This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3235342e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          WvSyIhQDrc5lmkQ0rHpJUrCjznj74jvneMS2xWRlI/w=
Subject key identifier:   58:9D:65:4E:6C:9C:BE:87:F8:CB:13:DD:49:DF:9A:B7:C9:D5:ED:80
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       52FAD998937FF52241DFFE1C7F2C0BF7349A0E88
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 06 Jan 2026 19:31:38 +0000
ROA not before:           Tue 06 Jan 2026 19:26:38 +0000
ROA not after:            Tue 05 Jan 2027 19:31:38 +0000
asID:                     52323
IP address blocks:        181.16.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:d9:98:93:7f:f5:22:41:df:fe:1c:7f:2c:0b:f7:34:9a:0e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Jan  6 19:26:38 2026 GMT
            Not After : Jan  5 19:31:38 2027 GMT
        Subject: CN=589D654E6C9CBE87F8CB13DD49DF9AB7C9D5ED80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:8d:1c:bf:cc:2a:dd:c6:d1:6f:9a:e3:43:
                    c7:e8:f4:5b:64:2d:fc:87:b6:26:fb:d1:69:cc:45:
                    3b:5c:11:cd:2a:58:35:20:43:99:ac:40:21:66:bb:
                    0b:c2:65:f1:ee:ff:d6:3c:44:ff:eb:aa:58:21:2a:
                    e4:aa:8f:7b:00:86:14:b9:23:3e:02:67:8c:ec:33:
                    58:68:bc:e5:5e:e6:4a:6f:83:bd:1f:15:e7:69:9a:
                    ad:9e:c9:e5:6b:e6:60:2e:6f:da:c8:75:54:e2:ed:
                    db:e9:d3:10:d8:70:69:87:0d:4a:1e:cb:7f:65:61:
                    93:09:7e:d8:f6:55:1f:ab:cd:09:83:0c:20:2c:30:
                    87:ae:d4:b5:8e:e5:18:64:6b:1d:b7:8b:44:c4:3d:
                    b5:f4:be:d3:81:a3:2e:47:72:ae:4b:36:29:f6:0e:
                    41:84:d6:ac:f6:a9:b7:e8:7d:2d:de:1c:20:fb:69:
                    26:ba:8a:4a:9b:b8:57:02:44:40:0f:0f:b1:6f:ea:
                    5e:a6:23:d2:74:44:6e:15:84:15:e4:59:e3:3e:91:
                    58:80:39:3e:2c:af:83:ae:47:f6:9e:d9:8f:4c:b7:
                    9d:76:b0:34:a8:81:5e:9d:29:5c:e3:8c:59:d8:47:
                    fd:b7:78:96:bf:cf:96:4a:7b:e4:ec:3a:f6:f8:5b:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:65:4E:6C:9C:BE:87:F8:CB:13:DD:49:DF:9A:B7:C9:D5:ED:80
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235342e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:18:75:bd:91:34:6a:c8:90:43:a7:94:5a:f2:13:db:87:b8:
         a5:82:c6:36:9f:79:e3:0d:93:af:a3:de:18:12:04:02:58:97:
         08:1f:ca:37:58:63:4b:d5:79:0e:ed:f6:4c:f4:ec:88:fd:fb:
         cf:c2:03:06:ef:38:2e:a9:70:ac:dd:d8:5c:61:49:0c:3e:e4:
         4d:fd:21:24:34:f9:46:f8:27:0b:ab:4e:9f:dc:4d:0e:e3:56:
         22:2d:4b:84:0e:26:a0:8c:0f:e0:67:b9:aa:e6:9f:91:40:e2:
         f8:03:5b:fa:6b:4b:9f:fe:cb:54:3b:cd:f2:9f:35:35:11:75:
         f4:f5:07:ce:92:56:d2:02:3c:ba:c1:2b:56:b1:2c:d8:8f:65:
         b0:45:ce:00:5a:56:c4:57:8b:fc:48:13:b6:05:07:0a:a3:3a:
         41:59:7b:52:6b:fe:62:c6:60:b3:26:60:b4:a5:90:d7:33:dc:
         38:d4:1d:20:ee:82:75:e9:b9:16:4d:64:24:4a:10:5d:3c:35:
         f3:6b:98:8e:bb:05:6a:98:7d:3c:55:4b:e4:b6:10:c1:f8:6b:
         43:e5:b4:fa:58:14:7d:da:51:53:ca:c7:8c:7f:e9:de:b9:f5:
         33:7d:77:bf:73:02:83:be:8a:9b:3d:24:19:af:6a:9d:6c:ff:
         d0:52:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:08 2026 by rpki-client