This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3233322e302e302f31372d3137203d3e203237363935.roa
File:                     3138312e3233322e302e302f31372d3137203d3e203237363935.roa (raw, json)
Hash identifier:          acgb3NVserJf0o3pi+jx8dRtgdyNsc4mpz0e+ZIDbn8=
Subject key identifier:   F4:E5:DA:53:ED:AB:3A:56:21:73:C7:27:AF:09:B7:B4:97:46:C9:81
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       5BD84B1FB8B11884ABB41AC089CF3F16B80887D0
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3233322e302e302f31372d3137203d3e203237363935.roa
Signing time:             Mon 17 Nov 2025 19:52:55 +0000
ROA not before:           Mon 17 Nov 2025 19:47:55 +0000
ROA not after:            Mon 16 Nov 2026 19:52:55 +0000
asID:                     27695
IP address blocks:        181.232.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d8:4b:1f:b8:b1:18:84:ab:b4:1a:c0:89:cf:3f:16:b8:08:87:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Nov 17 19:47:55 2025 GMT
            Not After : Nov 16 19:52:55 2026 GMT
        Subject: CN=F4E5DA53EDAB3A562173C727AF09B7B49746C981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:ba:37:7c:3d:05:fd:e3:9d:e8:29:55:76:
                    ee:e4:b8:79:5f:85:d2:e8:b3:4e:3f:26:49:09:67:
                    ed:b2:0f:54:ce:9a:bb:99:9f:f5:3a:ac:3b:6a:6a:
                    68:4b:1d:1d:78:4a:a8:de:e6:83:d3:cf:7d:14:a7:
                    d4:41:26:b1:c9:b6:e8:7f:df:11:57:c1:ef:a6:3e:
                    36:a8:0c:82:5d:1e:52:36:e9:86:76:e7:c4:9d:dc:
                    73:ac:dd:f7:0f:62:be:e5:33:9c:1b:b3:89:c7:a1:
                    ff:a7:38:91:aa:83:67:62:b4:3d:e7:b5:56:e4:a9:
                    fc:03:39:9f:7d:0a:fe:ff:a7:a1:a7:c4:1e:16:0c:
                    99:ad:d5:2c:bf:28:29:47:43:88:f8:96:f4:6e:0b:
                    c4:3c:1b:97:a9:2b:93:06:69:69:97:9d:a9:63:2b:
                    8b:a0:71:48:ec:20:72:78:45:c1:c9:8e:5f:77:11:
                    13:4b:63:f5:68:1b:95:f3:17:c3:c5:ca:6f:d7:ab:
                    f3:5a:72:a6:9b:4c:5a:19:ac:db:d2:17:b7:7e:de:
                    ae:9f:e3:9e:2a:8d:5a:9b:48:1a:97:4b:a3:b4:a5:
                    a9:f7:61:90:78:bf:00:77:62:c3:d3:fe:c1:1c:df:
                    10:27:85:2f:75:d4:84:b5:fe:df:df:9a:5e:a2:b3:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E5:DA:53:ED:AB:3A:56:21:73:C7:27:AF:09:B7:B4:97:46:C9:81
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3233322e302e302f31372d3137203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:ab:e8:a6:3b:3f:a6:cc:d6:fd:0b:ac:8b:52:6e:4e:cb:
         9e:7d:56:d0:45:c9:24:82:a6:fe:6b:dd:49:fd:5d:8d:84:73:
         1f:22:b1:2f:21:44:e4:5b:b7:f4:de:82:ad:54:4b:ab:90:3d:
         3e:d2:51:d6:42:ac:d9:c4:28:7b:35:9c:d8:ff:01:2b:93:c5:
         91:97:31:47:1f:30:3c:36:78:45:d4:2a:91:a6:6a:52:a9:da:
         35:c2:f7:e7:33:71:9d:dc:ef:d8:fb:05:55:04:e5:10:6b:9f:
         bb:25:e7:d8:b0:a6:c5:93:f4:70:2c:8f:5f:40:13:71:2b:86:
         2f:f8:31:62:63:31:9e:93:6b:be:28:66:0e:9c:f3:2e:5e:3d:
         ab:97:9d:64:a3:d8:d2:e0:2c:29:91:da:15:ee:29:e4:84:40:
         ff:e0:85:71:44:7a:20:f1:ff:20:d0:03:fe:7c:7a:86:2a:72:
         17:c1:b4:e5:ee:5f:ad:d3:15:e6:99:9f:b3:3b:08:dc:8e:36:
         b6:ea:c2:13:01:25:fd:67:35:32:fa:1b:e4:df:57:be:51:1f:
         12:c8:aa:06:84:a4:07:48:40:57:7e:f5:e9:42:07:9c:c8:07:
         80:af:17:54:73:eb:a3:4a:1e:37:c4:69:5c:02:e8:b2:a5:f4:
         ab:de:31:2e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUW9hLH7ixGISrtBrAic8/FrgIh9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNTExMTcxOTQ3NTVaFw0yNjExMTYxOTUyNTVaMDMxMTAvBgNV
BAMTKEY0RTVEQTUzRURBQjNBNTYyMTczQzcyN0FGMDlCN0I0OTc0NkM5ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa5ro3fD0F/eOd6ClVdu7kuHlf
hdLos04/JkkJZ+2yD1TOmruZn/U6rDtqamhLHR14Sqje5oPTz30Up9RBJrHJtuh/
3xFXwe+mPjaoDIJdHlI26YZ258Sd3HOs3fcPYr7lM5wbs4nHof+nOJGqg2ditD3n
tVbkqfwDOZ99Cv7/p6GnxB4WDJmt1Sy/KClHQ4j4lvRuC8Q8G5epK5MGaWmXnalj
K4ugcUjsIHJ4RcHJjl93ERNLY/VoG5XzF8PFym/Xq/NacqabTFoZrNvSF7d+3q6f
454qjVqbSBqXS6O0pan3YZB4vwB3YsPT/sEc3xAnhS911IS1/t/fml6is6XlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU9OXaU+2rOlYhc8cnrwm3tJdGyYEwHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMxMzgzMTJlMzIzMzMyMmUzMDJlMzAy
ZjMxMzcyZDMxMzcyMDNkM2UyMDMyMzczNjM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe16AAwDQYJ
KoZIhvcNAQELBQADggEBAAC3q+imOz+mzNb9C6yLUm5Oy559VtBFySSCpv5r3Un9
XY2Ecx8isS8hRORbt/Tegq1US6uQPT7SUdZCrNnEKHs1nNj/ASuTxZGXMUcfMDw2
eEXUKpGmalKp2jXC9+czcZ3c79j7BVUE5RBrn7sl59iwpsWT9HAsj19AE3Erhi/4
MWJjMZ6Ta74oZg6c8y5ePauXnWSj2NLgLCmR2hXuKeSEQP/ghXFEeiDx/yDQA/58
eoYqchfBtOXuX63TFeaZn7M7CNyONrbqwhMBJf1nNTL6G+TfV75RHxLIqgaEpAdI
QFd+9elCB5zIB4CvF1Rz66NKHjfEaVwC6LKl9KveMS4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:10:44 2025 by rpki-client