This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3234322e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          V4A5Hl57dxGDvZGgnT+luxWqJqJcCGuCMT3q98Yl42U=
Subject key identifier:   59:F8:3F:25:63:85:EF:16:06:EA:FE:23:0C:51:66:6F:62:8E:F9:C4
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       576C512D2B59F8D0E3E732BFAEAE12398A4EB8DE
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:38 +0000
ROA not before:           Tue 06 Jan 2026 19:26:38 +0000
ROA not after:            Tue 05 Jan 2027 19:31:38 +0000
asID:                     52323
IP address blocks:        181.16.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6c:51:2d:2b:59:f8:d0:e3:e7:32:bf:ae:ae:12:39:8a:4e:b8:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:38 2026 GMT
            Not After : Jan  5 19:31:38 2027 GMT
        Subject: CN=59F83F256385EF1606EAFE230C51666F628EF9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:72:d0:b2:2a:2c:9d:b3:e8:a6:20:93:1b:
                    45:0f:df:c5:4e:5a:c5:35:f7:f7:92:b3:8f:e9:90:
                    63:0b:29:ee:16:bd:1d:df:f2:c2:ba:b6:c7:c0:61:
                    4d:05:d9:2f:52:ab:07:c2:85:12:6d:96:24:2c:ae:
                    60:7d:85:a1:46:3c:05:ee:b4:3c:97:37:29:24:46:
                    cb:b1:d9:cf:36:15:42:03:6d:53:ed:b3:46:0c:21:
                    4a:53:8b:e3:09:d0:69:15:6e:cb:10:b3:9c:37:27:
                    a7:bd:9b:a3:fd:4a:16:21:da:8b:38:75:ff:4f:37:
                    62:b0:7f:f4:c5:5e:0f:a3:26:47:fd:4d:41:54:2f:
                    7f:55:d6:1f:c9:3a:f1:2e:52:fc:b7:ce:3c:7d:af:
                    a9:1f:b9:17:fe:25:62:87:e7:55:6e:0f:23:a9:aa:
                    9b:c9:89:66:76:ee:f5:aa:5b:38:8f:dd:8f:68:53:
                    ac:72:3a:1e:4e:b7:a2:f4:4e:eb:ca:af:e2:68:9c:
                    83:41:26:31:aa:ea:da:45:6b:ed:3e:e5:f8:a2:8c:
                    59:9c:66:ff:9b:2f:6b:e4:f0:25:1e:9a:a7:0b:f1:
                    59:d0:15:0a:71:d7:c7:56:07:3a:a6:d3:72:eb:f9:
                    e0:64:0a:e4:60:50:2e:d8:c0:90:82:4a:fb:b1:1a:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:3F:25:63:85:EF:16:06:EA:FE:23:0C:51:66:6F:62:8E:F9:C4
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234322e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:c4:b0:c3:66:f5:ad:f8:c2:6e:f6:73:1b:08:ac:9b:b1:cd:
         ca:4e:e3:cb:9e:4c:8c:0f:18:74:b1:f1:e9:f8:10:80:84:f1:
         1b:47:a9:4b:4f:7f:78:96:5b:28:81:84:02:c1:17:bf:2c:27:
         cd:50:13:d6:2b:9f:a0:db:08:b7:e9:c5:8d:b3:9b:9b:e9:a2:
         f9:20:bf:e6:a9:bb:cd:60:d6:c0:3c:ad:99:b6:ce:fe:de:f8:
         5c:92:fb:4d:2f:6e:26:fe:6d:b9:cd:96:ce:91:a8:e3:bd:3c:
         0b:ae:e2:ed:60:b8:ac:29:92:10:50:52:b8:20:f3:c9:e7:6f:
         c8:44:5d:b9:94:87:e6:7f:91:91:ed:c5:1a:53:a2:db:15:a3:
         60:88:ac:9b:4f:1f:02:b1:1a:5b:66:c7:19:b6:2b:3e:e1:23:
         59:d2:b4:b9:6b:fc:50:0a:03:01:6c:28:bb:49:a8:8a:80:17:
         99:78:7d:2d:e5:51:c1:0c:44:fd:14:ef:77:6f:ad:32:39:06:
         7d:ed:7a:c5:31:60:e1:05:60:cd:4a:2e:0a:83:ba:7a:54:24:
         7a:e9:7f:72:8e:7f:b6:97:ce:5f:ba:85:17:bb:c8:b8:4b:df:
         6a:25:0e:18:a2:76:cd:26:f7:d2:0c:55:c9:45:22:8e:11:bd:
         6b:57:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:11 2026 by rpki-client