This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3139312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          4bQpvsilKKV1hrvTVsa14eg1DWFetFFWzpnAvXa718g=
Subject key identifier:   C4:70:CA:21:1E:9A:9F:C6:3A:A2:F2:49:23:D9:B1:8A:96:F6:35:F4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       26670D8DB3BE2643C77DFCB08585FE4A7B8D49CE
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:37 +0000
ROA not before:           Tue 06 Jan 2026 19:26:37 +0000
ROA not after:            Tue 05 Jan 2027 19:31:37 +0000
asID:                     52323
IP address blocks:        181.16.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:67:0d:8d:b3:be:26:43:c7:7d:fc:b0:85:85:fe:4a:7b:8d:49:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:37 2026 GMT
            Not After : Jan  5 19:31:37 2027 GMT
        Subject: CN=C470CA211E9A9FC63AA2F24923D9B18A96F635F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:47:cc:31:8b:6b:04:0c:72:71:80:7d:eb:
                    c5:d5:61:ba:48:56:6f:5d:60:8f:be:a1:28:c2:89:
                    d1:b7:b4:e5:19:fd:2f:41:6f:5e:17:30:75:5f:5b:
                    74:a8:e4:f0:fb:0e:41:f5:ee:36:91:a4:d1:f3:dc:
                    c4:c9:a8:39:c4:e8:1d:b1:c8:a4:8c:02:72:e4:ab:
                    4e:f0:85:f4:a3:f3:78:39:40:02:08:65:72:43:26:
                    90:3e:ab:8d:82:32:6f:de:e1:ec:94:f0:76:bf:61:
                    97:2b:cb:4f:92:54:f5:25:2d:1f:1c:b8:6a:9d:9d:
                    8b:37:09:39:7e:9a:09:54:cb:df:16:b0:83:4e:f1:
                    f5:cc:ea:21:d8:6a:a4:f3:30:0d:b6:d7:fa:18:93:
                    2e:4a:ff:66:a5:a0:af:14:6e:ef:5d:5c:45:1a:e6:
                    8e:50:96:49:67:44:40:39:34:bb:0f:be:56:9d:6b:
                    02:e7:88:4e:b2:df:ce:0e:8a:b5:7c:1a:af:b1:a0:
                    ec:8a:cd:ec:7c:0f:b4:9f:bd:d8:e2:66:00:a2:1d:
                    55:fd:32:96:f1:64:9b:da:f7:1c:88:53:a5:e9:4a:
                    ac:3e:96:4d:8f:1d:db:60:f1:b3:a3:16:37:60:d3:
                    9c:aa:70:f6:ec:e2:6e:f0:ca:1a:b4:23:6e:55:7e:
                    ea:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:CA:21:1E:9A:9F:C6:3A:A2:F2:49:23:D9:B1:8A:96:F6:35:F4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:74:71:3f:c7:c3:46:6f:e8:7d:42:0f:11:9d:65:1a:b2:ab:
         63:7a:d7:d8:21:73:3b:0c:eb:2c:7f:48:c2:6c:69:13:66:ed:
         04:fa:89:87:15:4c:c3:06:2e:91:20:89:5b:05:ba:c3:0d:1e:
         5b:de:09:2b:b5:cc:0f:4a:c8:26:30:57:cc:f2:79:b0:cf:46:
         fe:fa:fc:62:90:f8:c7:1f:90:db:6d:81:e7:34:8d:c4:79:da:
         85:b5:19:74:25:1d:6b:01:9c:20:c0:03:78:06:ed:90:83:76:
         1b:7c:70:fa:a2:4c:60:c3:75:2f:4b:42:35:52:b8:dd:18:dd:
         01:79:d5:eb:76:b3:15:41:fe:46:6d:55:a6:86:f6:9d:69:b9:
         34:d1:35:10:f6:d2:99:e7:d5:4b:21:60:36:21:31:e2:02:1d:
         c5:05:af:de:0f:c3:9b:13:fc:1a:fd:f6:72:a6:aa:2a:26:b8:
         e0:c3:d2:d0:6f:5a:bd:14:87:31:45:27:17:11:0d:15:06:6f:
         53:96:26:d6:58:1a:76:06:ce:45:81:05:98:37:06:79:3f:39:
         c5:f4:85:95:84:4d:b8:08:e2:de:c4:01:21:f3:bc:13:b7:5a:
         08:8c:ed:b9:bc:2d:f2:45:39:f2:be:c2:43:34:24:33:cd:20:
         e0:73:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:14 2026 by rpki-client