This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135322e302f32322d3234203d3e20323730303231.roa
File:                     3138312e31362e3135322e302f32322d3234203d3e20323730303231.roa (raw, json)
Hash identifier:          m9UJATFQLPg8RHqbqS4dAUEKtCfZktCS8tSRek2Nl5E=
Subject key identifier:   97:FA:BE:77:91:A3:D4:7B:AE:6D:B4:A6:17:CD:E8:35:03:D0:6A:4D
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       1ED1E16A464B40F4FBE18F3FD7DD43F4E82904C9
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135322e302f32322d3234203d3e20323730303231.roa
Signing time:             Tue 06 Jan 2026 19:31:40 +0000
ROA not before:           Tue 06 Jan 2026 19:26:40 +0000
ROA not after:            Tue 05 Jan 2027 19:31:40 +0000
asID:                     270021
IP address blocks:        181.16.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d1:e1:6a:46:4b:40:f4:fb:e1:8f:3f:d7:dd:43:f4:e8:29:04:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:40 2026 GMT
            Not After : Jan  5 19:31:40 2027 GMT
        Subject: CN=97FABE7791A3D47BAE6DB4A617CDE83503D06A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:41:17:b0:32:5e:e4:2b:6d:d4:7f:3f:2c:
                    e1:a0:9b:f7:e4:7d:3c:3e:8f:c8:04:f3:2a:9d:30:
                    d5:70:5b:d8:88:82:f8:ab:52:23:bc:96:f8:43:bb:
                    b4:15:53:0a:dd:37:47:69:84:44:7e:01:8f:3c:d1:
                    31:f2:76:e2:5e:5c:dd:90:b7:69:96:a9:05:a7:73:
                    60:41:aa:49:98:6a:10:7d:bf:11:2f:aa:d8:e1:eb:
                    bb:f7:98:f9:2d:98:3d:84:52:a7:d9:78:fa:96:d5:
                    97:9f:6c:99:2f:fc:ed:49:ac:5b:dc:f4:18:ca:78:
                    f0:c5:53:47:f7:a3:16:49:c0:ba:21:a8:32:0b:2e:
                    10:01:8f:59:4e:e3:29:bf:f2:a2:95:8c:70:35:4c:
                    ca:8a:ac:be:dc:ed:7a:10:32:1b:c9:f0:af:62:8b:
                    92:16:4b:40:b6:78:5a:8c:e0:ee:87:16:05:10:75:
                    71:f5:5e:8f:d1:68:bf:27:94:cb:0f:bf:9a:4a:0c:
                    c7:a9:85:f8:41:86:48:cf:d9:1b:b9:5a:2a:17:59:
                    2d:4e:41:7a:93:4d:94:01:22:40:57:fd:84:f6:3d:
                    a0:c1:83:70:3e:fb:f5:f3:16:e3:14:5c:ad:2c:e7:
                    d5:b8:0d:b2:e4:c8:f8:d4:3c:c8:9a:13:2a:5c:f5:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:BE:77:91:A3:D4:7B:AE:6D:B4:A6:17:CD:E8:35:03:D0:6A:4D
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135322e302f32322d3234203d3e20323730303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:62:b7:a0:c2:ec:3b:4c:7f:cd:18:a7:82:4d:5a:2c:a5:f8:
         b2:aa:ee:be:34:f9:e6:5f:23:2a:2a:67:63:d7:3e:8a:08:a9:
         0e:8c:19:7c:5e:a8:a9:a2:03:d1:b1:1c:33:fa:a8:8a:e0:c9:
         aa:65:25:c3:05:7c:9e:a4:25:6d:37:3b:e2:a9:b1:2f:26:91:
         31:b7:1e:4a:47:06:97:28:8e:b3:07:59:51:24:84:c0:96:98:
         ac:fc:f4:a8:30:de:c3:93:0a:1a:86:31:90:fd:6c:7f:f8:01:
         74:3a:a0:be:51:0e:c3:59:e2:52:f4:dc:37:de:2c:1c:f6:56:
         0b:6e:a3:1e:1f:76:6f:b8:74:51:b4:c0:33:27:b3:a1:11:e6:
         94:23:36:02:1a:5c:28:b4:24:d4:4b:a7:1d:99:ad:b3:64:4a:
         ba:08:b2:0e:05:9f:f2:d0:9b:9b:fa:bd:15:61:9b:0b:84:08:
         64:86:d9:20:70:6a:28:eb:a4:9b:36:63:95:73:3c:64:1c:8c:
         5f:3c:51:7f:cf:3e:c0:8c:a5:b5:e2:8d:16:ee:d1:25:2c:47:
         eb:e7:90:37:dc:71:ea:a7:8d:1f:f5:01:be:9f:2d:f0:5e:8d:
         91:1a:a8:b5:65:75:90:25:07:e1:15:e5:7c:62:4e:2c:7e:e3:
         58:e3:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:03 2026 by rpki-client