This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133322e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3133322e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Ck2iSY8YsgHDWmKFjSbwfzfD/Hwb1jdc6mUoI/kxr4s=
Subject key identifier:   4E:89:D0:20:3D:9C:B5:30:BD:72:64:97:9B:E8:AB:09:7E:2A:2E:4D
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       4E2DB4D46776D7778ECC5AE9ED6B64ADE8381AAA
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133322e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:46 +0000
ROA not before:           Tue 06 Jan 2026 19:26:46 +0000
ROA not after:            Tue 05 Jan 2027 19:31:46 +0000
asID:                     52323
IP address blocks:        181.16.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2d:b4:d4:67:76:d7:77:8e:cc:5a:e9:ed:6b:64:ad:e8:38:1a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:46 2026 GMT
            Not After : Jan  5 19:31:46 2027 GMT
        Subject: CN=4E89D0203D9CB530BD7264979BE8AB097E2A2E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:da:cc:25:04:07:e6:e2:9a:af:b2:18:59:
                    df:2f:d9:18:b2:61:2c:4c:62:74:cb:ea:c5:2b:47:
                    e0:d2:89:d0:39:23:d3:07:88:96:32:31:d6:13:3c:
                    29:05:e3:b3:66:6b:7c:38:c0:fe:bb:43:a4:61:55:
                    06:cd:db:5b:95:3c:9d:8f:2f:93:62:5d:b1:44:40:
                    c4:06:aa:75:2e:5e:e6:ba:2f:7c:96:5e:22:57:dc:
                    e7:e3:4b:62:dc:26:da:3f:cf:52:17:25:08:df:6d:
                    ec:d9:28:61:3f:20:29:df:83:eb:f5:fb:73:b8:50:
                    de:7d:00:70:f5:ca:06:0c:a0:c2:8b:28:2d:2c:4a:
                    90:af:b1:41:43:99:d4:ac:88:57:ff:13:97:ec:6e:
                    33:7c:26:e8:2f:22:55:a9:bd:da:ad:6b:3d:76:1c:
                    94:ff:c4:fb:ba:8b:63:d5:c6:22:5b:f6:bc:bf:db:
                    2a:93:63:e2:c4:d3:d1:42:84:85:0d:3a:0e:0f:4a:
                    dc:64:6a:08:f5:57:c4:01:41:4e:b8:55:b5:c8:67:
                    29:06:b9:4f:f7:97:5c:dd:35:3a:a8:90:37:c9:ca:
                    dc:5c:b3:41:51:f5:dd:8a:5e:fb:5e:dc:59:e0:3a:
                    45:97:8c:e7:e4:24:f8:d1:fb:06:ce:d0:73:8e:db:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:D0:20:3D:9C:B5:30:BD:72:64:97:9B:E8:AB:09:7E:2A:2E:4D
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133322e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:a5:0e:b4:2c:3f:94:1f:52:fe:e0:33:e4:12:f4:14:89:
         a2:7c:ed:e8:39:0e:80:cc:04:ed:cb:5a:61:8e:25:dc:58:bc:
         38:48:15:36:f9:3d:7a:20:7f:17:e1:28:41:7d:ec:63:42:e4:
         f1:16:f5:e5:96:8f:e0:fb:52:ee:10:41:28:88:6f:15:bf:8b:
         23:66:cb:c4:44:8d:bf:9b:d3:da:27:80:2e:1f:e8:4f:33:24:
         5e:2f:58:e5:70:62:73:35:f4:86:b3:e5:0a:43:a8:4c:4a:90:
         90:4e:2e:e5:af:09:af:46:1c:fa:1a:2c:68:77:0a:48:bc:ae:
         a5:24:91:e4:57:f4:72:f3:fa:86:66:e2:e8:04:54:ad:16:ed:
         7d:17:14:b7:d7:29:f2:65:11:a6:f7:e1:c8:d9:0c:fb:5c:19:
         a2:3d:14:26:0e:dc:e3:5e:ad:f5:ff:52:99:89:89:b9:56:95:
         7f:c2:db:ab:da:31:a8:32:ce:06:a8:86:e0:e9:64:fc:24:f7:
         50:bb:14:57:a2:30:4c:07:aa:41:e0:1e:10:de:31:04:b1:cf:
         1e:73:85:85:d7:98:5e:e0:46:3b:bb:4a:51:c1:1c:2e:f4:37:
         8c:9b:d0:0c:07:11:4c:ed:25:7f:81:23:99:af:c7:09:44:9a:
         3c:b8:44:b0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTi201Gd213eOzFrp7Wtkreg4GqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNjAxMDYxOTI2NDZaFw0yNzAxMDUxOTMxNDZaMDMxMTAvBgNV
BAMTKDRFODlEMDIwM0Q5Q0I1MzBCRDcyNjQ5NzlCRThBQjA5N0UyQTJFNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOF9rMJQQH5uKar7IYWd8v2Riy
YSxMYnTL6sUrR+DSidA5I9MHiJYyMdYTPCkF47Nma3w4wP67Q6RhVQbN21uVPJ2P
L5NiXbFEQMQGqnUuXua6L3yWXiJX3OfjS2LcJto/z1IXJQjfbezZKGE/ICnfg+v1
+3O4UN59AHD1ygYMoMKLKC0sSpCvsUFDmdSsiFf/E5fsbjN8JugvIlWpvdqtaz12
HJT/xPu6i2PVxiJb9ry/2yqTY+LE09FChIUNOg4PStxkagj1V8QBQU64VbXIZykG
uU/3l1zdNTqokDfJytxcs0FR9d2KXvte3FngOkWXjOfkJPjR+wbO0HOO24PhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTonQID2ctTC9cmSXm+irCX4qLk0wHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArUQhDAN
BgkqhkiG9w0BAQsFAAOCAQEAfYGlDrQsP5QfUv7gM+QS9BSJonzt6DkOgMwE7cta
YY4l3Fi8OEgVNvk9eiB/F+EoQX3sY0Lk8Rb15ZaP4PtS7hBBKIhvFb+LI2bLxESN
v5vT2ieALh/oTzMkXi9Y5XBiczX0hrPlCkOoTEqQkE4u5a8Jr0Yc+hosaHcKSLyu
pSSR5Ff0cvP6hmbi6ARUrRbtfRcUt9cp8mURpvfhyNkM+1wZoj0UJg7c416t9f9S
mYmJuVaVf8Lbq9oxqDLOBqiG4Olk/CT3ULsUV6IwTAeqQeAeEN4xBLHPHnOFhdeY
XuBGO7tKUcEcLvQ3jJvQDAcRTO0lf4Ejma/HCUSaPLhEsA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:09 2026 by rpki-client