This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          L9vNc5lBeefIISuQfdXniVxfs4uf6Jt222YQtkQkZD8=
Subject key identifier:   81:B3:32:07:7D:70:43:DF:77:4B:5F:79:F4:E8:EF:C4:88:CF:E6:D4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       1069B91F0418AC2A339E5D1CCE3283A4C366073B
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:38 +0000
ROA not before:           Tue 06 Jan 2026 19:26:38 +0000
ROA not after:            Tue 05 Jan 2027 19:31:38 +0000
asID:                     52323
IP address blocks:        181.16.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:69:b9:1f:04:18:ac:2a:33:9e:5d:1c:ce:32:83:a4:c3:66:07:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:38 2026 GMT
            Not After : Jan  5 19:31:38 2027 GMT
        Subject: CN=81B332077D7043DF774B5F79F4E8EFC488CFE6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:4d:e7:e4:fd:ff:68:be:f8:41:f9:96:7f:
                    a4:a8:1d:94:8e:8d:08:b4:5d:99:05:04:8a:0b:4b:
                    f8:ad:f3:80:98:0e:6a:d1:06:e2:87:7e:e9:1c:87:
                    88:f1:e9:4b:81:9b:bd:02:03:42:d0:fa:55:9d:33:
                    d7:38:80:c2:47:eb:6b:a8:97:2f:36:67:2a:95:73:
                    62:8f:1e:39:5f:e2:82:b6:7e:d2:6a:5f:5a:a0:bd:
                    5e:30:46:35:1a:1e:1d:71:3f:b2:99:5f:ff:9b:65:
                    2e:1a:50:b9:ff:f0:a1:45:ba:75:12:09:74:7d:80:
                    ec:f7:9c:b5:e9:31:0a:07:ed:8b:80:ea:bb:83:b0:
                    f8:f4:9b:28:1c:f7:50:e2:d6:47:10:cb:93:93:fe:
                    f2:eb:7b:1e:48:e0:5d:e8:5f:4e:cd:c5:bb:28:0c:
                    2f:e6:2e:48:0d:f3:52:c6:5c:9b:b3:b6:eb:56:7e:
                    eb:fc:5e:7d:83:13:8b:e3:ed:61:1f:15:7c:74:11:
                    29:d0:1c:20:0b:80:9a:c0:28:9c:64:ed:45:49:5b:
                    0c:dc:21:de:57:90:5b:72:ce:f0:29:07:d6:e8:b4:
                    25:4f:61:c0:c1:cb:85:f4:a5:bd:86:a7:93:2b:b8:
                    6f:21:e4:eb:b2:e9:97:15:0c:f3:3d:f3:b2:0b:86:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B3:32:07:7D:70:43:DF:77:4B:5F:79:F4:E8:EF:C4:88:CF:E6:D4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:34:7a:50:7a:e3:35:ce:a4:c5:4e:22:30:8e:4d:39:7b:
         49:00:1e:e7:2d:21:36:21:3f:fc:1a:ca:4a:47:f1:ba:26:a7:
         50:b2:56:8c:0e:61:9a:cb:d7:fe:9d:01:92:c0:ed:8f:13:d8:
         6f:d2:55:ed:0a:b7:21:0a:08:e8:8d:e6:b8:30:36:08:6e:eb:
         a6:9d:88:cd:bb:09:2a:9e:c4:cb:90:e6:a0:e5:a6:ef:c0:07:
         5d:c8:1f:e8:d0:f2:a8:6e:00:ec:56:c6:ba:05:fb:b6:cb:19:
         c2:4c:46:75:08:10:78:45:b1:25:81:b6:a5:b8:0d:88:6e:04:
         15:51:6c:cb:8a:fe:bc:e4:99:cb:79:b4:ac:23:21:d6:40:3b:
         9f:a1:a1:b6:bc:2d:00:fe:a1:d2:64:53:6a:30:0e:71:fd:b7:
         c5:97:30:cf:f0:95:61:1f:cc:bf:40:35:91:3d:e4:db:27:70:
         2b:e0:b5:b0:96:4b:2b:5f:1e:a1:24:64:e8:0f:57:ed:8f:4f:
         ea:2a:48:be:cb:22:07:4e:64:ee:32:17:e9:4b:16:21:51:57:
         ac:60:c5:d7:b8:5e:56:ac:94:85:47:bd:8f:b5:e1:20:4e:ed:
         55:9b:06:49:03:99:94:04:47:8a:c8:fb:e2:7b:8d:eb:dd:a0:
         4b:c0:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:15 2026 by rpki-client