This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3138312e3131352e3132382e302f31372d3234203d3e2036353638.roa
File:                     3138312e3131352e3132382e302f31372d3234203d3e2036353638.roa (raw, json)
Hash identifier:          YNwVKiIGrCCZ2Y13oGJe/GIOX4FTy3+QVQLm1IfFlSo=
Subject key identifier:   AA:66:8C:36:11:91:26:CC:5B:A3:F2:49:1A:DD:7D:14:E0:1D:A8:6E
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       1DED1C7CCB65F5FD6DCD248E7629D6632635843D
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3138312e3131352e3132382e302f31372d3234203d3e2036353638.roa
Signing time:             Tue 06 Jan 2026 19:38:29 +0000
ROA not before:           Tue 06 Jan 2026 19:33:29 +0000
ROA not after:            Tue 05 Jan 2027 19:38:29 +0000
asID:                     6568
IP address blocks:        181.115.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:1c:7c:cb:65:f5:fd:6d:cd:24:8e:76:29:d6:63:26:35:84:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: Jan  6 19:33:29 2026 GMT
            Not After : Jan  5 19:38:29 2027 GMT
        Subject: CN=AA668C36119126CC5BA3F2491ADD7D14E01DA86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:c8:6c:91:26:44:7d:cb:d1:9b:e3:90:de:
                    1e:8c:8a:cc:37:c0:07:61:99:1e:ab:03:60:16:d6:
                    3c:45:fb:8d:7e:6f:ae:aa:2e:01:6f:a4:91:25:4d:
                    bd:90:9f:42:5f:a2:23:b4:24:6e:30:1b:c1:01:64:
                    17:d9:c9:c5:cf:ae:6b:f5:ed:ec:8a:c5:fe:c1:a6:
                    95:2a:7b:14:8d:22:36:39:24:cf:7c:4a:e4:f5:76:
                    88:0d:78:30:cf:77:67:3d:0f:24:22:03:f9:ec:40:
                    dd:3d:0f:95:5c:92:f2:a7:4a:53:db:b0:03:83:32:
                    12:70:85:54:7e:3f:e5:6d:f3:60:b9:a6:cc:64:29:
                    6e:f4:b3:d6:68:ae:93:8c:9d:9f:23:3d:ae:1c:bc:
                    95:b7:d9:91:21:ea:f3:69:33:7b:fc:a4:4d:d9:e2:
                    d0:b2:9b:98:5c:c4:e3:99:de:f0:21:42:1c:db:f7:
                    56:88:e2:6e:9b:ed:64:9c:0d:4f:12:51:ae:64:b3:
                    d7:cb:51:d6:00:5e:b4:7a:09:5c:3d:10:bb:b4:d7:
                    ed:73:d2:08:1a:61:a9:04:68:f0:1e:57:39:67:c4:
                    bd:7b:75:2f:78:79:19:ab:de:29:cc:d8:32:5c:02:
                    da:2b:bb:59:52:c0:17:c8:e2:2a:7c:d9:c3:0e:14:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:66:8C:36:11:91:26:CC:5B:A3:F2:49:1A:DD:7D:14:E0:1D:A8:6E
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3138312e3131352e3132382e302f31372d3234203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.115.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:91:ea:a2:5e:69:e4:7e:5b:3f:a4:f9:13:b1:8f:ab:26:6b:
         8f:60:29:f8:70:f4:ab:2f:7f:5d:51:97:5d:3b:85:ee:88:b3:
