This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e36342e302f32302d3234203d3e203233323433.roa
File:                     3138312e3137342e36342e302f32302d3234203d3e203233323433.roa (raw, json)
Hash identifier:          PWuMItdUW/nMQ40hJQNafB+ffgLONsd+ITf1+Ut7Skg=
Subject key identifier:   D1:7B:2F:BA:54:80:CB:F8:DA:12:19:B8:53:0C:1F:D2:2F:24:4D:8A
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       38BFB54CD47B1E4C7B845C0BB27FA6672171ED97
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e36342e302f32302d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:20:55 +0000
ROA not before:           Tue 06 Jan 2026 19:15:55 +0000
ROA not after:            Tue 05 Jan 2027 19:20:55 +0000
asID:                     23243
IP address blocks:        181.174.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bf:b5:4c:d4:7b:1e:4c:7b:84:5c:0b:b2:7f:a6:67:21:71:ed:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Jan  6 19:15:55 2026 GMT
            Not After : Jan  5 19:20:55 2027 GMT
        Subject: CN=D17B2FBA5480CBF8DA1219B8530C1FD22F244D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:f2:85:33:cb:19:88:75:ac:82:f1:67:08:
                    28:12:84:7a:38:d0:18:a6:c8:b4:63:45:3e:d1:b4:
                    ae:33:49:2a:e5:20:5f:eb:df:77:ca:18:71:06:8e:
                    7b:0e:a4:a6:1b:bc:31:f2:7a:e7:8c:a7:fe:a3:38:
                    2e:c5:82:e5:0e:88:82:8b:38:ec:ad:1f:ae:dc:6c:
                    1b:e0:00:e4:42:93:b6:00:60:9e:9a:76:eb:dc:e1:
                    6b:d2:5f:ec:13:4a:6f:7c:00:59:33:c0:b5:ca:e9:
                    27:b3:9c:78:8b:0d:e4:d0:f8:6c:c8:fe:66:7f:6c:
                    85:c6:96:fd:2d:cb:24:7c:e5:f2:4c:31:13:1e:75:
                    3c:b0:63:46:99:42:96:c1:a6:10:d2:a3:27:a8:e4:
                    6c:b4:f0:00:70:6b:b0:f6:e4:ae:14:2e:25:9b:16:
                    d4:35:39:32:37:6d:92:3d:6e:54:7f:8d:cc:22:18:
                    c6:4d:25:45:31:8d:58:a9:e7:a4:11:db:32:6a:6a:
                    2b:1e:2f:82:07:ad:f7:97:99:8b:46:4c:03:f6:a9:
                    b3:02:91:06:60:e8:98:c1:d0:ff:11:2b:ff:91:61:
                    31:50:97:ab:6b:a9:3c:1d:f1:09:54:bb:11:f2:23:
                    5e:eb:c2:63:4f:14:2c:05:e7:7d:a2:8f:b0:14:c8:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:2F:BA:54:80:CB:F8:DA:12:19:B8:53:0C:1F:D2:2F:24:4D:8A
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e36342e302f32302d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:f9:28:f9:4c:09:71:b9:ec:15:52:9a:8b:62:c7:9f:c2:
         1f:88:0b:d0:37:80:7a:98:7d:a5:bf:ea:0a:ba:66:98:b0:2b:
         2f:74:f4:70:cf:57:7a:11:81:b6:16:d1:3b:ab:2c:58:b8:db:
         f9:bc:83:39:bd:90:78:a9:53:54:e2:78:1f:28:2c:c5:37:1d:
         44:df:d0:b4:af:32:38:b4:90:3d:8c:17:77:0d:39:a8:15:17:
         61:5a:73:bb:71:f6:74:15:a9:19:80:c5:a8:79:12:1a:28:39:
         3e:cd:69:0e:59:48:53:05:83:f6:c6:ee:8c:41:82:4e:40:61:
         8e:c8:2b:d4:55:49:55:b4:3c:84:e9:f7:dc:60:39:31:51:fc:
         e2:d0:92:c8:1d:8a:3d:7e:7d:2f:ba:57:31:c6:d7:3b:18:d7:
         9f:1d:2f:b9:f3:80:17:ca:25:3d:c9:ec:f1:fb:05:61:94:42:
         12:f0:a8:0a:d6:4f:87:b8:6e:0b:f9:d0:c5:be:4a:60:22:42:
         c6:38:10:24:22:59:ff:a7:72:86:6c:e8:59:6c:e6:85:c2:15:
         b7:b1:ee:46:d9:23:81:5d:3d:73:33:cb:fb:42:ec:2c:26:8c:
         38:20:53:40:fb:d8:fa:a0:ca:7d:a2:7f:0c:5e:3c:69:6a:88:
         c7:ed:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:53:42 2026 by rpki-client