This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3137203d3e203236363131.roa
File:                     3138312e3134342e302e302f31322d3137203d3e203236363131.roa (raw, json)
Hash identifier:          2K0IVJnRBbQWupqqGwzUtagZ1b73y0ULK6Zy0UvnCBI=
Subject key identifier:   BC:36:31:6A:0B:99:DD:83:9A:89:7D:26:0C:42:EE:49:96:5A:41:E8
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       60C3ADCF33DC694F947A013CFE2983B47BCC542B
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3137203d3e203236363131.roa
Signing time:             Tue 06 Jan 2026 19:03:06 +0000
ROA not before:           Tue 06 Jan 2026 18:58:06 +0000
ROA not after:            Tue 05 Jan 2027 19:03:06 +0000
asID:                     26611
IP address blocks:        181.144.0.0/12 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:ad:cf:33:dc:69:4f:94:7a:01:3c:fe:29:83:b4:7b:cc:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Jan  6 18:58:06 2026 GMT
            Not After : Jan  5 19:03:06 2027 GMT
        Subject: CN=BC36316A0B99DD839A897D260C42EE49965A41E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:22:a8:24:62:c3:58:e3:46:08:b2:d5:39:
                    b9:5a:b6:4a:e7:53:25:e8:d0:f1:58:79:70:cb:f0:
                    09:7f:98:18:82:e2:b9:22:e1:68:fb:9f:a3:34:fe:
                    c0:9a:9f:f8:72:06:b5:42:44:71:ed:6f:74:53:eb:
                    d5:6a:38:33:ab:04:92:83:41:92:79:50:e1:e0:9f:
                    cf:85:19:6f:20:84:ef:a2:a5:bb:37:f7:c2:44:76:
                    70:9a:8e:03:3b:a8:e8:e2:8c:8b:4a:be:ed:d2:54:
                    4a:82:f9:a0:c6:1a:72:34:93:4b:ff:fa:c7:ce:73:
                    43:3e:f6:bc:f7:07:30:f7:77:23:d2:0f:48:48:fa:
                    cd:70:20:82:c2:17:a9:ce:7d:a2:d8:1e:74:fa:c7:
                    47:17:a7:39:93:0f:aa:b3:8c:ba:aa:1e:f9:ad:68:
                    26:5e:5e:c2:df:c1:27:7b:92:0f:0c:f1:d5:a2:f7:
                    03:fd:99:91:28:71:27:ba:a9:e3:d7:cc:fb:68:13:
                    65:89:b5:38:19:aa:b0:00:6e:04:1c:3b:59:17:a9:
                    ab:8d:c4:df:fd:56:a6:c9:bc:66:53:16:da:93:10:
                    cd:3f:60:82:27:70:d6:34:3f:c6:67:f0:e0:d4:10:
                    ac:be:56:0f:62:85:8d:fd:ca:5f:fa:5a:2a:66:2d:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:36:31:6A:0B:99:DD:83:9A:89:7D:26:0C:42:EE:49:96:5A:41:E8
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3137203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:2e:aa:30:05:07:cd:0b:0f:51:3b:78:4d:c2:bb:c4:4f:
         05:30:1b:ce:20:9f:6e:c1:9c:e7:c5:01:65:dd:42:cc:9d:98:
         9b:5e:e6:24:e2:5b:a6:f3:f0:b3:72:26:5c:a5:12:6e:21:6e:
         72:08:3c:bd:4d:4a:c9:43:be:a7:12:7b:52:42:93:24:51:2d:
         38:27:b3:c8:80:62:66:84:f0:3f:cb:c8:57:b4:f0:69:61:ad:
         67:d7:d4:5a:13:bd:88:00:c5:81:70:f5:94:24:b7:ea:f0:cc:
         e8:dc:ed:38:cb:16:0f:bd:5f:8b:91:48:ab:03:94:dd:de:3b:
         b4:df:f7:a9:42:67:f4:e1:03:56:29:af:e0:c4:6f:e1:68:b8:
         52:60:10:11:27:7d:69:0e:d4:15:83:29:11:6a:22:55:c3:37:
         a0:ad:96:c2:2b:8c:da:7e:62:41:f4:ce:be:a3:92:1b:1a:f2:
         c5:39:e6:20:fd:5a:78:ad:8a:08:23:a1:a8:0c:8e:7f:fa:74:
         94:89:7a:07:21:4e:99:6a:0d:51:ef:b2:42:e9:9f:a3:f1:33:
         ae:cf:fa:72:48:89:5a:00:c0:c0:4e:43:25:a3:5b:a0:2f:8c:
         72:1b:cc:13:62:db:20:8c:3c:7b:9d:a5:80:70:1c:a5:8f:f8:
         12:ca:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:10:24 2026 by rpki-client