This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e203136363239.roa
File:                     3138312e3230332e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          tODc+LLv+DaqZPCJlIxZca5/h51ZYoLcTw+xS/bHyL4=
Subject key identifier:   D9:39:30:57:37:32:F9:C3:1E:30:C2:3E:79:CE:46:78:8B:C9:C6:F0
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       1DCFBBDD468CA125F6C77D9A1AB15A97AB41ECD9
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 06 Jan 2026 19:09:58 +0000
ROA not before:           Tue 06 Jan 2026 19:04:58 +0000
ROA not after:            Tue 05 Jan 2027 19:09:58 +0000
asID:                     16629
IP address blocks:        181.203.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:bb:dd:46:8c:a1:25:f6:c7:7d:9a:1a:b1:5a:97:ab:41:ec:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Jan  6 19:04:58 2026 GMT
            Not After : Jan  5 19:09:58 2027 GMT
        Subject: CN=D93930573732F9C31E30C23E79CE46788BC9C6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8d:04:4c:e7:b1:f8:ae:29:68:30:43:95:00:
                    50:ed:e8:ec:ea:52:dc:45:6b:64:e8:82:ab:b3:71:
                    54:27:45:55:2e:96:9b:e9:de:56:d4:f6:26:24:cd:
                    d9:de:10:fd:9d:35:c6:2f:28:7d:0b:bc:c8:d5:01:
                    41:59:ea:75:55:9d:f0:44:64:51:88:cc:e5:59:e5:
                    e0:ff:b8:5f:d3:d7:53:a6:0d:99:44:1c:6c:77:d2:
                    32:07:a7:3d:9b:89:8f:05:9e:70:a8:a7:a8:26:ab:
                    d5:40:60:47:64:8c:f7:34:7e:db:3a:b7:2c:fb:02:
                    ad:ff:6c:ba:22:5c:1b:42:ab:36:eb:5f:35:48:ab:
                    5e:0a:ed:e4:ea:e4:b4:e2:1d:a6:7a:78:0e:97:fe:
                    b0:b9:76:6c:9f:cf:67:87:bd:a3:33:2e:b0:1e:22:
                    37:c2:b6:52:85:c3:8a:57:d6:e2:f6:3d:7c:f9:52:
                    b6:a1:e2:a2:f2:de:55:79:59:65:62:13:c9:a4:0f:
                    f2:38:0d:d7:5c:53:15:46:b0:a8:85:e9:d6:c1:3c:
                    85:17:02:eb:43:01:ac:ea:e1:49:80:92:30:6e:d3:
                    15:af:1f:04:61:56:08:7a:08:10:4d:3e:e0:c2:86:
                    e7:3a:f4:57:a2:04:7a:f1:13:94:a9:24:5c:f9:3d:
                    55:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:30:57:37:32:F9:C3:1E:30:C2:3E:79:CE:46:78:8B:C9:C6:F0
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.203.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:15:e4:2b:e8:d5:93:e8:43:f5:d2:4d:1c:d8:2b:dc:00:
         e6:5b:75:61:a4:17:b3:57:04:f4:54:d8:14:f2:8c:43:c8:ea:
         e9:d6:1c:82:dc:f2:15:e9:8e:49:bf:6c:c4:ea:07:36:ae:5b:
         ac:3c:27:f0:32:c4:38:e6:35:31:96:43:8d:5a:69:14:ed:4e:
         c9:ca:5d:9a:7b:19:0b:78:e3:52:83:cf:31:6d:bb:61:ab:79:
         5a:b9:22:ed:b5:71:cc:48:11:23:9e:c7:f4:13:c7:c9:70:34:
         a6:df:69:9d:17:d2:0f:5d:ae:7e:d7:56:f5:7b:9f:20:74:b3:
         8d:d6:0d:37:f5:e8:aa:63:e9:13:f0:20:29:24:1c:c6:70:29:
         ba:6e:0d:13:b9:c0:dd:40:16:9d:d3:31:a2:5a:12:94:d2:53:
         c9:15:b9:93:10:a9:53:63:38:d8:3d:73:51:14:60:46:e8:31:
         1d:1b:32:cb:66:b7:ba:1d:09:e7:1e:85:d8:7a:09:8f:56:9a:
         a3:c2:ad:8f:a5:73:ec:c7:25:6f:91:bf:69:62:6d:e4:73:51:
         48:c1:9d:4f:f6:65:a3:e5:2d:97:77:cf:b2:53:00:83:c5:a6:
         20:09:a1:3e:e9:67:80:c8:81:60:53:36:cf:54:ce:52:73:38:
         6a:36:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:15 2026 by rpki-client