JBj/3lenG
aHaQ9uFrpK2ZECnNq2Z+V5cz99bY2aByYR1OHKL13yem+cPDHbmr1TzT1CEDLHp/
7piuUiMuB4kfjIQFHexM5NHVEHKCr3pM+0ATf6/IQ6YxRLMI160DSReWGZ7zi91x
kdZPXSB9hEXWSXe9CdJ+zmmAaV5qQf8Du1FwToFZ+q0z1HbGa4OZNEYrTMMLE8Mc
+PU0n8cFRzLn8h2Z/9iD9vrPNdL44Q9wVzFRtsqOLCV6/+xcFpzSkircX10lREK5
R4V1U3r5VDndKBvrgX6F3sKdDe9qmRN1WGq6GssmBvI+WQrgfljS/4nanmCjAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUzrhBTGO9ZQA3+sYNTUMm1SyAPfYwHwYDVR0j
BBgwFoAUKbOR9Vd1FOMPZO3242GQXKCM9XIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0MwQ0VGQzYyNkE5NDk3MjM0REQ3QTI5RjU3Q0EzRjhG
QkFCNUM2RTYwNUE0MEFEQUIxRTA5QTAzOTNEQTE2LzAvMjlCMzkxRjU1Nzc1MTRF
MzBGNjRFREY2RTM2MTkwNUNBMDhDRjU3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOUIzOTFGNTU3NzUxNEUzMEY2
NEVERjZFMzYxOTA1Q0EwOENGNTcyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdDMENFRkM2MjZBOTQ5NzIzNEREN0EyOUY1N0NBM0Y4RkJBQjVDNkU2
MDVBNDBBREFCMUUwOUEwMzkzREExNi8wLzMxMzgzMTJlMzEzNzMyMmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBtawwDQYJKoZI
hvcNAQELBQADggEBAJGUHwPJhlnBP7p+FaPmt02pqcAaOpkATK8O9J+izMJsaDrr
9AC9BbPfY6IhkQWpgFi2/IqQ5eDrcpYsORihVACPsZXm6heSetMcOYspWUU1s+KC
YHHRZqVn13RvDwYeY8SQ3/bKEBXK/qULwbxbbAZNO9H6CL23xjq+8vZ/iOcKx98A
yP4En3O2pYErljuBrz+H5UDB6nT1xxkl6IBunoUVRMPNQrlMUbtQ79AAwvHgrnQp
yZzSolN1D2CfwwKv50Y5zuYn4+WvBLRx6QjBnVNnJMVMyMdsu4A0Vn/CQjM8OGhO
S4R14vaqUSHVTRQsUJOpAPtBwDzl7rkH9sEl3p4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:38 2026 by rpki-client