This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3139372e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3139372e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          kM6QDXOsjikEagi3yT1NFgmQMsHtQiCE5wox9BvYHl0=
Subject key identifier:   01:59:11:B7:6E:74:F2:B5:3C:D4:FB:3B:CE:FE:EA:DC:97:D9:20:1E
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       2BC2ED7A3D6C48EEB5A6C7097D6BC65E002609C3
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3139372e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 06 Jan 2026 19:21:39 +0000
ROA not before:           Tue 06 Jan 2026 19:16:39 +0000
ROA not after:            Tue 05 Jan 2027 19:21:39 +0000
asID:                     27895
IP address blocks:        181.94.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c2:ed:7a:3d:6c:48:ee:b5:a6:c7:09:7d:6b:c6:5e:00:26:09:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Jan  6 19:16:39 2026 GMT
            Not After : Jan  5 19:21:39 2027 GMT
        Subject: CN=015911B76E74F2B53CD4FB3BCEFEEADC97D9201E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:87:15:d3:ac:c8:67:df:d8:1c:a9:65:b3:
                    d0:10:f3:aa:b9:22:3d:a7:31:2d:11:c4:4a:79:18:
                    64:23:8d:da:6f:40:bc:a6:14:5f:ac:35:ba:4e:e4:
                    57:ee:32:7f:54:be:83:41:ba:af:f4:c7:90:08:5f:
                    71:4e:ed:0f:51:ef:a0:48:b9:5d:4c:81:26:c1:64:
                    ed:fa:7e:dd:89:ad:cc:b1:7f:13:d8:f2:a6:75:6e:
                    ac:a9:37:83:41:7e:d0:84:f2:83:02:4c:3e:8f:87:
                    f9:dc:7e:d1:2e:28:b2:fd:0e:8b:01:0c:49:01:57:
                    b8:2f:2e:60:bc:a9:f3:12:ca:cb:00:4e:8c:6c:a3:
                    e3:d9:16:7f:a9:1b:23:fb:f3:c7:da:a8:2c:bd:34:
                    e5:ab:92:12:c0:48:76:2d:fa:38:ec:99:5e:4f:d4:
                    c5:cd:17:3f:d3:b8:d8:3d:3d:c6:6b:56:3a:c4:8c:
                    a3:5d:b9:52:be:73:29:3d:90:f8:f1:2d:68:f2:33:
                    8e:ec:89:de:a9:1e:54:49:ef:dc:b1:9d:51:28:40:
                    b3:76:e0:7a:a3:49:a8:ee:e8:48:b0:e2:b0:f7:a0:
                    93:cf:e9:f1:ee:bc:65:a6:da:18:ae:15:14:1a:eb:
                    23:85:4f:5b:73:2a:00:7e:15:d9:f0:e1:ca:29:07:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:59:11:B7:6E:74:F2:B5:3C:D4:FB:3B:CE:FE:EA:DC:97:D9:20:1E
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3139372e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:90:9b:08:7d:7d:c3:9b:b5:86:7c:cd:6d:c3:e1:f6:6a:c9:
         42:19:a9:b1:56:1f:b5:32:fc:d3:77:7a:b2:86:71:8e:ca:ec:
         42:37:ba:dc:53:a8:79:49:84:2f:39:9f:77:4c:25:d0:b4:12:
         5d:ef:c1:9b:03:c4:49:51:d2:c4:75:29:e6:40:08:2d:36:3a:
         47:c1:8f:ce:f8:17:11:f6:45:8d:f7:2b:32:1d:90:ed:ef:66:
         1b:62:30:87:8a:5d:ff:2c:ca:af:db:02:c1:ce:25:7d:b3:da:
         f1:90:31:04:27:af:53:75:ef:36:19:d9:95:18:aa:a3:2f:6e:
         36:79:3f:35:6c:88:5a:13:ff:eb:0e:e4:92:43:a5:37:43:17:
         1c:d0:c2:01:f1:93:82:c0:12:9a:cd:d5:ee:e4:ec:13:e7:00:
         81:99:9c:7d:33:af:d6:83:51:89:b2:00:4a:69:88:e0:f3:38:
         5a:bc:6f:a3:51:c3:1f:9c:80:0f:bd:27:7d:01:67:77:57:5e:
         7e:1a:c7:46:79:7e:76:ec:d8:95:2a:1a:d3:02:e9:df:c6:77:
         4e:a9:75:bb:c7:40:d8:05:a6:6f:2d:b7:55:f7:2b:96:97:f8:
         de:c7:16:d1:2a:8c:34:63:c6:c9:ef:79:af:65:b0:cc:82:53:
         a9:95:c3:6a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUK8Ltej1sSO61pscJfWvGXgAmCcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNjAxMDYxOTE2MzlaFw0yNzAxMDUxOTIxMzlaMDMxMTAvBgNV
BAMTKDAxNTkxMUI3NkU3NEYyQjUzQ0Q0RkIzQkNFRkVFQURDOTdEOTIwMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH/YcV06zIZ9/YHKlls9AQ86q5
Ij2nMS0RxEp5GGQjjdpvQLymFF+sNbpO5FfuMn9UvoNBuq/0x5AIX3FO7Q9R76BI
uV1MgSbBZO36ft2JrcyxfxPY8qZ1bqypN4NBftCE8oMCTD6Ph/ncftEuKLL9DosB
DEkBV7gvLmC8qfMSyssAToxso+PZFn+pGyP788faqCy9NOWrkhLASHYt+jjsmV5P
1MXNFz/TuNg9PcZrVjrEjKNduVK+cyk9kPjxLWjyM47sid6pHlRJ79yxnVEoQLN2
4HqjSaju6Eiw4rD3oJPP6fHuvGWm2hiuFRQa6yOFT1tzKgB+Fdnw4copB+QNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUAVkRt2508rU81Ps7zv7q3JfZIB4wHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMxMzgzMTJlMzkzNDJlMzEzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALVexTAN
BgkqhkiG9w0BAQsFAAOCAQEANZCbCH19w5u1hnzNbcPh9mrJQhmpsVYftTL803d6
soZxjsrsQje63FOoeUmELzmfd0wl0LQSXe/BmwPESVHSxHUp5kAILTY6R8GPzvgX
EfZFjfcrMh2Q7e9mG2Iwh4pd/yzKr9sCwc4lfbPa8ZAxBCevU3XvNhnZlRiqoy9u
Nnk/NWyIWhP/6w7kkkOlN0MXHNDCAfGTgsASms3V7uTsE+cAgZmcfTOv1oNRibIA
SmmI4PM4Wrxvo1HDH5yAD70nfQFnd1defhrHRnl+duzYlSoa0wLp38Z3Tql1u8dA
2AWmby23Vfcrlpf43scW0SqMNGPGye95r2WwzIJTqZXDag==
-----END CERTIFICATE-----
Generated at Thu Jan 29 08:24:13 2026 by rpki-client