This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3232342e302f32312d3234203d3e203532333233.roa
File:                     3138312e31362e3232342e302f32312d3234203d3e203532333233.roa (raw, json)
Hash identifier:          NVYYONFvVBM9W4ubvJDuvQkwDknRBA0/5okjaCHD6eI=
Subject key identifier:   12:A5:8C:C0:48:07:A8:CD:BA:A1:13:FD:6D:C9:B0:A1:73:73:BD:1C
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       35DCCC35E5EA08813666BBD17C3EAF172C2969D8
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3232342e302f32312d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:50 +0000
ROA not before:           Tue 06 Jan 2026 19:26:50 +0000
ROA not after:            Tue 05 Jan 2027 19:31:50 +0000
asID:                     52323
IP address blocks:        181.16.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:dc:cc:35:e5:ea:08:81:36:66:bb:d1:7c:3e:af:17:2c:29:69:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:50 2026 GMT
            Not After : Jan  5 19:31:50 2027 GMT
        Subject: CN=12A58CC04807A8CDBAA113FD6DC9B0A17373BD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:53:ae:6f:98:6e:1e:de:01:60:13:71:80:
                    12:67:bc:7c:e5:93:81:e1:a5:c4:3e:bd:25:8a:ce:
                    88:b2:43:89:4d:a5:13:00:7f:cf:77:dc:51:b6:ad:
                    2c:3f:4c:03:bb:05:6e:84:cc:b9:c1:4c:aa:a5:b9:
                    57:8d:90:44:73:f1:e8:cb:ce:45:1d:99:50:54:bb:
                    6c:d2:e4:ae:a2:98:91:20:db:e9:3d:07:e5:d6:26:
                    42:01:3e:7a:0c:ff:56:88:82:f3:c3:03:7e:7b:26:
                    1e:e2:09:eb:0c:04:4d:27:e5:68:e0:bb:66:e0:47:
                    5d:d7:b0:31:36:2a:66:f1:8c:73:1e:9e:7d:b8:27:
                    6c:4d:61:e0:62:74:3f:df:d1:5d:eb:de:06:29:94:
                    13:a5:33:cb:74:51:0c:31:a8:cf:7e:95:be:ff:26:
                    67:94:c8:c4:a0:8c:85:e0:df:4f:fb:2e:3a:a1:69:
                    3d:58:f0:d5:ae:66:3b:08:32:7c:86:dd:90:49:5f:
                    4c:5f:00:2a:d2:42:d1:d2:ac:96:ec:89:6e:f0:b5:
                    f9:38:41:ea:cc:8f:80:02:41:5a:00:4f:57:45:fc:
                    43:66:5d:b9:c9:15:0d:6b:7b:f5:c5:a3:be:3e:bc:
                    cb:33:36:8e:1c:84:3d:59:61:76:90:33:e9:92:7e:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A5:8C:C0:48:07:A8:CD:BA:A1:13:FD:6D:C9:B0:A1:73:73:BD:1C
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3232342e302f32312d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:21:0b:9a:16:93:aa:66:ff:4b:3b:ad:d3:0c:10:fb:63:
         cd:ae:4f:74:af:58:b6:eb:b6:08:fa:3e:ab:00:05:c9:2a:ca:
         27:0d:b9:3c:ac:01:41:69:22:09:56:f5:f4:a9:fd:1a:3c:20:
         9c:53:96:fb:00:36:04:bc:b7:3c:f5:be:8a:92:18:6e:6a:10:
         da:46:a9:1f:61:e5:6b:c5:be:9b:c8:45:3f:87:36:75:11:84:
         4a:3e:cc:61:4b:55:64:0d:8f:6c:64:b5:d3:b3:16:3d:6f:c9:
         ac:17:d0:ab:dd:36:85:54:ab:e4:52:02:2c:bc:b3:04:7f:2f:
         d2:6b:4d:19:81:e2:6d:1a:17:7f:2d:84:40:1c:88:b3:f6:00:
         3e:6e:e6:51:1e:f4:ed:1a:d1:31:67:78:5f:a9:5e:91:a2:f8:
         4e:ca:5d:60:d7:d9:73:bc:79:8c:99:78:ee:45:fc:d3:ec:9a:
         38:f6:fa:ef:b5:6e:cc:89:6b:77:6e:65:a1:ef:2f:78:a3:b5:
         f7:0b:c5:13:51:92:ae:a2:11:62:1b:8f:9d:87:cb:5d:c7:0b:
         ed:ff:a1:07:89:03:31:6b:ce:1b:d0:9d:51:39:31:c0:fb:c5:
         b1:47:6d:34:27:b2:6c:d8:68:27:4a:19:aa:a6:6d:bd:d5:bd:
         bf:0a:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:02 2026 by rpki-client