This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132382e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3132382e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          qdLDtc8c7fp1a88q3UtxBzstyDsR6vEghYwtc0mxbSQ=
Subject key identifier:   87:BD:CD:1C:13:0F:FB:12:4F:C1:96:BF:3E:EF:48:DB:CB:D3:29:34
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       3B5D2961B1CDB099E91F7F26F9EC3B4651AC0714
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132382e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:47 +0000
ROA not before:           Tue 06 Jan 2026 19:26:47 +0000
ROA not after:            Tue 05 Jan 2027 19:31:47 +0000
asID:                     52323
IP address blocks:        181.16.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5d:29:61:b1:cd:b0:99:e9:1f:7f:26:f9:ec:3b:46:51:ac:07:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:47 2026 GMT
            Not After : Jan  5 19:31:47 2027 GMT
        Subject: CN=87BDCD1C130FFB124FC196BF3EEF48DBCBD32934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:56:24:57:cf:eb:89:32:3d:63:3a:4e:d2:
                    21:22:9a:e5:40:47:ad:ab:50:42:17:d7:51:ea:5c:
                    67:f2:f8:d3:62:29:9b:3a:c3:e1:36:bc:db:b9:b2:
                    cf:f7:35:65:66:f6:4b:af:22:2a:3c:df:3e:41:74:
                    6b:68:f9:84:f7:ac:e0:54:30:e1:93:38:ef:65:44:
                    fc:17:3f:c6:19:a9:43:03:26:d2:8b:86:d0:e9:a8:
                    a5:36:05:7c:27:a8:c3:b6:a2:f7:bb:a3:3d:31:69:
                    08:36:81:61:95:2f:da:dd:65:c2:21:cb:5a:db:55:
                    80:b2:10:b0:c1:33:42:76:e9:72:89:01:73:ad:19:
                    fe:49:1f:ca:99:b8:0f:54:f4:70:f0:a6:32:28:ea:
                    29:8b:14:61:2b:6e:98:20:40:db:e8:82:ab:65:f3:
                    da:ae:c5:69:2c:20:01:80:d3:7e:56:eb:9e:f3:7c:
                    4f:16:f6:e7:a8:31:39:be:79:57:2f:e3:eb:6d:6a:
                    f0:55:b9:2e:d7:94:97:d8:8a:b8:d5:3d:a5:47:14:
                    e4:a1:b8:78:92:dd:0d:6d:56:9a:04:68:f1:92:29:
                    ca:a2:8d:f9:da:39:45:d2:a1:5a:23:c4:e8:62:74:
                    12:3a:c3:5b:9a:71:45:19:d6:d9:c3:a0:b1:ca:25:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BD:CD:1C:13:0F:FB:12:4F:C1:96:BF:3E:EF:48:DB:CB:D3:29:34
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132382e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:3a:ab:12:4e:a6:b3:b7:7e:fc:ae:8c:5b:46:7e:a7:38:
         41:f1:1c:12:b3:f1:45:8c:cc:a1:c6:c9:f8:8c:5a:ad:d3:13:
         d0:73:b5:a7:39:a0:63:e0:7e:00:d8:22:12:43:1c:76:ba:bf:
         52:19:df:47:e8:16:c8:8e:3b:69:2d:f5:78:ff:0c:fb:ac:52:
         fe:8f:92:04:68:ae:05:b4:06:35:a9:63:52:07:b5:94:c1:fd:
         e4:0f:3b:d2:94:38:ca:3e:50:e1:10:c2:de:a0:d9:1d:7d:53:
         99:e2:82:f3:38:11:60:02:38:43:c1:33:7b:4d:b5:47:80:5a:
         db:ca:3f:8d:b7:c0:c0:58:81:4c:dd:0e:b4:0f:a0:d1:44:8c:
         d1:02:9d:f5:e3:54:1a:3c:33:b5:7f:29:9a:fb:ac:26:3f:a9:
         a6:c6:8f:36:56:fd:85:70:d1:61:c3:0d:fd:0f:3a:72:04:76:
         da:d4:09:cd:dd:d4:e7:90:07:18:2a:67:96:b3:47:06:8c:8e:
         09:f9:3f:bb:50:24:2d:00:b3:23:41:db:b2:d5:d8:04:2a:b3:
         c0:20:7e:6e:29:77:29:70:6c:3f:13:92:ce:4e:43:32:49:72:
         62:fa:17:0c:0a:64:9e:63:7f:2e:9b:f2:50:af:25:69:f9:18:
         5c:8a:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:10 2026 by rpki-client