This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa
File:                     3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa (raw, json)
Hash identifier:          cAZgiMzE2tXvwRhX6CUqkC2m959GWaTMgw+/WqkHN/Y=
Subject key identifier:   9C:3F:64:82:4D:F5:70:46:FA:5A:19:1F:D7:10:05:40:76:63:82:8B
Certificate issuer:       /CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
Certificate serial:       4C3E70964CCB72BF2FA379BB49A899A86660BE7C
Authority key identifier: 16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa
Signing time:             Tue 06 Jan 2026 19:24:34 +0000
ROA not before:           Tue 06 Jan 2026 19:19:34 +0000
ROA not after:            Tue 05 Jan 2027 19:24:34 +0000
asID:                     272024
IP address blocks:        181.189.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3e:70:96:4c:cb:72:bf:2f:a3:79:bb:49:a8:99:a8:66:60:be:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
        Validity
            Not Before: Jan  6 19:19:34 2026 GMT
            Not After : Jan  5 19:24:34 2027 GMT
        Subject: CN=9C3F64824DF57046FA5A191FD71005407663828B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:54:e0:06:68:1b:cb:50:7f:13:ac:f6:c8:
                    d3:0e:66:c5:74:43:66:7f:b0:ec:25:65:12:a9:87:
                    6a:d5:cc:a0:99:50:0b:5d:0f:1c:85:c5:43:90:07:
                    63:94:a1:3c:c8:d8:70:3d:11:99:4d:74:c6:44:8d:
                    a4:85:a1:b4:4a:61:5b:f1:3a:07:a0:49:61:1b:be:
                    22:57:90:a4:4f:ed:5c:1f:54:6e:06:47:ff:2e:4d:
                    21:ad:72:0e:19:62:99:9a:82:02:52:69:85:8b:9e:
                    25:23:82:59:57:72:c3:1f:ca:b2:dc:06:47:40:27:
                    4b:33:35:1e:1e:52:11:79:3e:3d:ee:45:67:33:83:
                    92:a0:3c:f5:03:de:d5:80:11:83:14:3a:03:2a:e2:
                    d1:39:d0:55:d7:04:fc:0e:86:38:30:a0:1f:83:2b:
                    0d:cb:7a:60:09:ad:5d:3a:ac:48:ee:d3:06:42:6a:
                    79:bb:f6:6c:41:6b:6c:e1:e5:7f:fc:cc:14:f5:be:
                    c8:0e:74:33:07:4a:cc:f8:c5:28:34:fc:f2:20:dd:
                    8c:f0:46:b0:b8:79:40:15:c9:5f:07:92:4e:a2:ff:
                    25:bf:e1:b0:a4:3c:fd:08:ba:22:f9:ad:41:33:49:
                    29:97:03:94:0d:70:3a:f1:ff:e5:17:7b:23:fc:7c:
                    4e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:64:82:4D:F5:70:46:FA:5A:19:1F:D7:10:05:40:76:63:82:8B
            X509v3 Authority Key Identifier:
                keyid:16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:ff:55:77:0b:7b:ba:24:58:22:6e:af:b6:d1:09:6f:53:
         53:d4:b1:86:6b:53:6f:f3:80:b2:fd:ad:e6:cf:57:eb:c5:bb:
         71:f8:bf:1f:51:72:d0:e7:53:f2:01:7c:f4:62:1b:0f:34:aa:
         31:78:f8:44:d8:ee:2b:45:2c:20:15:cd:82:da:4f:20:c9:3c:
         50:72:3d:39:2d:d7:f3:c4:28:73:d1:3f:e3:0d:02:53:ea:78:
         ca:4c:fc:26:e4:9c:24:7b:25:d8:78:c1:95:1d:5e:2d:28:95:
         3d:8d:21:2c:56:78:21:6e:49:36:b5:2c:01:7b:71:39:f2:42:
         2c:c1:e4:90:5a:2b:96:7f:44:58:6c:e0:00:46:ba:86:49:34:
         20:e8:57:e1:ac:1f:c7:ab:01:24:21:6c:31:dd:6f:6f:ca:2a:
         8b:03:41:7b:15:9d:df:70:f8:bd:8e:80:2f:b3:09:e6:56:63:
         39:8b:04:30:f1:2c:ea:81:f5:c3:94:75:45:91:ba:d7:61:ec:
         77:1e:7a:64:e9:37:9a:9e:c2:2c:a8:2a:f4:0f:b0:17:1f:ea:
         1e:b7:e4:d8:ff:0f:a9:e7:99:87:6c:1a:7a:ef:96:cd:2a:a0:
         f7:a8:a6:ee:04:d3:e3:68:58:c0:fa:6d:21:90:a8:f7:82:4a:
         d0:e4:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:18 2026 by rpki-client