This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/3137392e3138392e3231362e302f32332d3234203d3e203532343131.roa
File:                     3137392e3138392e3231362e302f32332d3234203d3e203532343131.roa (raw, json)
Hash identifier:          r/EtDZ2Ig1CDpnj0oJQHalN/NL5Inhb3hiTEQiW38PA=
Subject key identifier:   62:B4:93:27:13:C5:BB:70:98:43:33:84:AC:4B:87:A7:B6:13:06:E7
Certificate issuer:       /CN=2E16CB690081446A4FC8F68087C82B93D3803526
Certificate serial:       50461452F25C9601E2134CF4B2554B5FDAD28DA2
Authority key identifier: 2E:16:CB:69:00:81:44:6A:4F:C8:F6:80:87:C8:2B:93:D3:80:35:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E16CB690081446A4FC8F68087C82B93D3803526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/3137392e3138392e3231362e302f32332d3234203d3e203532343131.roa
Signing time:             Tue 06 Jan 2026 19:39:22 +0000
ROA not before:           Tue 06 Jan 2026 19:34:22 +0000
ROA not after:            Tue 05 Jan 2027 19:39:22 +0000
asID:                     52411
IP address blocks:        179.189.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/2E16CB690081446A4FC8F68087C82B93D3803526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/2E16CB690081446A4FC8F68087C82B93D3803526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E16CB690081446A4FC8F68087C82B93D3803526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:46:14:52:f2:5c:96:01:e2:13:4c:f4:b2:55:4b:5f:da:d2:8d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E16CB690081446A4FC8F68087C82B93D3803526
        Validity
            Not Before: Jan  6 19:34:22 2026 GMT
            Not After : Jan  5 19:39:22 2027 GMT
        Subject: CN=62B4932713C5BB7098433384AC4B87A7B61306E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:37:ad:46:40:3c:c4:93:c2:69:1f:1f:05:
                    bb:d5:b3:ab:3d:24:e2:bd:3c:bf:f0:6f:b9:c2:c4:
                    1b:b7:75:91:47:42:cb:c3:cf:57:4f:3e:2f:59:9f:
                    f7:1f:97:79:f5:32:59:e0:66:26:45:d9:2f:db:e9:
                    c5:33:b8:1b:75:41:35:59:6a:a3:6c:94:04:8d:e7:
                    70:a5:3e:b8:12:31:0d:e3:5e:df:02:e2:30:fb:dc:
                    86:36:41:6b:81:05:fd:b4:94:1d:0a:a9:05:73:79:
                    f4:1c:c0:e7:a6:ac:81:f5:3c:07:fd:46:d1:a6:98:
                    6a:ac:ab:67:43:17:ae:d8:66:31:02:e2:86:00:b6:
                    43:1d:0e:f4:86:ab:9d:f2:da:ea:05:8c:64:b8:c3:
                    b6:c1:db:d6:6b:e8:0b:a4:c0:2d:c5:6e:6a:93:3c:
                    85:be:7d:20:63:ff:bb:69:b5:89:51:b8:64:42:9c:
                    4a:aa:e0:7c:c4:5d:96:f9:5a:5c:52:30:aa:4d:8a:
                    a8:97:f9:8b:e4:55:cc:8a:ca:df:df:68:6a:ec:3d:
                    26:8b:c6:3d:10:7d:5a:99:be:54:60:00:14:7d:50:
                    b7:a7:27:d7:b1:14:2d:ca:75:9b:36:41:e9:52:08:
                    6e:79:c3:db:07:83:ae:ce:9f:dd:d4:0d:31:23:36:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:93:27:13:C5:BB:70:98:43:33:84:AC:4B:87:A7:B6:13:06:E7
            X509v3 Authority Key Identifier:
                keyid:2E:16:CB:69:00:81:44:6A:4F:C8:F6:80:87:C8:2B:93:D3:80:35:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/2E16CB690081446A4FC8F68087C82B93D3803526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E16CB690081446A4FC8F68087C82B93D3803526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02FBE457D2878505E2640A301927A5F9F699493A95871D83DBE322905FC02C20/0/3137392e3138392e3231362e302f32332d3234203d3e203532343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:ed:17:76:ce:d8:33:04:f0:6b:39:81:68:83:df:1e:00:
         59:91:c9:4e:c9:04:00:a4:42:20:b3:a8:02:9f:66:37:43:5f:
         ce:42:5c:98:64:54:3a:68:d9:f5:e9:8e:12:06:0c:c4:30:d8:
         61:bd:82:4c:d2:f2:a2:f4:a5:81:78:6f:be:53:62:a7:fa:ff:
         25:a5:54:8e:ec:8f:d8:74:20:69:90:12:85:75:b8:28:bf:c3:
         01:4d:7e:6c:9a:f9:30:60:51:f2:1b:03:a9:bb:8f:6b:dd:ba:
         72:37:9a:11:68:9a:da:01:44:76:68:14:5c:11:88:a8:e8:80:
         ef:10:c4:c8:ff:fe:41:3f:f4:49:74:b9:49:3d:a4:43:22:96:
         c2:c2:4b:42:9d:cc:57:49:a3:14:26:81:93:3c:9d:6d:87:11:
         26:92:bc:e6:df:80:fe:ac:1d:8d:4c:d7:91:f7:a5:93:ca:e5:
         f8:49:06:d2:db:18:46:64:44:52:d0:b2:e8:5c:c2:a3:14:36:
         76:60:cb:92:9b:32:e1:14:bc:7b:8a:6e:05:30:5e:63:15:01:
         2b:4d:3f:ad:6d:49:08:99:b7:75:12:db:03:7c:66:ac:cc:5e:
         21:25:92:86:05:f0:3a:2e:74:1a:46:56:94:85:2c:7f:ac:9d:
         26:45:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:31 2026 by rpki-client