This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3135312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Du7dBoDZDIC/40RpkpxS32XxDwJf9EQe3gao3gh0FP4=
Subject key identifier:   3B:80:E5:6F:E1:1D:DE:A8:7A:77:51:4F:6C:6D:96:B8:4E:16:68:65
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       4C5B56AA1E10AF1990BAA8775325D723A0B83EDC
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:51 +0000
ROA not before:           Tue 06 Jan 2026 19:26:51 +0000
ROA not after:            Tue 05 Jan 2027 19:31:51 +0000
asID:                     52323
IP address blocks:        181.16.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5b:56:aa:1e:10:af:19:90:ba:a8:77:53:25:d7:23:a0:b8:3e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:51 2026 GMT
            Not After : Jan  5 19:31:51 2027 GMT
        Subject: CN=3B80E56FE11DDEA87A77514F6C6D96B84E166865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:b6:04:f5:b4:b0:a4:c0:7d:ab:dc:74:f7:
                    bc:90:7e:49:35:50:1e:61:11:a6:6f:ff:6f:5e:5a:
                    97:d6:81:aa:f6:69:db:da:26:44:60:b0:49:1b:15:
                    5d:5a:61:b3:fe:fa:5d:f4:19:1c:e3:0a:c8:ee:6f:
                    1c:36:e8:f6:64:0a:d8:e2:2a:ff:ae:52:6b:73:fa:
                    7e:ac:54:d5:d7:27:3d:f5:d0:fa:9b:0c:83:6e:b0:
                    bf:da:6d:40:dd:ff:21:ac:b2:62:cb:75:90:bd:58:
                    b4:8e:77:14:5a:63:a0:b1:e8:0c:de:2d:86:41:86:
                    9d:b6:73:8a:92:c4:42:06:e6:d6:c3:1d:e6:1e:59:
                    07:7c:4f:a9:3a:43:bb:df:6d:43:e2:a9:63:e1:fd:
                    3e:f1:3e:f2:86:84:c2:0d:b3:13:61:23:40:91:c0:
                    80:4a:75:75:13:72:72:cd:08:ad:16:03:7f:38:77:
                    0d:b4:30:33:c9:be:84:b1:31:d2:d1:4a:47:ac:c8:
                    04:78:9e:1f:82:6a:9e:6d:3f:67:6e:c8:f3:22:8e:
                    8f:85:65:2d:41:2a:f5:e2:34:cf:84:6b:8e:bb:f0:
                    01:94:1f:c4:e7:d6:22:cd:d7:ec:32:59:ff:b4:f4:
                    d6:42:9c:17:17:fa:cf:d9:11:29:3c:23:9c:50:52:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:E5:6F:E1:1D:DE:A8:7A:77:51:4F:6C:6D:96:B8:4E:16:68:65
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:47:04:a3:25:31:37:e6:76:82:36:05:dc:a9:37:ca:2a:
         ca:27:b6:c1:a4:fd:41:d0:42:61:92:b4:dd:79:28:16:90:89:
         f9:b2:f1:c0:33:51:89:60:26:ed:fb:c3:ac:4d:78:0c:ad:42:
         0b:8d:fe:e2:d0:26:f3:92:e6:02:fd:53:49:ab:dc:f1:77:8e:
         a4:59:61:7d:b5:d4:48:6e:da:6d:cc:d8:77:e8:bd:cb:f7:eb:
         86:9d:69:dc:51:32:d6:91:1e:41:20:60:81:a7:17:42:05:eb:
         18:86:98:49:54:cf:db:3d:19:e3:e0:b1:43:72:03:61:86:3d:
         ba:c8:97:bc:7e:15:6d:b3:48:05:4a:f7:c9:8b:91:5f:1f:d2:
         4f:bd:f5:89:8d:b1:d0:03:1c:52:fa:d0:fb:b7:5e:d1:17:40:
         93:40:7b:a0:36:9e:d9:d1:13:ab:de:a0:9c:81:3a:e4:0a:80:
         e6:ec:d5:8d:de:22:6e:71:2a:72:5a:e7:f1:b3:6b:ef:97:00:
         93:74:42:f2:c4:e9:df:11:df:15:32:e5:31:53:7f:43:d8:3d:
         7f:f5:2e:4c:b8:ff:9c:20:4b:52:4d:23:7e:47:52:7c:1d:a9:
         a0:2a:28:64:83:e4:38:12:c6:de:24:0b:7b:5f:06:c2:20:3a:
         96:0e:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:14 2026 by rpki-client