This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137332e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137332e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          bPBerlAD9dX/krlCa2U8Sb0rvkagFwrmP/nCqZIFZPw=
Subject key identifier:   FB:90:FC:15:EE:17:9B:0C:B5:AC:E5:50:91:BB:8F:29:28:F7:18:47
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       625FA3C8A15B62504FE1FCB3787C7BDC1B9D171C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137332e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:48 +0000
ROA not before:           Tue 06 Jan 2026 19:26:48 +0000
ROA not after:            Tue 05 Jan 2027 19:31:48 +0000
asID:                     52323
IP address blocks:        181.16.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5f:a3:c8:a1:5b:62:50:4f:e1:fc:b3:78:7c:7b:dc:1b:9d:17:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:48 2026 GMT
            Not After : Jan  5 19:31:48 2027 GMT
        Subject: CN=FB90FC15EE179B0CB5ACE55091BB8F2928F71847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:8e:f1:87:b6:ff:58:b5:7f:26:ac:f3:56:
                    22:c8:ab:3a:0c:2b:e5:fd:77:56:49:cb:53:dc:0e:
                    ba:d8:c2:13:e6:ea:31:b0:17:a6:30:35:6d:a2:17:
                    e2:c4:7e:02:69:fb:f5:01:6b:5b:a5:c6:52:aa:00:
                    25:d1:ec:02:97:b7:57:9e:18:51:a8:da:95:95:12:
                    bd:c9:af:c8:8f:70:dd:35:4c:6e:24:0b:59:c9:62:
                    7f:df:e9:7b:12:46:c4:b0:a6:7c:35:da:cc:b3:4f:
                    cd:26:16:30:32:80:2c:59:46:2a:fc:3a:f6:d9:f2:
                    b2:4f:01:58:e2:d3:9d:f3:05:a2:bc:a6:36:c3:42:
                    b6:9a:cc:67:2f:07:aa:da:31:93:d2:d1:e5:38:4f:
                    c4:02:c6:dd:8d:bf:c2:24:7c:f4:31:3d:3f:0c:17:
                    3a:34:78:85:b6:5b:25:78:b1:af:50:55:b4:06:8a:
                    da:0a:71:60:a8:af:ad:8c:67:88:60:59:c1:1e:5b:
                    dd:22:1c:01:04:54:03:51:c6:5b:02:d6:7d:01:7c:
                    48:1f:d6:ec:a5:46:a3:ac:75:da:08:34:58:c9:0d:
                    14:01:8f:bf:f6:7f:98:71:e5:29:33:a0:b3:3a:ec:
                    43:86:fa:b4:e4:5b:d3:d5:f5:ea:7a:13:45:6b:66:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:90:FC:15:EE:17:9B:0C:B5:AC:E5:50:91:BB:8F:29:28:F7:18:47
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137332e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:fa:c1:01:2e:89:1c:d8:27:25:95:b1:95:41:9e:5f:3b:5e:
         e0:11:d8:b8:c0:1c:44:55:63:1b:cf:2e:b7:00:c2:9a:33:70:
         91:64:f1:3d:c3:9e:45:f8:6c:af:8e:dc:78:d2:a2:16:8c:e2:
         7d:7c:dc:a1:71:7e:db:eb:6d:d7:8d:06:96:a3:70:3f:19:9e:
         3d:47:3b:d7:5b:d4:67:6c:58:64:94:63:67:c3:53:be:46:6a:
         00:fa:9c:2c:1e:3c:67:c3:11:88:c0:37:8b:5c:db:03:96:42:
         1e:61:e4:6f:8a:4e:df:12:f2:4b:ee:30:4d:ed:c7:01:73:ab:
         9f:31:fb:58:75:eb:bd:af:94:b4:cc:84:25:44:b0:04:9a:f3:
         34:9c:56:3d:02:94:d6:6b:6e:4d:54:e4:0d:63:1c:d9:5c:51:
         06:a5:3e:29:a1:58:0c:d0:f2:1c:a6:1b:48:06:ed:07:d1:d7:
         1a:55:e7:d8:7d:75:fd:ba:63:ef:a3:26:ad:f8:f2:c7:d4:fa:
         6d:e0:57:4c:f0:38:ca:12:5a:39:d3:28:5e:68:5b:d9:a8:a3:
         5b:c6:74:6e:3d:bb:1a:0e:f9:b7:d8:1d:02:1f:e4:26:dd:42:
         87:b0:12:f6:45:16:08:52:43:19:f7:66:61:67:83:ab:e3:bf:
         bc:68:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:04 2026 by rpki-client