This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa
File:                     3138312e31362e3133362e302f32312d3234203d3e203532333233.roa (raw, json)
Hash identifier:          m46qrwq4Msj8lg9fLXv/rw6dfn5HEld8qFUalRUqkEM=
Subject key identifier:   E6:67:64:0C:47:BA:50:D8:24:4D:47:4E:DC:36:91:3B:28:4C:95:E4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       311AF3570226F5B83E1369A002E6FE4183C610F6
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:43 +0000
ROA not before:           Tue 06 Jan 2026 19:26:43 +0000
ROA not after:            Tue 05 Jan 2027 19:31:43 +0000
asID:                     52323
IP address blocks:        181.16.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1a:f3:57:02:26:f5:b8:3e:13:69:a0:02:e6:fe:41:83:c6:10:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:43 2026 GMT
            Not After : Jan  5 19:31:43 2027 GMT
        Subject: CN=E667640C47BA50D8244D474EDC36913B284C95E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:d7:e0:c8:62:e2:3c:c1:f8:ad:f2:e3:63:
                    1e:5e:bb:84:e7:70:47:2a:f5:3d:d9:63:a3:1d:d1:
                    08:4d:41:45:b5:9f:9a:68:ec:27:8b:df:be:8f:a5:
                    dc:07:92:13:37:a1:09:c7:82:35:65:e2:f6:6b:9c:
                    40:3b:3d:e7:af:70:56:50:7f:e8:b6:cc:6f:99:f7:
                    8f:ea:6a:db:c1:9d:9c:d9:85:3f:8b:e3:39:57:46:
                    7d:31:37:e7:6a:0c:c0:68:5b:20:d2:77:83:43:91:
                    44:1f:3c:03:39:23:01:00:c1:4c:29:52:7f:41:7f:
                    c1:4e:0d:8f:d6:fe:29:07:2d:02:bb:27:9f:73:1a:
                    66:2b:bf:c8:09:7e:d9:d8:a5:d6:29:9a:3a:01:3b:
                    9a:37:39:57:5b:ff:58:bf:a9:c3:92:bc:02:8f:e4:
                    c4:da:cf:dd:32:ba:c6:db:a4:1e:51:a9:6e:08:9e:
                    10:68:57:2b:d4:c8:e5:a7:a2:d9:8e:ee:23:bb:f4:
                    4d:dc:08:bd:aa:b4:2a:2b:c1:4e:fc:38:01:62:ba:
                    55:37:1d:91:75:09:1d:5d:74:bb:a1:88:f1:e2:81:
                    eb:ac:a8:e9:dd:13:cc:2c:f1:43:f1:f0:0e:fc:55:
                    ed:86:91:ef:bb:53:9e:9d:7e:14:35:8e:61:f0:64:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:64:0C:47:BA:50:D8:24:4D:47:4E:DC:36:91:3B:28:4C:95:E4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3133362e302f32312d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:de:57:17:4b:30:2a:26:e4:d4:ce:91:d2:02:68:ef:29:45:
         19:98:9b:5d:7b:72:48:f2:16:4d:fd:5a:6b:b8:fd:af:5e:dc:
         a0:d9:2e:a3:fa:ad:22:51:35:22:28:40:06:e2:9c:16:b6:8e:
         59:3f:93:a1:88:fb:9b:3e:6d:57:7f:09:4b:53:7f:bf:58:ed:
         e6:66:86:87:4c:f8:81:1d:05:27:e1:ff:ed:a6:ce:fc:3d:07:
         96:31:cd:a8:78:67:d1:9c:16:1f:8e:fd:e4:b3:cd:23:bf:3b:
         f8:47:18:81:87:17:7d:6f:3d:82:1a:af:84:e1:45:d9:1d:02:
         2d:56:4d:08:a0:cd:35:17:e7:df:db:00:03:6f:90:b9:e9:be:
         37:c6:76:a6:9d:33:aa:90:93:c0:b1:18:b3:62:7f:b1:12:13:
         fe:03:61:eb:6b:3e:46:dc:da:c6:40:3a:b5:d8:27:42:38:1e:
         03:3b:db:5a:69:c6:b3:95:bb:ea:3c:b2:15:dc:2e:2c:0b:0a:
         07:d7:3c:dc:83:38:fc:66:f9:b4:d0:fa:29:5e:06:e7:ef:a7:
         47:5b:1a:8a:b5:8f:9d:7e:e9:6b:bb:01:26:40:62:2b:c0:67:
         26:e2:5a:c5:a1:d3:a9:59:47:fd:22:ee:a4:bc:58:46:dd:aa:
         dc:15:f4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:10 2026 by rpki-client