This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa
File:                     3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa (raw, json)
Hash identifier:          E8Q8f2MvrsHe+nSDfTDPP0zYwp3FPzywErycwo8KCSc=
Subject key identifier:   DA:B4:6B:07:DB:26:9C:F7:04:61:C6:AB:D6:81:28:12:67:9A:C5:C9
Certificate issuer:       /CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
Certificate serial:       0FCFDDA8E41C22D2BAC342F3C074B1F4AD701440
Authority key identifier: 5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa
Signing time:             Tue 06 Jan 2026 19:19:17 +0000
ROA not before:           Tue 06 Jan 2026 19:14:17 +0000
ROA not after:            Tue 05 Jan 2027 19:19:17 +0000
asID:                     265633
IP address blocks:        181.189.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cf:dd:a8:e4:1c:22:d2:ba:c3:42:f3:c0:74:b1:f4:ad:70:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
        Validity
            Not Before: Jan  6 19:14:17 2026 GMT
            Not After : Jan  5 19:19:17 2027 GMT
        Subject: CN=DAB46B07DB269CF70461C6ABD6812812679AC5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:7b:92:4b:a1:a5:e3:4c:07:4f:90:fd:aa:
                    25:c6:90:f2:9c:5b:9f:f9:53:2b:77:db:2b:97:9b:
                    f9:c1:6c:d9:c3:d7:c6:e0:f1:a9:7a:fa:ca:75:e7:
                    9f:ff:5d:62:ff:45:9f:f4:c1:c0:aa:39:4b:81:f9:
                    c9:d6:48:2b:f1:07:60:37:a6:71:07:7b:70:88:28:
                    8e:56:4e:4c:b4:05:d5:3c:eb:16:56:41:00:23:f8:
                    b1:ee:90:30:9a:84:46:91:88:5d:20:eb:9f:37:fb:
                    5d:64:42:9e:fe:aa:e9:94:7e:52:b5:25:59:ce:f1:
                    5c:3f:49:50:81:ef:ef:95:93:a9:f3:b4:3a:fe:40:
                    65:3b:30:8a:79:34:6f:2a:08:77:32:b2:e8:c3:a6:
                    61:6c:b4:11:6e:88:1f:8c:07:73:7a:ef:c7:d8:a7:
                    c0:6d:08:08:ec:ed:32:3c:96:d3:07:c4:1f:88:8f:
                    36:32:70:6f:67:b4:18:98:c5:15:30:eb:e1:fa:21:
                    52:fc:73:b6:18:90:c3:d5:a5:0f:87:af:09:5f:3a:
                    6e:7c:5e:b1:6d:eb:b7:02:08:16:63:eb:fa:eb:10:
                    d9:87:9e:25:7f:5d:ab:c0:b5:b7:6c:93:e0:e2:26:
                    35:ef:c2:6a:77:a9:f9:c5:02:a3:eb:f8:dd:40:27:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B4:6B:07:DB:26:9C:F7:04:61:C6:AB:D6:81:28:12:67:9A:C5:C9
            X509v3 Authority Key Identifier:
                keyid:5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/3138312e3138392e35382e302f32332d3234203d3e20323635363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:27:33:d4:ba:de:6c:aa:80:c2:6c:0b:6c:7b:ed:a2:67:e5:
