This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa
File:                     3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa (raw, json)
Hash identifier:          X0F5rMa2PW+Pn/sjhzHZGF9USMQDIhdzFjp34YCnID8=
Subject key identifier:   00:CD:7F:57:77:B5:26:36:1E:B4:6D:DB:4C:C8:19:EF:7C:E6:77:12
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       2975897E2397D4A04023C343F9B1D00FD8AE135E
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa
Signing time:             Tue 06 Jan 2026 20:57:20 +0000
ROA not before:           Tue 06 Jan 2026 20:52:20 +0000
ROA not after:            Tue 05 Jan 2027 20:57:20 +0000
asID:                     47869
IP address blocks:        181.225.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:75:89:7e:23:97:d4:a0:40:23:c3:43:f9:b1:d0:0f:d8:ae:13:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Jan  6 20:52:20 2026 GMT
            Not After : Jan  5 20:57:20 2027 GMT
        Subject: CN=00CD7F5777B526361EB46DDB4CC819EF7CE67712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:18:4a:42:96:25:f6:22:d6:33:94:2d:79:a4:
                    53:f0:29:15:a8:0b:42:e1:34:3a:a0:3f:91:7c:56:
                    ed:44:d2:fe:38:c2:05:65:8a:6a:f2:79:1a:8b:a6:
                    37:2e:4d:f7:b5:0a:13:12:0f:ad:d6:42:3c:14:ca:
                    cb:ec:b5:6d:2f:57:e2:b6:a2:69:74:5f:fd:c9:a8:
                    67:86:1a:8d:7b:ed:7c:9d:af:1e:fd:30:af:ba:bf:
                    78:40:d3:b6:d4:4a:3d:a7:d9:14:c9:53:a8:24:56:
                    d9:c6:a2:bc:a6:53:18:7c:30:46:fd:93:1c:6e:ec:
                    4a:f6:3e:e6:9f:38:36:cd:87:8f:35:0c:2d:9b:59:
                    34:ba:1b:e3:b3:b7:3b:55:88:a5:75:a0:95:fc:79:
                    5c:3f:96:08:f1:c2:25:c7:6e:0a:d1:85:21:8a:3a:
                    14:ca:05:cc:5d:67:86:09:74:8d:e0:1a:32:7c:b2:
                    45:c8:61:79:ef:05:c6:0c:5c:54:88:d0:d0:bf:b0:
                    e4:be:9b:d1:4e:85:24:03:fa:3e:61:91:b0:07:17:
                    54:3e:d4:70:ea:dc:ed:d6:4b:b8:e9:88:88:46:91:
                    4b:23:89:b2:d2:d6:d0:4e:52:14:bc:12:9e:e6:8a:
                    3c:20:ce:ba:25:0e:64:3f:cc:ac:f2:25:67:df:fd:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CD:7F:57:77:B5:26:36:1E:B4:6D:DB:4C:C8:19:EF:7C:E6:77:12
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:0f:62:a4:ca:01:e7:4d:85:70:33:03:42:5c:c8:34:c1:
         bc:50:25:11:55:b3:11:71:0e:13:ab:3f:b4:6d:29:04:b5:0e:
         48:a2:da:d0:e6:5b:7a:74:4d:bc:fc:ca:19:6d:51:73:38:03:
         e5:a8:0b:bc:da:46:48:fb:85:77:52:c8:b8:aa:f5:53:cc:6e:
