This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3135362e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Fu3g8ozDXloscDTo5UTSXyiOD9bWxtj6WIvflORw9JY=
Subject key identifier:   9E:F7:F1:45:81:56:4D:0B:22:1C:64:9C:B2:05:A4:F1:64:BF:3B:8F
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       09CB0F052B57D90F5CB5241320938EC03F301CA7
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:49 +0000
ROA not before:           Tue 06 Jan 2026 19:26:49 +0000
ROA not after:            Tue 05 Jan 2027 19:31:49 +0000
asID:                     52323
IP address blocks:        181.16.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:cb:0f:05:2b:57:d9:0f:5c:b5:24:13:20:93:8e:c0:3f:30:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:49 2026 GMT
            Not After : Jan  5 19:31:49 2027 GMT
        Subject: CN=9EF7F14581564D0B221C649CB205A4F164BF3B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:7f:01:7e:4f:4c:e7:02:c0:62:2d:52:da:
                    12:3b:f2:2c:69:ca:36:0b:86:2e:64:78:89:62:8d:
                    90:fc:5c:4a:b2:13:80:e6:d9:ad:a8:7d:27:3a:84:
                    ef:5c:c5:f8:e6:4b:b3:26:8b:28:45:ca:48:48:52:
                    cd:7a:f8:8c:44:f7:1f:6c:f0:c8:6e:ab:7d:9e:7d:
                    c0:e3:89:d9:cb:d5:7b:27:16:14:ba:ef:64:06:d3:
                    7a:2a:f4:60:55:75:c6:85:eb:9e:bc:00:d1:be:96:
                    f0:15:96:41:8f:dd:aa:ae:8c:e1:2a:d7:fd:a1:d7:
                    01:25:24:b5:a5:bf:db:fb:ba:71:ee:30:25:32:47:
                    91:2a:a6:4b:d1:8e:ec:51:ff:ba:13:cb:19:d6:81:
                    5a:23:d5:86:e9:18:94:a7:44:2b:6f:e1:78:56:25:
                    21:a4:84:6d:e1:24:3c:97:b4:80:5c:db:1f:13:c9:
                    81:cb:53:b0:ec:d0:a5:b0:b5:3c:e4:fe:02:e4:dc:
                    63:f9:95:bf:f7:e0:ff:81:18:e2:d9:2b:94:85:bf:
                    a2:2e:5b:ff:0d:d5:37:81:8b:49:cc:1e:8d:e8:7c:
                    0e:7c:47:79:90:f6:21:86:fa:8b:a8:cc:f3:ec:a5:
                    03:80:97:6b:31:a6:bc:a9:10:4c:f5:75:a0:b2:78:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F7:F1:45:81:56:4D:0B:22:1C:64:9C:B2:05:A4:F1:64:BF:3B:8F
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:28:7f:6d:80:05:84:24:30:a9:c5:ce:8f:01:1b:59:2b:
         8e:92:ee:8f:2b:94:a4:d3:d2:d0:7b:6a:6d:d8:40:72:80:83:
         69:8b:7a:3c:a1:17:60:cc:f7:4d:49:f0:ea:17:06:5a:74:21:
         f9:33:7a:65:76:af:ee:be:dd:5c:7d:27:e8:c7:49:07:32:4c:
         2f:16:2b:aa:ca:87:12:18:02:6c:94:00:2d:a4:d7:44:6f:b2:
         ae:3c:15:f2:fc:e7:73:41:b3:22:85:19:8f:90:9f:bc:a4:4c:
         11:53:39:e3:f3:80:91:9d:36:89:69:0a:b2:74:1e:ea:32:f6:
         71:ed:b5:5d:12:fd:8b:31:84:64:38:67:21:ea:c8:bc:4e:a7:
         8c:79:e3:9c:a6:29:4e:2f:df:5f:86:29:a2:52:17:cc:19:70:
         2d:bc:70:32:8a:97:d7:96:04:3d:e0:34:58:bc:01:c4:c8:f3:
         4c:86:65:89:ab:1f:70:7e:6e:5b:4b:b2:26:a2:4f:d6:31:c7:
         cf:bd:43:e1:16:a3:7b:09:39:2e:e0:ce:48:0f:df:35:12:ab:
         ba:ef:46:3c:d7:d1:c2:db:d2:f8:99:7a:bd:63:b1:3d:aa:59:
         dc:a0:90:5c:07:dd:99:6b:32:28:93:d0:72:70:6c:5c:46:e9:
         06:fd:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:05 2026 by rpki-client