This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231342e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231342e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          HfIIAYwiaaHomt18P5RfPLyyLwpMLSiHly+044teXxk=
Subject key identifier:   2F:03:47:79:F6:BB:C3:D6:9B:58:67:1A:3B:55:12:C3:E0:36:3D:06
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       4E6D68F2B96AE98477212BC03AFE1EE1D8A42858
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231342e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 06 Jan 2026 19:30:28 +0000
ROA not before:           Tue 06 Jan 2026 19:25:28 +0000
ROA not after:            Tue 05 Jan 2027 19:30:28 +0000
asID:                     52348
IP address blocks:        190.52.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:6d:68:f2:b9:6a:e9:84:77:21:2b:c0:3a:fe:1e:e1:d8:a4:28:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Jan  6 19:25:28 2026 GMT
            Not After : Jan  5 19:30:28 2027 GMT
        Subject: CN=2F034779F6BBC3D69B58671A3B5512C3E0363D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:33:d9:67:88:fd:99:f5:e5:31:a0:8a:52:
                    a4:83:c1:74:37:73:ac:f8:1c:47:b2:b1:30:66:58:
                    c0:28:b8:5d:e2:82:bd:05:82:f3:e8:95:5a:fc:f8:
                    d1:fa:92:be:38:52:43:31:6a:53:8b:2f:41:64:92:
                    07:30:ba:59:f0:5d:3d:b8:01:d2:53:c7:c4:72:4b:
                    85:2a:5a:c6:73:78:7b:ac:90:5d:66:32:66:01:31:
                    03:18:d6:e4:73:30:40:3a:0a:87:c0:37:2d:b6:7b:
                    eb:7b:64:85:3d:ab:33:e2:51:ad:f1:4b:45:66:7c:
                    e5:77:de:9c:c6:b6:50:c6:c2:f0:cb:7c:f3:96:ce:
                    03:77:cb:1e:b0:c2:63:18:7c:bd:1e:66:08:f3:7f:
                    09:6c:15:b7:a7:9b:2b:34:cc:ec:5c:5b:9d:00:f5:
                    dd:6a:ae:f0:fb:0f:2f:9b:d9:bd:b9:76:aa:71:9a:
                    71:f0:ab:ed:62:86:1f:96:3b:9d:4a:ed:38:54:47:
                    2b:5d:0d:ae:43:8c:a0:7d:8c:16:52:2b:3a:5d:e8:
                    94:2c:38:2a:4a:f3:09:3c:f1:b9:da:aa:cc:2a:57:
                    95:62:5a:9a:d7:1d:ce:21:1a:24:01:12:d4:1c:1d:
                    37:3d:a8:3b:44:2c:4f:8b:0b:b9:15:07:91:e0:b2:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:03:47:79:F6:BB:C3:D6:9B:58:67:1A:3B:55:12:C3:E0:36:3D:06
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231342e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:fc:bf:dd:f1:20:4c:26:61:7a:03:45:3e:ca:6b:a8:20:f7:
         15:69:dc:4f:c7:c9:65:b0:0b:d0:d3:12:21:09:bf:6d:d4:d6:
         a3:ba:37:07:c1:bc:17:e9:3e:dc:75:28:3a:fc:86:d0:79:70:
         66:9e:d3:0d:b3:8a:1b:c0:3e:28:c7:fe:7f:77:3b:2e:2f:2d:
         0e:77:b1:c2:45:3a:30:e6:4a:3c:a2:71:72:58:3d:70:a5:83:
         9a:50:dc:9e:d3:66:8f:67:59:5c:07:05:7b:00:34:3d:fd:c5:
         46:fd:8b:65:f4:d5:2e:1f:26:80:d0:bc:66:73:51:29:f3:00:
         89:9f:0c:62:1a:9c:1f:dd:50:f4:fb:95:e4:6e:9e:91:53:e2:
         8f:55:fa:91:59:b5:ca:2f:a1:2b:5d:55:4f:47:f3:5e:df:77:
         cb:06:64:70:ff:cf:4b:54:8f:0b:ad:b6:e1:cd:ec:fd:80:ad:
         25:9d:39:2d:3f:02:a8:8e:59:b9:a3:6b:de:90:9d:54:8d:64:
         a7:d1:25:ff:64:20:cb:8f:1e:c0:d5:76:57:44:1d:b2:f4:05:
         c0:8c:cd:c3:bb:c0:40:5f:e4:ef:a6:be:6f:c4:3b:0a:e1:fe:
         94:db:e7:d0:af:98:95:46:71:52:3e:62:f4:dd:43:36:4e:1d:
         4c:3f:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:47 2026 by rpki-client