This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa
File:                     3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          QZ8iJ4C6/x4m23l6Wlj4h6CT6YSojBESIClVTcDJut0=
Subject key identifier:   67:C7:7D:12:E1:99:FF:4A:06:A5:FF:01:71:DC:9A:FF:02:8E:1F:17
Certificate issuer:       /CN=211623745083F5BD547E7869C6748AF8F2418ECF
Certificate serial:       65772445696B50A40392D3C1DF7258BAC3FDD714
Authority key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa
Signing time:             Tue 06 Jan 2026 19:47:28 +0000
ROA not before:           Tue 06 Jan 2026 19:42:28 +0000
ROA not after:            Tue 05 Jan 2027 19:47:28 +0000
asID:                     263170
IP address blocks:        181.114.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:24:45:69:6b:50:a4:03:92:d3:c1:df:72:58:ba:c3:fd:d7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211623745083F5BD547E7869C6748AF8F2418ECF
        Validity
            Not Before: Jan  6 19:42:28 2026 GMT
            Not After : Jan  5 19:47:28 2027 GMT
        Subject: CN=67C77D12E199FF4A06A5FF0171DC9AFF028E1F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d2:63:7c:30:76:c7:0d:68:c1:34:4b:aa:34:
                    f8:3f:33:04:87:09:d3:61:7c:51:12:ae:f1:cb:90:
                    e5:d7:c7:04:37:7b:2b:30:92:0e:b8:38:6f:f1:1c:
                    17:89:7e:26:2f:5e:9b:37:38:82:c5:3b:5a:7d:da:
                    f6:9d:33:a2:45:8b:a6:04:e7:68:4b:2b:12:18:ae:
                    91:98:c4:8a:82:c5:7b:b3:68:0d:a7:16:d0:1d:3b:
                    3e:eb:97:bf:2c:f3:e4:0d:92:68:6b:8e:4e:02:29:
                    fa:2c:28:aa:7c:2d:f4:1a:74:0e:7c:78:a7:96:1c:
                    7e:b6:31:da:53:c2:49:5d:8f:4e:a1:74:6a:e5:31:
                    73:0a:a1:2e:c4:df:20:fa:c3:5c:b1:7d:20:af:0f:
                    f6:b0:eb:de:e3:82:d8:24:67:17:da:af:37:c4:e3:
                    40:fc:53:47:f5:16:8d:58:e3:df:e7:48:d6:2a:b0:
                    a8:fb:c6:b5:3b:b1:ea:47:3d:ae:93:c5:f8:7d:aa:
                    3c:4d:48:f7:87:fa:48:22:ea:a9:53:24:1c:ca:11:
                    8e:d8:ce:90:68:dd:bb:41:7e:5c:4c:fc:11:27:de:
                    8b:e8:80:68:d7:93:40:9c:ef:76:ac:24:9d:f4:e3:
                    5b:56:c8:69:6a:e8:d5:86:63:63:3f:5b:ac:a8:ec:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C7:7D:12:E1:99:FF:4A:06:A5:FF:01:71:DC:9A:FF:02:8E:1F:17
            X509v3 Authority Key Identifier:
                keyid:21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35382e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:cd:94:7e:8d:27:8a:11:ea:b3:e0:b9:bf:4b:38:a6:7c:51:
         f8:60:e7:e6:67:13:0d:c4:6a:bd:1a:09:ca:e5:ba:e4:a5:13:
         62:fa:9b:dd:f4:41:09:db:cf:0a:14:94:b5:28:f5:71:32:0b:
         66:b0:3c:30:cb:65:1a:5e:7c:d3:47:3c:dd:a6:b5:9d:85:a4:
         2e:37:e0:04:f6:96:f9:0a:e5:40:98:7c:40:7c:62:7b:80:a0:
         f4:20:95:cc:fb:bf:ae:b9:f5:dd:23:a2:3e:da:0a:f0:e3:f6:
         27:37:05:e3:29:9f:c5:20:0d:27:f5:80:6a:a3:b3:eb:d8:49:
         50:f5:74:9a:9c:60:66:b1:a2:cf:c6:2f:f2:64:9a:d1:53:0e:
         2e:85:89:a6:3e:92:83:b9:4d:b4:a8:53:5b:fd:b8:e3:58:06:
         2e:72:8e:0f:80:f6:b0:d9:0c:be:5e:33:31:34:ab:5d:6b:ba:
         3e:34:51:a9:60:7b:c3:f4:3c:cf:40:61:06:ce:a7:4d:c6:39:
         6c:be:83:ff:8a:5f:73:b6:67:bd:a4:0d:84:3f:76:1e:b1:13:
         68:4a:2c:1a:34:d1:f2:09:99:59:0e:de:2c:55:38:e1:cd:55:
         99:46:f8:22:0e:98:f4:27:7a:ec:2b:0c:d2:b7:7a:a3:7f:a8:
         43:89:5c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:44 2026 by rpki-client