         dd:c0:a0:c4:ba:7b:b0:c4:e8:6f:d8:c0:01:70:9d:d1:96:07:
         d9:13:8e:e1:1a:b8:29:27:8f:83:d0:06:6e:09:26:80:60:65:
         80:a9:93:b0:fc:ee:6b:4c:d4:14:59:10:3e:50:94:ff:19:d1:
         2b:2d:ef:d6:82:0c:ab:dc:a7:87:17:d1:ca:a5:c0:57:37:20:
         f6:bf:37:2b:78:99:f5:06:a0:e1:2a:07:bc:9f:ea:8c:c7:b9:
         ab:b1:45:cf:11:e6:15:05:15:a8:0c:bc:cf:27:ef:7f:2d:a2:
         58:5e:b1:0f:d9:74:b0:42:34:1f:73:c4:3d:f9:5a:68:4e:a8:
         0a:54:e9:67:4e:5c:d5:40:e0:67:e5:bb:10:ca:cc:9e:cc:54:
         39:c6:c4:25:cf:b5:f3:6c:a6:d7:cf:d9:61:8b:44:11:ea:d3:
         6c:fc:c0:1a:5e:f3:95:a1:19:fc:5c:25:60:b2:ca:58:76:19:
         4f:38:05:cd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKXWJfiOX1KBAI8ND+bHQD9iuE14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ0NTlFQ0M3NUIxOEI1Mjc0REYxOUQyQzNBNTBBMDE5
QjM0Njk2RTAeFw0yNjAxMDYyMDUyMjBaFw0yNzAxMDUyMDU3MjBaMDMxMTAvBgNV
BAMTKDAwQ0Q3RjU3NzdCNTI2MzYxRUI0NkREQjRDQzgxOUVGN0NFNjc3MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4GEpCliX2ItYzlC15pFPwKRWo
C0LhNDqgP5F8Vu1E0v44wgVlimryeRqLpjcuTfe1ChMSD63WQjwUysvstW0vV+K2
oml0X/3JqGeGGo177Xydrx79MK+6v3hA07bUSj2n2RTJU6gkVtnGorymUxh8MEb9
kxxu7Er2PuafODbNh481DC2bWTS6G+OztztViKV1oJX8eVw/lgjxwiXHbgrRhSGK
OhTKBcxdZ4YJdI3gGjJ8skXIYXnvBcYMXFSI0NC/sOS+m9FOhSQD+j5hkbAHF1Q+
1HDq3O3WS7jpiIhGkUsjibLS1tBOUhS8Ep7mijwgzrolDmQ/zKzyJWff/fsVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAM1/V3e1JjYetG3bTMgZ73zmdxIwHwYDVR0j
BBgwFoAUvUWezHWxi1J03xnSw6UKAZs0aW4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkYwNzYxM0I3NjdCMjlEOTM1Njg3RDQ2QjdBMzdGMzNC
NzFBRUMyRkQ0QUI5Nzc5QzQzNEE5RjdDMTBENEVGLzAvQkQ0NTlFQ0M3NUIxOEI1
Mjc0REYxOUQyQzNBNTBBMDE5QjM0Njk2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDQ1OUVDQzc1QjE4QjUyNzRE
RjE5RDJDM0E1MEEwMTlCMzQ2OTZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZGMDc2MTNCNzY3QjI5RDkzNTY4N0Q0NkI3QTM3RjMzQjcxQUVDMkZE
NEFCOTc3OUM0MzRBOUY3QzEwRDRFRi8wLzMxMzgzMTJlMzIzMjM1MmUzMTMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM3MzgzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCteGI
MA0GCSqGSIb3DQEBCwUAA4IBAQDFPQ9ipMoB502FcDMDQlzINMG8UCURVbMRcQ4T
qz+0bSkEtQ5IotrQ5lt6dE28/MoZbVFzOAPlqAu82kZI+4V3Usi4qvVTzG7dwKDE
unuwxOhv2MABcJ3RlgfZE47hGrgpJ4+D0AZuCSaAYGWAqZOw/O5rTNQUWRA+UJT/
GdErLe/Wggyr3KeHF9HKpcBXNyD2vzcreJn1BqDhKge8n+qMx7mrsUXPEeYVBRWo
DLzPJ+9/LaJYXrEP2XSwQjQfc8Q9+VpoTqgKVOlnTlzVQOBn5bsQysyezFQ5xsQl
z7XzbKbXz9lhi0QR6tNs/MAaXvOVoRn8XCVgsspYdhlPOAXN
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:42 2026 by rpki-client