This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233322e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3233322e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Ao5yUmLLDeJl7sjUsNLjBlbx3Ae0h7BjHejqeT3IWg8=
Subject key identifier:   48:F1:C9:7E:0D:38:1A:2E:12:87:4B:55:80:79:31:F4:C2:19:D7:2C
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       0912D36F5C9A8885D8050FC23F5134B5A6BDFC2C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233322e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:52 +0000
ROA not before:           Tue 06 Jan 2026 19:26:52 +0000
ROA not after:            Tue 05 Jan 2027 19:31:52 +0000
asID:                     52323
IP address blocks:        181.16.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:12:d3:6f:5c:9a:88:85:d8:05:0f:c2:3f:51:34:b5:a6:bd:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:52 2026 GMT
            Not After : Jan  5 19:31:52 2027 GMT
        Subject: CN=48F1C97E0D381A2E12874B55807931F4C219D72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:b0:fa:e5:08:32:5e:a0:20:61:10:db:68:
                    c4:9b:fa:5c:3d:df:f1:ca:f5:03:1b:d5:37:ed:0b:
                    6c:d7:0d:d7:75:7f:5b:0e:8f:af:bb:b4:de:25:94:
                    49:65:f2:2b:c7:8f:5d:d7:7d:3c:b2:27:af:5a:96:
                    09:f6:1e:d1:86:1f:88:b9:f3:ac:ac:f5:9f:b8:e5:
                    d4:dd:d9:80:46:ff:61:bd:93:e6:97:c2:bd:d2:ab:
                    2e:e4:04:3e:3c:d6:85:21:49:2c:fc:93:06:3a:c7:
                    3a:ac:52:2d:5f:65:6d:23:e6:07:75:50:76:44:ef:
                    7c:a2:81:2d:43:91:d5:0b:8a:16:66:9a:a7:16:96:
                    1c:79:d9:4e:83:b3:eb:cd:3e:42:78:fc:7b:82:82:
                    c2:6e:59:54:ad:c4:03:6c:41:51:f4:6d:d3:68:e8:
                    90:33:3d:84:ee:13:d4:32:99:7f:5c:20:dd:e7:6b:
                    96:6d:4a:b8:e7:ee:6c:26:b9:cd:e8:1c:3c:6b:32:
                    51:1c:56:5b:32:fb:cb:29:5b:03:22:d5:c8:6f:91:
                    08:99:28:0e:4a:0d:5c:a1:a0:36:55:d6:7d:6e:06:
                    4b:ef:5a:84:5a:48:54:be:8c:76:d5:b1:26:cb:5c:
                    fd:8e:3a:e1:8f:7b:5b:59:7e:ac:a4:4f:fb:0f:74:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F1:C9:7E:0D:38:1A:2E:12:87:4B:55:80:79:31:F4:C2:19:D7:2C
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233322e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:f7:67:17:f0:c8:64:df:22:3f:d7:b6:9d:11:59:a8:aa:bd:
         0f:0c:3a:47:12:ea:be:2d:8c:c5:a0:46:25:a2:e6:e2:d0:a6:
         9b:d6:fe:0e:34:76:db:8f:1a:ed:e6:32:75:cb:d6:3a:15:51:
         33:64:18:b9:41:70:b1:29:bb:e3:ed:28:25:ed:0b:ad:c9:79:
         3c:4b:48:d8:7a:af:34:f1:a0:69:d9:d4:bb:7b:02:e6:43:51:
         f6:73:97:ef:34:53:b8:39:4a:39:43:20:d4:67:bb:82:c7:bc:
         92:a5:50:51:e3:12:de:2e:50:82:f8:41:9e:7b:35:b0:73:41:
         fc:90:f9:8f:49:a8:9d:a2:a5:2b:69:da:b5:43:0e:8c:8d:8e:
         47:2e:60:27:0d:d1:ab:2c:b8:d8:c0:a8:5f:4b:01:9a:9e:79:
         6e:24:fb:4d:00:11:7a:98:57:4d:9e:de:bd:8d:dd:59:d7:df:
         de:72:9d:24:2b:fe:41:5a:9e:97:0a:28:77:0f:4d:d3:b1:46:
         64:8c:4a:ce:0c:83:1e:48:07:42:d8:c5:69:3c:aa:24:28:29:
         9e:cf:4a:53:27:66:43:0a:a0:5f:25:03:24:a0:85:1d:ad:4e:
         8d:93:d4:62:a1:31:b3:20:67:08:51:68:6f:86:4a:1b:77:80:
         3f:28:84:70
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCRLTb1yaiIXYBQ/CP1E0taa9/CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNjAxMDYxOTI2NTJaFw0yNzAxMDUxOTMxNTJaMDMxMTAvBgNV
BAMTKDQ4RjFDOTdFMEQzODFBMkUxMjg3NEI1NTgwNzkzMUY0QzIxOUQ3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gbD65QgyXqAgYRDbaMSb+lw9
3/HK9QMb1TftC2zXDdd1f1sOj6+7tN4llEll8ivHj13XfTyyJ69algn2HtGGH4i5
86ys9Z+45dTd2YBG/2G9k+aXwr3Sqy7kBD481oUhSSz8kwY6xzqsUi1fZW0j5gd1
UHZE73yigS1DkdULihZmmqcWlhx52U6Ds+vNPkJ4/HuCgsJuWVStxANsQVH0bdNo
6JAzPYTuE9QymX9cIN3na5ZtSrjn7mwmuc3oHDxrMlEcVlsy+8spWwMi1chvkQiZ
KA5KDVyhoDZV1n1uBkvvWoRaSFS+jHbVsSbLXP2OOuGPe1tZfqykT/sPdPOdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSPHJfg04Gi4Sh0tVgHkx9MIZ1ywwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzMzMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQ6DAN
BgkqhkiG9w0BAQsFAAOCAQEAuPdnF/DIZN8iP9e2nRFZqKq9Dww6RxLqvi2MxaBG
JaLm4tCmm9b+DjR2248a7eYydcvWOhVRM2QYuUFwsSm74+0oJe0Lrcl5PEtI2Hqv
NPGgadnUu3sC5kNR9nOX7zRTuDlKOUMg1Ge7gse8kqVQUeMS3i5QgvhBnns1sHNB
/JD5j0monaKlK2natUMOjI2ORy5gJw3Rqyy42MCoX0sBmp55biT7TQARephXTZ7e
vY3dWdff3nKdJCv+QVqelwoodw9N07FGZIxKzgyDHkgHQtjFaTyqJCgpns9KUydm
QwqgXyUDJKCFHa1OjZPUYqExsyBnCFFob4ZKG3eAPyiEcA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:12 2026 by rpki-client