This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230382e302f32312d3234203d3e203532333233.roa
File:                     3138312e31362e3230382e302f32312d3234203d3e203532333233.roa (raw, json)
Hash identifier:          95e9usBXZgSKcLaZP+RXMY+VvNGHLXBb2+eeeF0Kio8=
Subject key identifier:   01:D9:D6:5A:B4:10:9E:10:8F:9A:0F:F0:7E:CD:95:D3:1F:B8:69:63
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       59446904E63591189AF155EB09F338330D87272F
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230382e302f32312d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:47 +0000
ROA not before:           Tue 06 Jan 2026 19:26:47 +0000
ROA not after:            Tue 05 Jan 2027 19:31:47 +0000
asID:                     52323
IP address blocks:        181.16.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:44:69:04:e6:35:91:18:9a:f1:55:eb:09:f3:38:33:0d:87:27:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:47 2026 GMT
            Not After : Jan  5 19:31:47 2027 GMT
        Subject: CN=01D9D65AB4109E108F9A0FF07ECD95D31FB86963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:53:8a:72:81:7e:f0:6a:65:34:12:46:9f:
                    6c:19:86:f8:fb:c0:0f:e5:36:83:86:98:ef:3f:e5:
                    08:6e:51:57:97:69:51:2a:5d:38:6f:e4:41:19:63:
                    e7:8d:cd:9a:35:24:7e:df:32:e0:17:b5:72:85:c4:
                    30:e0:14:01:87:09:35:c0:2c:18:97:19:e2:61:ec:
                    5d:b7:89:02:94:35:92:18:51:1e:98:ff:42:12:fe:
                    5c:6e:3a:3c:3a:28:ff:b1:74:3a:c9:71:68:22:bb:
                    b8:41:0c:39:8e:56:f0:3c:a8:18:97:49:0d:1c:b4:
                    a2:93:9d:d8:6f:20:aa:22:72:a6:58:ed:0c:49:47:
                    e0:3c:40:10:0b:c2:44:33:c4:d6:4a:92:78:86:b1:
                    17:5d:62:de:9c:a7:22:45:d1:60:c1:56:51:6b:20:
                    72:15:d3:8b:28:4f:b5:09:00:17:b6:59:86:f8:bb:
                    db:47:f6:0b:36:8f:aa:78:73:77:61:d7:d7:e8:9a:
                    f9:3b:2d:9b:d9:6a:3a:47:c1:c4:41:7e:01:e8:b8:
                    a5:cf:91:66:e5:10:7b:e8:7d:64:2a:e1:e2:dc:96:
                    6e:e7:c3:ba:dc:9d:91:56:1d:b9:96:29:d0:d6:0e:
                    7a:fb:73:c8:5b:7d:64:34:ab:bb:88:0b:77:eb:0a:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:D6:5A:B4:10:9E:10:8F:9A:0F:F0:7E:CD:95:D3:1F:B8:69:63
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230382e302f32312d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:dd:7b:be:b8:3f:d8:4b:94:fa:49:11:74:60:a2:80:18:
         d9:35:b5:83:3b:3d:02:5c:55:06:d4:eb:ea:05:43:20:a8:37:
         44:12:ab:3c:31:a1:a4:3d:c4:d3:d7:2b:3b:8d:40:45:24:05:
         78:c9:3c:69:60:e5:05:fa:e5:ba:5b:ac:3f:6d:b5:35:2f:f7:
         8b:19:c4:3f:83:cd:10:50:23:38:c5:c6:12:60:33:c9:d7:36:
         4d:5a:24:ee:79:ec:45:af:1b:31:9e:a9:c5:39:08:cb:b8:e8:
         4a:98:0b:93:32:45:73:2b:a8:a4:0d:8a:8c:10:5c:cc:ee:f8:
         c5:12:a1:f9:3b:96:ed:05:0e:c2:f1:06:dd:fe:af:7b:01:9a:
         f3:cf:b0:9b:76:00:6d:d0:12:cd:a2:32:60:07:18:63:93:90:
         8b:ec:a0:26:73:fd:c6:50:c0:c0:79:10:5f:4a:64:73:ec:d0:
         d8:dd:9c:da:35:90:8e:2e:26:11:0e:3e:16:ed:d0:c1:97:e3:
         1c:44:09:07:08:bc:1c:5d:54:3b:ff:0d:5a:ad:fd:9a:c6:9b:
         97:bf:ca:3d:69:45:40:30:7b:c8:66:d9:8c:fe:af:47:48:1c:
         86:f5:56:b3:33:45:bb:b2:b5:36:35:03:1e:ff:ef:cd:c5:cf:
         31:b9:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:12 2026 by rpki-client