This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230312e302e302f31362d3234203d3e203136363239.roa
File:                     3138312e3230312e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          1F4+X2Wc+FrFJnVGI6WiheIxtA2JSJbOz4SEHPenX+Q=
Subject key identifier:   37:70:94:92:73:EA:64:45:EF:53:40:1F:62:87:13:15:70:38:D9:5C
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5E5537F0F64B93CE01920DA367C38628DCD4A47E
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230312e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:09:59 +0000
ROA not before:           Tue 06 Jan 2026 19:04:59 +0000
ROA not after:            Tue 05 Jan 2027 19:09:59 +0000
asID:                     16629
IP address blocks:        181.201.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:55:37:f0:f6:4b:93:ce:01:92:0d:a3:67:c3:86:28:dc:d4:a4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:04:59 2026 GMT
            Not After : Jan  5 19:09:59 2027 GMT
        Subject: CN=3770949273EA6445EF53401F628713157038D95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:f1:80:7a:c7:c0:02:fd:d3:04:bc:af:10:
                    ce:87:a2:a8:31:ab:73:2c:8c:e6:46:19:70:15:40:
                    91:f1:65:d0:7a:c1:4b:90:75:e4:36:25:6a:5d:bf:
                    bc:a3:37:a5:fd:17:15:42:38:47:4c:21:d2:dc:9a:
                    17:14:8c:a6:f8:f0:8d:3b:cd:a0:cf:90:5f:56:3c:
                    ad:67:bb:6f:ad:1f:41:53:31:15:d3:65:ba:d3:ce:
                    79:49:99:b4:f5:42:5d:b1:6a:31:75:f0:c2:73:94:
                    52:17:ce:20:ed:dc:c5:00:a7:37:75:03:6b:8d:85:
                    d7:00:a8:96:f2:d6:37:ba:a3:82:bc:d4:7f:a3:4c:
                    28:ed:69:09:4a:52:4c:ed:80:c4:e5:44:42:9e:ef:
                    c6:1d:f4:78:b5:85:48:12:9a:bc:28:51:10:33:a3:
                    55:9e:b7:e4:04:f8:47:1c:31:dc:7c:40:56:05:49:
                    76:b9:0f:5d:bf:72:6f:37:3a:73:f3:20:59:0d:63:
                    74:a8:2d:1b:39:f1:1d:1b:f4:fc:a8:0a:4b:2e:18:
                    a6:87:2d:72:5b:35:fc:3a:bb:92:79:4c:a0:bd:3f:
                    13:51:79:a1:24:e9:43:e6:e6:35:a6:6e:db:7b:12:
                    a0:e4:e8:91:2a:98:cf:78:f0:33:40:e4:a0:c6:c2:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:94:92:73:EA:64:45:EF:53:40:1F:62:87:13:15:70:38:D9:5C
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230312e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.201.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:6f:04:2d:7c:9d:e8:8d:99:0b:a3:4d:e2:0f:43:bd:6a:
         a3:38:ed:c0:12:25:ce:30:9b:92:e9:2b:8a:68:09:27:ca:14:
         53:b9:f4:da:72:27:06:7e:f2:ce:77:31:09:a3:f5:12:48:ca:
         67:83:6b:89:28:60:68:89:4a:d7:f4:a2:39:1f:7e:2a:d9:a4:
         b8:e4:dd:f4:8f:84:2c:7a:b0:3a:4e:03:f8:e9:1b:af:43:90:
         38:6a:02:29:8c:dc:79:46:12:41:f8:3f:ae:df:64:dc:b5:06:
         a0:29:6a:1a:c3:81:56:59:1c:f3:9f:0b:3b:73:19:95:ff:8a:
         6d:13:c7:ee:05:af:49:dd:53:b4:e8:c7:ed:3e:06:72:14:0e:
         c2:02:dc:33:2c:ca:ec:49:8c:2b:c3:5f:79:ad:3e:6f:7e:84:
         2b:7f:e6:79:97:9c:a6:32:b1:67:af:ef:7d:0c:54:b0:7b:b5:
         65:4a:0c:79:cd:86:b4:19:03:41:bb:03:ce:28:16:62:14:fb:
         34:be:2b:1d:d5:6f:c0:b2:41:60:1f:de:a8:84:6e:f3:6f:e0:
         f7:03:76:fe:85:9b:73:84:66:e7:a9:5f:5a:ef:44:d3:dd:80:
         fe:66:54:e4:29:08:35:15:43:ca:6d:f6:bb:cb:97:50:b3:45:
         11:77:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:59 2026 by rpki-client