This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa
File:                     3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa (raw, json)
Hash identifier:          8rJI20Q9s/nu+52ImsoYm1cTi9BsePxuOLRPhm+5kkU=
Subject key identifier:   4A:F3:1F:31:D4:AD:57:E4:C3:07:7F:9D:B6:7F:63:E0:8B:2F:B3:65
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       3E7E7BA22BFD3724B589AB011DD6E036536BD626
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa
Signing time:             Tue 06 Jan 2026 19:20:57 +0000
ROA not before:           Tue 06 Jan 2026 19:15:57 +0000
ROA not after:            Tue 05 Jan 2027 19:20:57 +0000
asID:                     52501
IP address blocks:        181.174.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7e:7b:a2:2b:fd:37:24:b5:89:ab:01:1d:d6:e0:36:53:6b:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:15:57 2026 GMT
            Not After : Jan  5 19:20:57 2027 GMT
        Subject: CN=4AF31F31D4AD57E4C3077F9DB67F63E08B2FB365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:cc:cb:49:24:67:94:a6:80:a1:2d:8c:62:
                    8d:7a:98:51:39:6b:dd:c4:08:15:ca:df:78:05:98:
                    3d:50:27:1b:f9:3a:8d:f5:fd:7d:39:da:81:b5:41:
                    f9:a1:3f:ba:cb:70:8c:38:0e:88:c5:76:f1:5d:bf:
                    98:b4:9b:1a:c1:42:85:3b:1c:b3:68:bd:1a:6a:e1:
                    45:87:31:25:b8:9c:51:d6:c1:a3:c4:ae:7a:aa:1b:
                    f2:40:9c:d5:dc:0a:d2:69:1b:0b:0d:32:ed:fa:7d:
                    08:5c:ba:a7:48:3f:8e:5e:33:ea:22:5d:31:f6:1c:
                    3c:0b:48:c5:0f:ee:f5:8c:68:a7:47:35:4b:4e:06:
                    1e:02:6b:0b:47:60:5e:9a:c4:39:55:c6:1b:e8:26:
                    3e:31:77:67:77:0f:cf:45:5f:e9:da:6b:d7:bc:90:
                    a9:7c:ab:25:83:a9:61:4e:27:f8:81:f5:15:ba:5f:
                    c0:2e:87:28:de:50:a0:79:99:b0:10:1b:54:f9:a4:
                    ae:62:33:0a:c6:96:64:10:24:de:e4:a1:5e:64:a3:
                    56:89:ba:f9:64:9e:05:2d:6f:71:76:ea:35:eb:06:
                    68:81:9f:e5:e9:75:16:e5:11:1f:65:7a:cd:56:7f:
                    93:7c:7a:63:7e:cf:43:49:64:57:ce:af:d1:fe:95:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:1F:31:D4:AD:57:E4:C3:07:7F:9D:B6:7F:63:E0:8B:2F:B3:65
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:08:47:3d:33:18:d6:6a:81:0b:19:f0:56:82:88:8e:9c:
         2f:25:25:a6:c0:57:0d:96:f2:47:17:bb:18:e0:a8:5b:71:69:
         3e:f8:db:f1:01:54:10:c3:61:06:25:58:5a:70:29:7a:98:5d:
         dd:bf:27:a5:fe:04:1e:df:91:33:37:0e:5b:72:a6:b2:7a:2a:
         80:f7:4a:a9:1f:e2:9d:d0:0b:44:ad:28:16:d2:86:df:a8:c0:
         1e:ea:24:48:43:83:5c:72:f1:5e:79:cf:f7:30:01:a6:9d:0f:
         94:18:70:7f:ec:54:4d:5d:a4:43:2e:ca:b9:18:46:8e:a1:35:
         9c:6b:e6:0e:34:36:87:a4:b2:6b:58:2e:91:58:67:e8:3f:00:
         e9:ae:65:cb:ce:95:f6:53:32:12:e6:fb:6b:4c:70:3d:95:48:
         75:4c:8e:fb:e7:b2:55:dd:08:b5:f6:07:e2:7b:88:88:cd:ea:
         90:de:4e:10:d6:87:5e:2c:3b:9c:b7:ae:8b:d0:20:64:01:cc:
         7f:33:8a:c4:53:6c:95:fa:cc:32:cf:4f:32:6c:ef:cc:bf:22:
         f0:6e:2d:05:a9:19:87:86:b4:d5:30:8f:f6:75:9f:69:64:6a:
         ff:4d:a6:8e:f8:d5:32:4a:98:2d:63:97:c0:ea:a5:8a:38:a9:
         78:b6:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:53:09 2026 by rpki-client