This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231362e302f32342d3234203d3e203532333438.roa
File:                     3139302e35322e3231362e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          diZdmS9E9tuBdg+S99G19UxU26ZUDmaasd/FBmDH6Hw=
Subject key identifier:   D9:9F:00:0B:3D:F4:39:7C:5B:18:5E:78:77:25:67:7B:FC:82:DE:BA
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       5394F0F9C22EAA40D6FAE580410334C1C2C88197
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231362e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 06 Jan 2026 19:30:30 +0000
ROA not before:           Tue 06 Jan 2026 19:25:30 +0000
ROA not after:            Tue 05 Jan 2027 19:30:30 +0000
asID:                     52348
IP address blocks:        190.52.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:94:f0:f9:c2:2e:aa:40:d6:fa:e5:80:41:03:34:c1:c2:c8:81:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Jan  6 19:25:30 2026 GMT
            Not After : Jan  5 19:30:30 2027 GMT
        Subject: CN=D99F000B3DF4397C5B185E787725677BFC82DEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:aa:82:91:2e:ff:f1:17:63:a5:eb:66:cd:
                    be:c4:75:92:52:e7:52:6c:01:6e:e0:6b:fe:e4:fa:
                    45:81:a5:2a:9e:57:f9:99:44:4d:31:ba:70:5d:8b:
                    4f:80:8a:eb:57:85:99:ed:17:9f:5a:7e:04:a6:25:
                    1e:1f:2d:c4:67:f5:d5:32:6f:a7:e2:65:6f:3d:fb:
                    4e:a5:98:eb:b7:25:f1:f1:05:3d:d2:5f:f7:95:8f:
                    e9:90:70:e4:a2:95:0f:7a:55:a8:8e:bf:3f:ce:6b:
                    38:8c:35:75:72:92:76:ab:53:27:7b:43:79:1e:21:
                    06:eb:cc:7c:a7:40:38:b6:f7:8e:14:1a:09:b0:78:
                    f0:30:5a:7e:69:52:85:29:32:7b:2d:55:fd:db:35:
                    5f:05:88:f4:c0:52:6f:5c:0a:6c:49:da:9b:07:f1:
                    b4:8d:b5:56:7c:8a:a6:62:9d:82:4d:a8:6d:d7:8e:
                    e4:0d:a9:47:9c:bc:b6:cf:62:09:fa:35:4d:2a:75:
                    89:e7:22:db:ec:3b:00:7b:76:d3:f8:5b:a1:e0:e2:
                    74:cc:56:cc:28:d0:d2:d4:0d:87:09:14:36:cf:26:
                    c6:73:3c:30:d7:44:7d:e3:15:b1:9e:73:dc:0c:98:
                    1d:ed:dd:fe:6c:06:a1:bb:ee:c9:ff:1e:b7:11:40:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:00:0B:3D:F4:39:7C:5B:18:5E:78:77:25:67:7B:FC:82:DE:BA
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e35322e3231362e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:40:b0:84:9c:53:a1:3d:c0:06:01:47:28:b4:43:b2:97:
         ae:09:37:f0:fb:02:a7:e6:ba:19:5b:e3:9c:29:37:df:e1:53:
         3e:e7:8b:1b:e4:ee:b1:77:b2:82:49:b3:a3:ce:d6:56:ed:c8:
         a9:22:55:02:7d:57:1f:b0:51:e0:70:1f:4c:6a:36:02:13:20:
         83:97:f1:0c:1f:b9:be:d3:95:71:41:ea:3a:7b:60:0f:b3:bc:
         03:2b:49:3c:71:50:57:13:89:a6:0c:13:3b:5b:bd:96:64:b2:
         95:8d:ce:f1:9e:db:d8:72:2f:18:65:9d:41:ad:16:dc:47:1f:
         7c:22:4b:70:1f:cf:a3:5a:34:e3:ea:9c:2c:e3:c4:0b:f9:23:
         b0:ce:46:05:14:ea:b0:9a:a3:e3:41:08:01:ba:e2:4a:b8:3d:
         e3:8c:ce:9c:f1:cc:fd:39:1d:25:0b:ba:e2:83:f9:85:ed:3e:
         10:f3:03:f4:fe:78:e5:57:c4:5e:a2:df:6d:ce:a6:96:63:c7:
         8b:65:5d:7d:79:98:c6:f2:3b:4e:bd:32:bb:03:d4:a4:35:08:
         c9:83:0a:bf:5b:92:68:7d:30:0f:ee:66:36:76:9c:93:dc:7d:
         5a:a4:bc:9c:7c:af:35:9e:17:34:20:c4:24:a6:b4:ed:b7:54:
         c4:19:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:07 2026 by rpki-client