This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35362e302f32342d3234203d3e20323732303831.roa
File:                     3138312e3138392e35362e302f32342d3234203d3e20323732303831.roa (raw, json)
Hash identifier:          oY19vzmU7CVp1bIF8V589wwbfYQnuHjfHK8erzbWyw8=
Subject key identifier:   10:63:CB:1C:6C:60:B2:D4:6B:7E:05:53:27:1A:2B:78:DD:23:8B:43
Certificate issuer:       /CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
Certificate serial:       6A079A86A45A73B60344A8FC63FDD6831972D642
Authority key identifier: 5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35362e302f32342d3234203d3e20323732303831.roa
Signing time:             Tue 06 Jan 2026 19:19:16 +0000
ROA not before:           Tue 06 Jan 2026 19:14:16 +0000
ROA not after:            Tue 05 Jan 2027 19:19:16 +0000
asID:                     272081
IP address blocks:        181.189.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:07:9a:86:a4:5a:73:b6:03:44:a8:fc:63:fd:d6:83:19:72:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
        Validity
            Not Before: Jan  6 19:14:16 2026 GMT
            Not After : Jan  5 19:19:16 2027 GMT
        Subject: CN=1063CB1C6C60B2D46B7E0553271A2B78DD238B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:a7:70:5a:2b:2d:fc:c5:bd:c7:78:3b:3a:
                    63:0f:17:ab:a3:09:b8:1a:18:6a:3b:da:83:67:b9:
                    79:a2:fd:aa:51:ff:10:38:87:87:11:09:76:71:8b:
                    02:08:59:af:b7:d2:8e:c3:e7:81:34:50:73:ab:a2:
                    a6:c9:c0:da:bc:4e:58:db:9c:2c:37:e2:bb:82:eb:
                    99:9b:ba:23:36:e3:e7:24:3c:d0:4d:89:06:ce:c1:
                    50:8d:83:a0:13:17:ef:db:b2:fd:05:d5:cb:b8:20:
                    9f:16:fe:93:2e:32:4d:91:3c:3d:9e:b8:bb:f4:6e:
                    0d:8c:b3:ac:a5:8b:f3:3d:dc:a5:37:fa:27:b8:4d:
                    62:c0:f2:25:50:57:21:fb:57:8f:3d:10:01:54:8e:
                    1c:5d:cf:27:60:6d:75:36:6a:b7:ce:18:6e:75:58:
                    75:61:51:3a:6e:a7:d1:89:24:ac:bc:ad:58:e4:a7:
                    eb:58:89:cd:1e:31:7b:1d:78:0d:8f:82:39:da:ae:
                    90:8c:72:06:10:5b:8e:f2:f7:bd:f3:48:e6:4f:08:
                    69:68:9b:0f:cc:9d:1b:e8:28:38:d3:df:ef:81:27:
                    43:1a:44:32:4c:b6:4a:66:d9:d1:28:da:45:b8:45:
                    c0:c4:e9:06:d6:86:3c:a7:91:82:34:2c:85:81:56:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:63:CB:1C:6C:60:B2:D4:6B:7E:05:53:27:1A:2B:78:DD:23:8B:43
            X509v3 Authority Key Identifier:
                keyid:5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35362e302f32342d3234203d3e20323732303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:f6:ba:96:0c:f1:48:70:7a:e1:1e:3a:55:31:58:ff:ac:
