This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/3138312e3233322e3137322e302f32342d3234203d3e203236353631.roa
File:                     3138312e3233322e3137322e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          qXvzEZWgSywwVfSfVjAt7So7TN3Vp4TzQrOdJxRjsTA=
Subject key identifier:   A3:32:15:8E:27:65:9D:A5:0D:B8:A8:FC:74:EA:FD:4D:60:32:B3:78
Certificate issuer:       /CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
Certificate serial:       7C2E984D4A34D9BDFEA8D5DC48E4A59697EDDC64
Authority key identifier: 6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/3138312e3233322e3137322e302f32342d3234203d3e203236353631.roa
Signing time:             Tue 23 Dec 2025 13:20:00 +0000
ROA not before:           Tue 23 Dec 2025 13:15:00 +0000
ROA not after:            Tue 22 Dec 2026 13:20:00 +0000
asID:                     26561
IP address blocks:        181.232.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 06:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2e:98:4d:4a:34:d9:bd:fe:a8:d5:dc:48:e4:a5:96:97:ed:dc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5
        Validity
            Not Before: Dec 23 13:15:00 2025 GMT
            Not After : Dec 22 13:20:00 2026 GMT
        Subject: CN=A332158E27659DA50DB8A8FC74EAFD4D6032B378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:46:71:e8:14:2e:e8:bc:73:0d:d7:e0:01:ed:
                    a3:82:9e:b0:a8:48:ff:e1:6b:3f:bd:13:3a:57:e5:
                    78:84:5a:e3:1f:7e:c2:6d:47:e7:f7:89:76:76:0c:
                    c8:f8:ee:76:ed:6d:aa:63:18:0c:87:32:0c:f9:82:
                    70:07:28:a3:37:52:1b:23:13:e9:ef:8c:c1:62:42:
                    22:2d:b1:84:90:46:13:bb:2f:b7:d4:85:9b:c0:ea:
                    d5:19:ea:65:a4:9f:4e:62:0d:87:18:9f:da:3f:a9:
                    49:e1:5c:80:b9:e1:61:7d:c1:85:9b:78:2e:0d:fc:
                    f1:40:f3:75:fb:a3:84:eb:73:f8:3c:4d:16:d8:d5:
                    4f:55:b3:36:08:b0:e4:30:d0:c8:5a:37:44:88:12:
                    0e:6c:b8:ae:53:70:cc:90:90:d2:4b:c7:cc:4e:4d:
                    f6:d8:ea:86:cb:21:98:99:49:fb:b7:2b:37:6b:cf:
                    e0:d4:a3:bc:fe:24:33:39:66:9e:54:8a:9f:95:62:
                    1e:30:bf:26:b2:a7:f5:27:66:71:38:c4:80:a9:55:
                    50:74:76:ef:48:00:d1:c4:8e:16:c7:ca:42:e2:a2:
                    af:fd:6b:be:33:30:06:bb:4e:20:0e:f3:9b:29:92:
                    9d:cb:7f:eb:2b:a5:b3:33:cd:59:5c:3e:87:14:dc:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:32:15:8E:27:65:9D:A5:0D:B8:A8:FC:74:EA:FD:4D:60:32:B3:78
            X509v3 Authority Key Identifier:
                keyid:6C:1D:DA:06:BD:BF:11:D1:E9:BF:8F:A8:9F:5D:5A:DC:A1:3F:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C1DDA06BDBF11D1E9BF8FA89F5D5ADCA13FB7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E640CA27C4160C6CBD26A19B25DF336E8333E9922E83C557E7723BE155160B1/0/3138312e3233322e3137322e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:41:f5:9f:95:83:11:fc:3a:75:1b:49:f4:72:f6:3f:75:ac:
         75:d3:21:4b:27:d8:55:a9:88:12:4f:00:f5:00:2e:52:be:bb:
         50:c3:8e:b6:25:12:a9:17:e2:06:94:b6:af:da:2e:51:7e:30:
         fb:34:ca:90:1e:36:7c:57:c7:53:6c:48:e5:9f:d5:7f:20:13:
         d6:11:f2:25:2c:04:01:e0:28:1d:11:78:80:3c:bb:ca:3e:6c:
         1a:ab:b8:0f:8c:d1:70:60:87:bd:49:59:a3:c0:bb:63:7b:f7:
         02:2f:4a:70:15:2a:6f:ab:61:ed:86:85:29:15:21:32:9f:27:
         b5:80:40:fe:6c:c9:a1:1e:09:11:02:c6:63:a2:de:d2:46:ed:
         26:0a:e1:f3:66:e2:c3:22:f0:f4:0d:48:46:49:3c:41:92:d1:
         1d:83:4d:ae:1f:69:5c:15:c2:e6:f0:79:70:ab:52:33:09:2e:
         e7:d3:df:88:a9:f4:92:bb:46:eb:ef:3a:3c:07:03:e0:f3:db:
         50:d3:9f:cb:b0:6b:51:a8:51:ed:c4:97:6a:0c:72:28:05:d6:
         87:df:c8:80:b3:70:7c:96:39:83:79:cf:4c:c9:59:e5:52:2e:
         53:2b:30:b1:83:42:ed:f2:42:ea:0f:cc:b2:ab:ef:69:a0:2d:
         82:ff:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 05:23:47 2025 by rpki-client