This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3138312e3139322e36342e302f32302d3234203d3e203532343139.roa
File:                     3138312e3139322e36342e302f32302d3234203d3e203532343139.roa (raw, json)
Hash identifier:          IZ7kJf/qvrXu3wN6LphjPoVMEC06whTtwPyySi/W9TM=
Subject key identifier:   95:59:DB:54:FD:33:9E:C0:6F:69:94:48:E8:28:64:DC:7B:7C:A8:2B
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       63C0262CC3E05FF6E818EE48E74268DE04BD25FB
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3138312e3139322e36342e302f32302d3234203d3e203532343139.roa
Signing time:             Tue 06 Jan 2026 19:18:18 +0000
ROA not before:           Tue 06 Jan 2026 19:13:18 +0000
ROA not after:            Tue 05 Jan 2027 19:18:18 +0000
asID:                     52419
IP address blocks:        181.192.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:26:2c:c3:e0:5f:f6:e8:18:ee:48:e7:42:68:de:04:bd:25:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Jan  6 19:13:18 2026 GMT
            Not After : Jan  5 19:18:18 2027 GMT
        Subject: CN=9559DB54FD339EC06F699448E82864DC7B7CA82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:41:43:70:34:3d:75:2d:16:ed:9e:61:dc:
                    ba:fc:3d:76:59:17:86:58:18:d1:87:eb:71:b3:69:
                    80:55:77:42:5c:e7:e2:56:d2:f7:b3:1f:51:e6:0e:
                    f1:e3:7a:99:84:56:96:2d:3d:da:a4:29:74:cd:cc:
                    21:02:80:22:42:57:55:23:66:e5:5d:8d:fa:fb:49:
                    2b:c1:ea:f6:9b:6e:18:ff:28:2c:4c:6a:f3:98:94:
                    92:ff:99:91:db:fc:af:fe:85:7d:ad:a4:4d:4a:ef:
                    5d:45:64:6c:43:7f:18:f7:20:e2:22:5a:3e:82:98:
                    61:63:13:23:be:4d:24:92:10:30:4e:37:e9:37:c7:
                    59:37:83:dc:2f:71:78:87:75:ab:15:29:38:49:15:
                    38:a5:88:8b:28:c0:3f:8f:5d:cd:09:fa:fe:c7:96:
                    4c:d7:8a:aa:cc:cf:2d:1a:08:a2:ec:ca:bb:57:15:
                    36:e5:f9:7e:ff:d1:e5:0a:2f:39:22:f5:02:5e:2c:
                    da:24:3c:e6:f3:2b:d6:2e:e4:36:e0:a8:03:31:d2:
                    d9:4b:ca:2a:c5:01:80:1e:b1:c9:46:be:a6:a3:d6:
                    56:e5:26:c0:bf:2f:cc:be:d6:b7:cc:88:f9:2d:83:
                    f9:93:5a:c6:69:83:58:e8:48:0a:9f:ae:2e:89:37:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:59:DB:54:FD:33:9E:C0:6F:69:94:48:E8:28:64:DC:7B:7C:A8:2B
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3138312e3139322e36342e302f32302d3234203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:12:1d:74:2d:b1:2a:1c:15:23:90:79:69:c1:81:68:bd:96:
         3d:14:26:17:ce:ae:f6:64:c8:6b:1d:ad:8d:e7:96:b5:5a:cc:
         54:d7:d7:56:5f:91:e2:28:23:ab:46:78:54:fd:bd:4b:d0:ca:
         44:97:ab:1d:e4:97:94:e1:83:bb:6c:44:42:f5:b5:72:3e:af:
         80:01:fc:04:2f:1a:f1:47:d8:d1:80:d7:62:2d:96:cc:a4:3d:
         74:91:ba:17:3f:27:4f:c8:87:1b:b9:bc:05:d7:ec:ac:03:07:
         49:be:75:0c:84:9f:4c:5a:49:9f:11:02:83:1f:63:2b:84:9a:
         c0:9e:7a:b3:39:5a:45:80:7c:ac:0e:66:3a:00:32:c1:9c:2b:
         89:25:f4:9d:ac:1f:22:c9:c5:63:0b:ce:c6:e1:cf:20:fe:ca:
         bb:fe:02:d2:b7:cd:58:34:f5:aa:63:99:f6:e7:ac:83:bd:dc:
         8f:61:bd:83:ed:47:0e:15:2b:46:37:5d:35:33:80:b0:19:ac:
         de:ee:4c:a5:d4:df:bc:4a:a2:7a:25:de:83:ec:63:c2:6c:b8:
         05:b9:5e:57:4e:60:82:12:03:9a:f3:64:fb:f8:19:ba:c8:d4:
         ed:3b:7c:2c:0b:bf:7c:b9:fb:a3:4e:43:32:16:ff:34:c3:fb:
         db:8c:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:23 2026 by rpki-client