         96:9b:4c:f2:74:b2:8b:cd:c8:7c:ce:7e:5a:3d:92:16:4d:98:
         6a:86:fc:52:7a:c6:09:ec:2a:bc:cb:2d:77:f7:f3:a8:59:27:
         66:b0:2d:f9:b9:2c:46:89:04:23:88:07:f0:b0:bc:0b:03:85:
         7b:63:68:5f:db:d8:9b:d5:7d:73:fa:fa:1c:cf:80:5a:2a:00:
         6c:51:5c:e4:3b:cd:e7:fe:ef:4f:1b:d9:d2:34:f3:5f:fb:8d:
         a8:d3:dd:b6:19:72:e0:57:6e:bb:64:b7:f8:b5:95:7d:7c:dd:
         11:c4:ab:fd:05:0b:39:c2:ed:f3:91:01:27:43:da:ac:71:52:
         cf:04:5d:e4:94:82:39:c5:2b:32:dc:33:91:3f:b7:38:58:db:
         e5:b6:45:60:93:aa:44:5f:61:33:02:ec:71:ac:71:1d:e5:1a:
         ab:a4:b1:df:27:97:88:aa:43:ca:ba:b4:79:8d:02:ff:4a:29:
         73:0a:3d:38:38:93:03:f6:c0:47:3a:20:aa:0a:8b:97:28:bf:
         d7:b0:e8:6f:1f:b6:66:e7:90:2a:30:a0:3d:01:91:b6:77:35:
         9d:eb:32:c6:3b:e0:86:43:3f:0c:df:f1:38:d2:f1:e4:37:2a:
         a2:a6:cf:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUageahqRac7YDRKj8Y/3Wgxly1kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUzQjUxOTlFQURBNzMyOUEzOTJFRjE3NDRFQzdEQzhC
MTlCOUFDRjAeFw0yNjAxMDYxOTE0MTZaFw0yNzAxMDUxOTE5MTZaMDMxMTAvBgNV
BAMTKDEwNjNDQjFDNkM2MEIyRDQ2QjdFMDU1MzI3MUEyQjc4REQyMzhCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKOqdwWist/MW9x3g7OmMPF6uj
CbgaGGo72oNnuXmi/apR/xA4h4cRCXZxiwIIWa+30o7D54E0UHOroqbJwNq8Tljb
nCw34ruC65mbuiM24+ckPNBNiQbOwVCNg6ATF+/bsv0F1cu4IJ8W/pMuMk2RPD2e
uLv0bg2Ms6yli/M93KU3+ie4TWLA8iVQVyH7V489EAFUjhxdzydgbXU2arfOGG51
WHVhUTpup9GJJKy8rVjkp+tYic0eMXsdeA2PgjnarpCMcgYQW47y973zSOZPCGlo
mw/MnRvoKDjT3++BJ0MaRDJMtkpm2dEo2kW4RcDE6QbWhjynkYI0LIWBVl2HAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEGPLHGxgstRrfgVTJxoreN0ji0MwHwYDVR0j
BBgwFoAUXjtRmeracymjku8XROx9yLGbms8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjhCMkY2NzNENjYyQjY1QUQyRThBNDU5RkZENTE1MjIy
NDIwQzNBNzRENjEwNjI0M0ExNzEzM0IxNzVFMjI0LzAvNUUzQjUxOTlFQURBNzMy
OUEzOTJFRjE3NDRFQzdEQzhCMTlCOUFDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTNCNTE5OUVBREE3MzI5QTM5
MkVGMTc0NEVDN0RDOEIxOUI5QUNGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI4QjJGNjczRDY2MkI2NUFEMkU4QTQ1OUZGRDUxNTIyMjQyMEMzQTc0
RDYxMDYyNDNBMTcxMzNCMTc1RTIyNC8wLzMxMzgzMTJlMzEzODM5MmUzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb04
MA0GCSqGSIb3DQEBCwUAA4IBAQAqOva6lgzxSHB64R46VTFY/6yWm0zydLKLzch8
zn5aPZIWTZhqhvxSesYJ7Cq8yy139/OoWSdmsC35uSxGiQQjiAfwsLwLA4V7Y2hf
29ib1X1z+vocz4BaKgBsUVzkO83n/u9PG9nSNPNf+42o0922GXLgV267ZLf4tZV9
fN0RxKv9BQs5wu3zkQEnQ9qscVLPBF3klII5xSsy3DORP7c4WNvltkVgk6pEX2Ez
AuxxrHEd5RqrpLHfJ5eIqkPKurR5jQL/SilzCj04OJMD9sBHOiCqCouXKL/XsOhv
H7Zm55AqMKA9AZG2dzWd6zLGO+CGQz8M3/E40vHkNyqips/S
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:11 2026 by rpki-client