This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134382e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          LF/eF1xa8cJwijxeW88NEmHOJXm0LiHtxUQC8PvCWj8=
Subject key identifier:   26:D9:05:47:92:80:0A:D4:D9:7D:0D:68:09:3D:EF:0A:21:63:E9:FC
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       70E901F58D8CD89C7348D3C17D1FF9D473B3BF77
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:56 +0000
ROA not before:           Tue 06 Jan 2026 19:26:56 +0000
ROA not after:            Tue 05 Jan 2027 19:31:56 +0000
asID:                     52323
IP address blocks:        181.16.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:01:f5:8d:8c:d8:9c:73:48:d3:c1:7d:1f:f9:d4:73:b3:bf:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:56 2026 GMT
            Not After : Jan  5 19:31:56 2027 GMT
        Subject: CN=26D9054792800AD4D97D0D68093DEF0A2163E9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:56:f8:e9:d9:79:cc:b8:0d:e9:5f:a8:1d:
                    b3:4a:0b:be:0f:ef:c4:40:89:59:1c:26:b1:b0:a8:
                    aa:f5:e2:f6:b4:cc:42:1c:65:92:aa:45:48:d7:1d:
                    6c:e8:3d:c0:8d:a5:45:65:7d:e9:84:1b:11:85:fb:
                    3c:43:62:53:a1:ef:4f:6a:3e:c8:52:d8:3a:5a:c5:
                    5d:7e:11:39:46:c0:db:36:4f:e1:ae:14:f7:7d:2f:
                    c9:d3:75:b9:da:f6:47:ef:5f:22:66:e0:33:50:d8:
                    6c:5e:e5:f4:0d:ac:59:f5:30:df:24:68:b5:01:c2:
                    e5:d8:b2:c4:eb:d2:9d:d5:24:06:11:63:b7:fc:8d:
                    85:f3:a7:85:15:21:30:c7:b2:31:82:76:bb:4c:b6:
                    0a:65:a1:5e:6d:90:9a:5c:a5:ac:75:36:05:bf:85:
                    a7:bf:ea:b3:3b:01:5d:f6:36:e4:5b:88:f1:b5:46:
                    5c:a6:bb:8c:83:b0:18:30:17:38:d0:7e:b4:0b:40:
                    6b:47:62:d0:51:4a:35:d0:28:f2:ee:b4:fc:b5:9e:
                    e3:1b:7c:f3:7d:1b:81:7b:46:36:67:ee:ce:e6:f2:
                    75:21:52:5f:35:1d:ff:23:7a:d5:2d:a4:c8:fe:50:
                    33:1a:12:53:36:23:b8:6d:c6:bd:4f:22:5c:45:a2:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:05:47:92:80:0A:D4:D9:7D:0D:68:09:3D:EF:0A:21:63:E9:FC
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:d9:73:22:2f:12:07:86:6c:54:35:91:4e:9c:d6:4b:02:
         2c:ca:94:11:75:97:6f:61:90:2e:dd:ed:b8:22:82:4d:c8:ed:
         39:c1:8d:98:7b:06:a7:6e:79:c7:a5:16:20:ef:12:b5:2c:bf:
         cd:d0:18:02:e4:f3:34:bc:02:3d:b7:b7:ad:4f:28:df:e6:1f:
         2d:fc:80:76:a5:a8:51:ac:ad:3e:0a:b1:cb:9b:b5:34:58:f4:
         11:6d:0f:ba:2b:e3:00:87:99:60:85:02:b8:87:fe:b3:b5:17:
         45:e2:48:43:71:66:d9:ef:98:96:38:6b:2e:96:81:6f:27:7b:
         1f:15:5f:88:10:d2:20:31:7d:ac:d9:84:76:42:e4:1e:2f:68:
         be:1e:f2:4c:29:cf:79:96:5f:89:36:bb:de:50:1a:71:b1:58:
         7c:fc:7c:69:eb:c3:9b:c7:f3:8a:5f:57:19:78:0f:49:f8:e9:
         16:21:34:bd:83:b7:e6:72:e8:a8:3c:88:c2:33:80:d2:f5:32:
         3e:20:83:cd:d3:1e:68:d4:60:25:16:db:a0:7d:41:ba:01:14:
         ff:3e:dc:ad:f4:63:92:a4:dd:6c:a4:36:03:e7:ca:b7:ee:2b:
         a4:57:96:37:b9:2f:c8:7c:e7:d8:a3:e8:8d:28:17:c4:f5:13:
         27:00:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:04 2026 by rpki-client