         4b:2e:39:04:1d:36:2f:a0:87:c7:57:2a:c2:af:43:d4:02:78:
         52:42:b0:42:f9:31:e7:3f:76:da:0e:b5:19:70:87:d3:ab:2e:
         83:41:e7:46:93:b6:ff:73:3f:4a:be:20:d1:08:08:2d:ca:e6:
         30:d5:1f:57:5a:19:84:64:c8:c7:0e:2f:bd:39:1c:c1:ec:83:
         77:7d:08:ef:a6:ed:38:fe:46:b7:2f:88:64:65:f2:03:fa:ec:
         7e:84:60:60:3d:63:49:7c:20:38:19:de:11:dc:71:2f:59:cc:
         f3:a4:ad:f6:3a:24:5c:d3:40:d9:a1:8a:39:f2:a9:4c:e3:ba:
         06:e4:c8:b2:1f:62:aa:9b:56:a0:b3:7b:c0:36:5f:12:78:f2:
         75:98:59:e4:48:f2:76:6a:db:07:47:63:c4:44:66:7a:3c:38:
         e5:7a:8d:26:5c:16:fb:91:28:df:ec:c2:46:49:8b:43:66:6b:
         f5:3c:80:90:20:70:45:0d:75:eb:ce:ba:53:5e:47:09:90:cb:
         f2:2f:93:49:4f:67:97:bf:9e:33:ea:0a:b3:42:a0:07:ae:2d:
         13:76:e5:b1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHe0cfMtl9f1tzSSOdinWYyY1hD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3Q0VDOUYxQzQwNjA3NTU0MjJGRTc1NjYxQ0JDMzcx
ODUxNTU3ODAeFw0yNjAxMDYxOTMzMjlaFw0yNzAxMDUxOTM4MjlaMDMxMTAvBgNV
BAMTKEFBNjY4QzM2MTE5MTI2Q0M1QkEzRjI0OTFBREQ3RDE0RTAxREE4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16chskSZEfcvRm+OQ3h6Misw3
wAdhmR6rA2AW1jxF+41+b66qLgFvpJElTb2Qn0JfoiO0JG4wG8EBZBfZycXPrmv1
7eyKxf7BppUqexSNIjY5JM98SuT1dogNeDDPd2c9DyQiA/nsQN09D5VckvKnSlPb
sAODMhJwhVR+P+Vt82C5psxkKW70s9ZorpOMnZ8jPa4cvJW32ZEh6vNpM3v8pE3Z
4tCym5hcxOOZ3vAhQhzb91aI4m6b7WScDU8SUa5ks9fLUdYAXrR6CVw9ELu01+1z
0ggaYakEaPAeVzlnxL17dS94eRmr3inM2DJcAtoru1lSwBfI4ip82cMOFLqhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqmaMNhGRJsxbo/JJGt19FOAdqG4wHwYDVR0j
BBgwFoAUZ3zsnxxAYHVUIv51Zhy8NxhRVXgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTIzRTIxNkRGMzIyOTA1ODM3MDIxMDY4QkNBMzBDNTVD
Qjk1RkRDOTBDMjFCOURERjgzQUMxMTIzMTg2RDI5LzAvNjc3Q0VDOUYxQzQwNjA3
NTU0MjJGRTc1NjYxQ0JDMzcxODUxNTU3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzdDRUM5RjFDNDA2MDc1NTQy
MkZFNzU2NjFDQkMzNzE4NTE1NTc4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkUyM0UyMTZERjMyMjkwNTgzNzAyMTA2OEJDQTMwQzU1Q0I5NUZEQzkw
QzIxQjlEREY4M0FDMTEyMzE4NkQyOS8wLzMxMzgzMTJlMzEzMTM1MmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzNjM1MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7VzgDAN
BgkqhkiG9w0BAQsFAAOCAQEAJZHqol5p5H5bP6T5E7GPqyZrj2Ap+HD0qy9/XVGX
XTuF7oizSy45BB02L6CHx1cqwq9D1AJ4UkKwQvkx5z922g61GXCH06sug0HnRpO2
/3M/Sr4g0QgILcrmMNUfV1oZhGTIxw4vvTkcweyDd30I76btOP5Gty+IZGXyA/rs
foRgYD1jSXwgOBneEdxxL1nM86St9jokXNNA2aGKOfKpTOO6BuTIsh9iqptWoLN7
wDZfEnjydZhZ5EjydmrbB0djxERmejw45XqNJlwW+5Eo3+zCRkmLQ2Zr9TyAkCBw
RQ116866U15HCZDL8i+TSU9nl7+eM+oKs0KgB64tE3blsQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:17 2026 by rpki-client