This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3234203d3e203232333638.roa
File:                     3138312e3137342e33322e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          6EuifRZ6wj+ivrDkckTq3WWZPIVVqHYdTOrNdQGkn3E=
Subject key identifier:   6A:DF:6A:42:66:06:4E:24:F9:A7:6B:AD:D4:EA:AA:36:8A:19:F1:21
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       078CD8FFD2A76FF22524BF7010E46E8B1B04B566
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 06 Jan 2026 19:17:56 +0000
ROA not before:           Tue 06 Jan 2026 19:12:56 +0000
ROA not after:            Tue 05 Jan 2027 19:17:56 +0000
asID:                     22368
IP address blocks:        181.174.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:d8:ff:d2:a7:6f:f2:25:24:bf:70:10:e4:6e:8b:1b:04:b5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jan  6 19:12:56 2026 GMT
            Not After : Jan  5 19:17:56 2027 GMT
        Subject: CN=6ADF6A4266064E24F9A76BADD4EAAA368A19F121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:4f:ec:c1:c7:9e:0e:9b:c3:00:b9:6b:d1:
                    c7:8a:23:db:f1:eb:5a:66:db:b8:e1:8f:62:2b:f7:
                    52:66:59:6f:e3:fe:0d:ed:21:b4:47:00:95:d6:5e:
                    22:04:1b:6d:76:38:1d:33:87:ea:2a:c5:bc:f2:23:
                    c1:b4:66:f1:2d:14:c1:9d:de:58:93:7b:6f:0c:59:
                    85:3d:f5:13:dd:49:55:a8:c6:22:77:66:fe:de:77:
                    88:4d:db:db:5c:c6:e8:ba:04:f1:d2:25:4e:24:8c:
                    5d:20:75:10:b3:a9:02:fa:cc:fa:2e:6f:0d:9b:42:
                    cc:3d:66:11:b9:db:e5:be:0e:89:47:3d:c8:2f:96:
                    6f:ee:c1:46:c7:ba:c4:98:bc:36:64:3c:36:6f:cc:
                    26:07:92:aa:d4:00:a6:c2:e8:65:74:99:8d:0b:2b:
                    30:cd:19:e5:1c:c6:71:e4:e1:a9:4c:cd:65:94:d5:
                    d1:25:61:41:3d:9e:28:c9:46:7f:b1:5a:ea:8d:d8:
                    69:3d:54:61:ca:ec:18:bd:31:e8:c9:5d:08:46:7d:
                    66:4c:d1:24:ba:db:b5:03:98:d5:4e:d6:7d:9a:d1:
                    d6:fc:d3:e5:be:cf:91:4f:7d:8c:9b:f5:e1:06:4e:
                    8f:c3:3b:42:f3:37:ef:f8:9d:8d:e3:6f:33:b4:32:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:6A:42:66:06:4E:24:F9:A7:6B:AD:D4:EA:AA:36:8A:19:F1:21
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:2a:40:c2:7e:d6:7d:64:44:5b:65:63:e2:3a:69:92:91:
         25:ba:48:39:17:70:fb:ec:fd:8a:b8:25:fb:8e:6f:ca:ec:bb:
         e9:4b:12:28:d7:3a:69:34:cd:42:01:28:e7:af:d4:96:2e:cc:
         43:31:c7:92:c7:e5:76:ef:fb:de:f4:f8:40:2d:bc:19:b7:b4:
         0b:b0:80:21:f9:a9:b4:29:52:4a:d8:f0:e6:72:d4:65:65:fe:
         71:21:b0:62:ec:c8:62:1d:bb:46:af:2c:83:48:5e:d8:60:68:
         b7:1f:ea:01:4b:08:b0:76:3c:cc:09:37:90:bd:b6:6a:dc:c6:
         fa:38:3f:0f:71:66:e9:3b:c9:b7:00:62:e0:0b:d5:60:98:8e:
         60:d8:a6:ad:7d:f6:11:37:4a:39:dd:6e:6e:82:d0:7c:35:2c:
         fd:86:3b:72:c0:6c:7d:77:93:ab:78:84:46:fa:7c:84:fb:29:
         69:2f:c6:bf:d9:54:82:42:98:e1:b2:40:a9:65:eb:07:45:42:
         2e:67:51:d6:9f:7a:12:47:b8:cf:e9:f4:c0:27:3f:f1:b1:33:
         dd:c0:8c:34:02:32:84:f1:33:37:b9:4d:8b:1b:96:e4:1d:ab:
         19:ac:94:e1:b9:b3:9e:8f:7a:94:42:de:3c:cc:11:7b:17:81:
         8a:cf:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:26 2026 by rpki-client