         d7:38:6a:02:48:af:86:32:23:f8:d0:c6:d1:53:65:88:04:cb:
         f6:29:7c:8b:e9:ac:40:4f:30:7e:a7:32:ce:62:39:08:52:97:
         ce:a6:07:74:54:59:6a:ac:a8:66:8f:54:4a:b0:f7:6b:06:c5:
         71:41:a0:64:e9:03:89:fa:8e:03:7b:25:2a:d0:10:9c:56:db:
         d9:60:22:4f:c6:58:2b:cc:80:69:49:23:f3:a5:30:73:23:02:
         ec:e1:ef:5a:cc:ac:91:12:c0:f6:a1:dd:28:c6:8a:ce:0f:17:
         b8:c6:8c:1d:30:2a:43:01:92:e4:4b:69:cb:d3:25:5f:37:68:
         95:5e:51:4d:39:d1:29:ab:fd:73:0e:ac:36:0d:62:02:33:87:
         97:e6:aa:03:7e:a9:c1:09:70:f5:a3:ec:8c:9c:16:66:c6:44:
         e7:44:ec:e4:d6:15:e7:88:90:1f:6a:c5:0a:75:9d:c8:44:4d:
         86:f9:30:34:31:b3:80:c8:b9:06:4d:3e:78:45:f5:37:ba:2d:
         4d:4e:98:b3:d6:0d:0d:e5:bd:77:0b:e5:a0:da:c1:92:3e:50:
         51:cd:22:e0:67:22:25:80:f0:65:ce:af:80:1f:6d:25:4b:3d:
         3f:e6:4c:92
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD8/dqOQcItK6w0LzwHSx9K1wFEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUzQjUxOTlFQURBNzMyOUEzOTJFRjE3NDRFQzdEQzhC
MTlCOUFDRjAeFw0yNjAxMDYxOTE0MTdaFw0yNzAxMDUxOTE5MTdaMDMxMTAvBgNV
BAMTKERBQjQ2QjA3REIyNjlDRjcwNDYxQzZBQkQ2ODEyODEyNjc5QUM1QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsHuSS6Gl40wHT5D9qiXGkPKc
W5/5Uyt32yuXm/nBbNnD18bg8al6+sp155//XWL/RZ/0wcCqOUuB+cnWSCvxB2A3
pnEHe3CIKI5WTky0BdU86xZWQQAj+LHukDCahEaRiF0g6583+11kQp7+qumUflK1
JVnO8Vw/SVCB7++Vk6nztDr+QGU7MIp5NG8qCHcysujDpmFstBFuiB+MB3N678fY
p8BtCAjs7TI8ltMHxB+IjzYycG9ntBiYxRUw6+H6IVL8c7YYkMPVpQ+HrwlfOm58
XrFt67cCCBZj6/rrENmHniV/XavAtbdsk+DiJjXvwmp3qfnFAqPr+N1AJxkbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2rRrB9smnPcEYcar1oEoEmeaxckwHwYDVR0j
BBgwFoAUXjtRmeracymjku8XROx9yLGbms8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjhCMkY2NzNENjYyQjY1QUQyRThBNDU5RkZENTE1MjIy
NDIwQzNBNzRENjEwNjI0M0ExNzEzM0IxNzVFMjI0LzAvNUUzQjUxOTlFQURBNzMy
OUEzOTJFRjE3NDRFQzdEQzhCMTlCOUFDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTNCNTE5OUVBREE3MzI5QTM5
MkVGMTc0NEVDN0RDOEIxOUI5QUNGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI4QjJGNjczRDY2MkI2NUFEMkU4QTQ1OUZGRDUxNTIyMjQyMEMzQTc0
RDYxMDYyNDNBMTcxMzNCMTc1RTIyNC8wLzMxMzgzMTJlMzEzODM5MmUzNTM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtb06
MA0GCSqGSIb3DQEBCwUAA4IBAQB4JzPUut5sqoDCbAtse+2iZ+XXOGoCSK+GMiP4
0MbRU2WIBMv2KXyL6axATzB+pzLOYjkIUpfOpgd0VFlqrKhmj1RKsPdrBsVxQaBk
6QOJ+o4DeyUq0BCcVtvZYCJPxlgrzIBpSSPzpTBzIwLs4e9azKyREsD2od0oxorO
Dxe4xowdMCpDAZLkS2nL0yVfN2iVXlFNOdEpq/1zDqw2DWICM4eX5qoDfqnBCXD1
o+yMnBZmxkTnROzk1hXniJAfasUKdZ3IRE2G+TA0MbOAyLkGTT54RfU3ui1NTpiz
1g0N5b13C+Wg2sGSPlBRzSLgZyIlgPBlzq+AH20lSz0/5kyS
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:02 2026 by rpki-client