This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32352e302f32342d3234203d3e203532343235.roa
File:                     3138312e3139312e32352e302f32342d3234203d3e203532343235.roa (raw, json)
Hash identifier:          5GFOZlUR6JvcdJ5gL82KyBq2YA5dCMDE+aop88tVGNE=
Subject key identifier:   15:0F:BD:3E:BF:27:27:45:1D:13:A5:94:1F:1D:40:D0:38:80:95:31
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       2C219C51E5B5B74E053A644134C18B9975500480
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32352e302f32342d3234203d3e203532343235.roa
Signing time:             Tue 06 Jan 2026 19:31:05 +0000
ROA not before:           Tue 06 Jan 2026 19:26:05 +0000
ROA not after:            Tue 05 Jan 2027 19:31:05 +0000
asID:                     52425
IP address blocks:        181.191.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:21:9c:51:e5:b5:b7:4e:05:3a:64:41:34:c1:8b:99:75:50:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Jan  6 19:26:05 2026 GMT
            Not After : Jan  5 19:31:05 2027 GMT
        Subject: CN=150FBD3EBF2727451D13A5941F1D40D038809531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:95:af:8b:08:3b:89:d6:d4:ca:d5:44:af:
                    31:98:f6:33:fa:d0:b1:1c:f7:db:85:21:b1:27:a7:
                    cd:ba:b6:d0:55:c8:c5:0d:e3:02:ca:18:2d:6f:a0:
                    5a:13:79:1a:27:43:3e:03:14:49:2b:27:38:f0:82:
                    c0:e3:cf:ff:7d:a0:87:3c:c9:42:ff:5e:d3:56:7e:
                    e8:5d:c0:35:48:44:55:26:5e:ca:67:31:8d:3c:80:
                    8f:45:23:f0:2f:85:5d:8e:f3:e2:20:31:fb:63:2f:
                    8d:5b:37:54:a5:4e:6c:c0:f2:26:d9:dc:2d:b0:e5:
                    c4:b3:80:a0:8b:73:ba:16:6e:0a:5c:c4:6e:b1:ad:
                    81:02:5f:8e:e9:e8:3c:f6:8e:b4:f3:4c:dc:fc:43:
                    44:83:f5:1e:64:83:fc:f7:11:54:e9:5d:2f:45:d1:
                    c1:61:30:7c:b4:e8:66:87:59:fb:b6:18:44:fb:af:
                    d8:5e:48:a8:0d:40:e7:4d:87:3a:d1:e1:4b:fc:44:
                    32:5a:9b:24:76:36:5c:52:ac:85:09:f8:fc:15:f6:
                    c3:38:69:53:a9:3d:27:2b:21:2f:85:6d:88:0d:cd:
                    f5:9d:19:20:ed:71:9f:25:d1:e3:6a:39:c3:24:e7:
                    7f:7a:ec:0a:60:a0:02:f1:40:37:45:80:2c:a1:98:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:BD:3E:BF:27:27:45:1D:13:A5:94:1F:1D:40:D0:38:80:95:31
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32352e302f32342d3234203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:41:2a:fa:c8:e5:50:4a:9c:23:2f:13:09:7b:df:53:62:e9:
         5e:57:81:ab:6f:da:6b:75:e1:b9:57:d3:a1:e2:7b:90:4f:29:
         7a:36:23:fb:f6:01:4a:36:c1:2f:84:b1:a4:60:30:3b:e8:7b:
         d2:42:2b:f9:09:6f:84:bb:d4:aa:67:fb:b1:6b:42:ed:12:10:
         c2:35:e5:71:a4:36:20:0e:9c:ab:0d:95:3c:a6:80:5e:c7:83:
         54:dc:e9:77:f1:d6:70:8f:d3:3f:f9:e7:dd:d3:1c:89:bb:6e:
         5f:7a:47:2a:c4:a7:45:61:0a:53:49:4c:35:b7:dc:a8:5b:fe:
         e8:ab:b9:dd:02:1e:8f:37:d5:1b:4d:99:80:df:b5:0c:45:5f:
         7d:77:50:d4:a7:59:f5:d0:4f:57:c9:76:30:7c:d9:69:82:e0:
         a1:9d:0e:6b:2d:dd:d6:d9:bd:a3:67:65:82:e1:1d:b8:14:fb:
         fc:f3:d0:b1:64:fa:06:08:55:0a:9e:75:84:8e:b1:ef:3f:3d:
         ac:c8:cf:8a:4d:14:a6:a1:8e:51:54:8d:4b:1e:8e:84:27:bd:
         71:b5:bc:54:41:f8:9c:fc:6e:7a:83:51:c4:e2:13:67:29:76:
         1c:d3:1c:bd:fc:c6:96:1b:c7:8d:22:f8:31:ae:7d:77:8a:2c:
         e9:36:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:14 2026 by rpki-client