This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136342e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3136342e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Xlv4lg2V5TlRtYuuZgMDOAptACqYDjFexbol3LzhflA=
Subject key identifier:   02:A8:89:AA:58:C1:67:70:A6:27:D9:1D:68:BD:F7:FB:F2:85:15:04
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7CDA2DF7A21F83E6DA30B7009DF7725F3EA48280
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136342e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:44 +0000
ROA not before:           Tue 06 Jan 2026 19:26:44 +0000
ROA not after:            Tue 05 Jan 2027 19:31:44 +0000
asID:                     52323
IP address blocks:        181.16.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:2d:f7:a2:1f:83:e6:da:30:b7:00:9d:f7:72:5f:3e:a4:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:44 2026 GMT
            Not After : Jan  5 19:31:44 2027 GMT
        Subject: CN=02A889AA58C16770A627D91D68BDF7FBF2851504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:a8:87:81:71:9c:05:f1:f9:7e:3e:4c:af:
                    2e:74:6e:41:7e:de:31:e7:b8:c2:ac:e1:12:f0:ef:
                    7a:af:05:4d:aa:71:a2:b1:a1:76:e7:c5:b2:6f:f7:
                    71:01:be:9d:c5:63:c8:7f:9b:fb:6e:5a:df:bd:b1:
                    09:58:9b:3b:90:b4:18:e2:30:a1:a7:42:a6:3b:83:
                    c6:20:d5:7f:9e:11:bc:f4:f4:8a:91:45:f1:c3:78:
                    85:7f:eb:8e:29:38:a3:83:16:62:f1:51:f2:60:9c:
                    b7:56:56:15:24:a5:b3:af:95:4f:4f:80:cb:01:d6:
                    dd:a4:db:78:04:09:77:4e:d9:74:bf:9e:6a:56:20:
                    69:2c:4a:ce:3d:b3:87:a9:a7:01:69:2b:11:e4:72:
                    a8:d5:3b:0a:5e:00:b0:3b:2a:30:51:94:5f:9d:c3:
                    b9:3d:5f:d3:65:13:7c:4e:16:a7:19:d2:3c:21:a6:
                    2f:0b:08:0f:81:27:c1:b4:71:46:51:2e:77:c5:d0:
                    88:19:b6:1a:b8:e7:e4:d9:66:33:cf:31:6c:ec:6f:
                    3e:73:08:b9:6c:e6:a2:9d:71:e4:20:15:6b:1c:7c:
                    50:81:64:1e:0f:47:b0:8b:47:59:b1:23:d7:d3:2e:
                    b9:7e:a2:ae:41:b9:09:73:07:70:42:64:23:85:63:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:89:AA:58:C1:67:70:A6:27:D9:1D:68:BD:F7:FB:F2:85:15:04
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3136342e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:7c:ea:cb:42:15:35:98:78:a7:51:c5:fe:39:55:b8:b5:
         55:c1:c8:d6:4d:6f:c2:fb:02:99:f9:7a:45:e4:3f:84:0a:31:
         95:65:18:fd:09:0e:8f:0b:a2:b3:57:25:94:59:21:20:97:eb:
         e4:5b:c5:8e:64:2a:25:1d:0e:7a:94:77:fa:1f:de:a3:54:b0:
         44:e6:3d:20:08:72:8e:99:2d:46:94:5e:e3:f7:d0:34:6b:de:
         bd:67:57:59:31:80:15:a5:a1:80:9b:c6:8a:9a:e6:e5:2a:c1:
         b1:cb:2e:a8:c3:54:88:fd:42:65:2a:46:ee:ac:07:0b:77:f1:
         a7:53:64:ff:de:29:cc:81:ef:95:59:fe:1c:47:5b:ee:e1:c5:
         00:9c:00:c0:8d:b1:a8:ba:f0:10:54:43:0b:90:f5:0b:d4:83:
         4c:3c:d5:57:c9:de:86:6a:49:68:7d:a3:0c:f3:63:7f:8d:2e:
         d0:54:68:99:c9:60:08:87:ac:95:b4:f6:fc:8b:f6:06:74:8b:
         a0:4e:21:05:44:b5:69:8f:34:24:c5:77:ab:e5:4f:e8:5f:fa:
         3d:99:c0:89:c4:8b:2c:86:01:89:d9:57:68:53:46:b7:88:41:
         ff:e0:76:59:e7:82:87:0e:f7:fa:c7:f7:6a:87:de:44:ef:a8:
         67:34:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:08 2026 by rpki-client