This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3231392e312e302f32342d3234203d3e203631353034.roa
File:                     3133382e3231392e312e302f32342d3234203d3e203631353034.roa (raw, json)
Hash identifier:          rD31nu30gn54YutW8NpXY4IZb0L+DVg3q9O+k6R9CIc=
Subject key identifier:   8E:95:B8:7C:9D:4F:DC:58:52:DB:A0:D6:A6:DA:6C:5E:DE:AE:F0:1A
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       65D80285750C5209BB6A728B77CEC22A1282C9F5
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3231392e312e302f32342d3234203d3e203631353034.roa
Signing time:             Tue 06 Jan 2026 19:29:22 +0000
ROA not before:           Tue 06 Jan 2026 19:24:22 +0000
ROA not after:            Tue 05 Jan 2027 19:29:22 +0000
asID:                     61504
IP address blocks:        138.219.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d8:02:85:75:0c:52:09:bb:6a:72:8b:77:ce:c2:2a:12:82:c9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:22 2026 GMT
            Not After : Jan  5 19:29:22 2027 GMT
        Subject: CN=8E95B87C9D4FDC5852DBA0D6A6DA6C5EDEAEF01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:4c:6b:a0:05:4f:d4:e6:23:99:60:d5:b3:
                    e2:ec:13:50:c5:4a:2a:c4:3f:f8:80:b5:64:ac:68:
                    62:70:1f:79:34:f9:72:d7:2e:7b:da:89:d4:9f:2e:
                    25:56:05:df:85:17:51:c3:2e:98:ae:b7:72:f5:64:
                    0c:77:d2:13:13:64:dd:c6:ad:e3:7a:4a:42:c5:af:
                    26:20:61:d9:f4:a8:16:4b:2f:ef:a3:c1:65:1b:1d:
                    ed:8b:d1:ec:c0:38:69:99:a6:83:bc:59:7b:c9:82:
                    d2:af:6a:9a:0f:83:82:8d:e4:34:e0:a0:5c:ad:0b:
                    03:61:94:7f:69:ac:bf:c4:62:ed:6a:13:5c:f3:4b:
                    3c:4d:20:00:7e:c7:03:f6:89:09:4f:68:c2:47:6c:
                    87:9a:a5:24:32:fa:11:43:80:ce:7c:e7:5a:8b:74:
                    a2:2d:37:53:25:0c:5a:9a:a3:56:92:42:82:96:dc:
                    97:a1:4c:d5:38:2d:61:69:64:fb:75:18:f5:05:78:
                    d8:a5:52:a1:3a:ff:e0:69:80:c5:b1:f7:65:54:e3:
                    db:73:da:31:9b:fc:6a:d8:6a:98:8b:6f:df:4e:22:
                    a6:61:cc:d7:df:c8:0a:3b:86:be:7a:55:fa:ec:a7:
                    c2:32:b9:44:b6:9e:75:f8:16:cc:fc:ac:51:37:74:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:95:B8:7C:9D:4F:DC:58:52:DB:A0:D6:A6:DA:6C:5E:DE:AE:F0:1A
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3231392e312e302f32342d3234203d3e203631353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5f:f8:91:75:78:d7:c7:3d:cf:be:d4:78:4a:ca:b8:51:f2:
         c1:f9:40:28:95:81:20:20:85:13:a7:07:38:a4:20:f3:4b:f8:
         ae:c9:2e:7b:9a:bb:69:f6:f0:03:2f:fc:ca:ec:39:b3:81:9e:
         df:dc:a0:8a:ff:63:70:b8:82:a7:e5:ea:af:33:73:5f:ce:78:
         82:16:74:41:59:45:79:eb:f1:bb:93:44:f8:78:0b:31:99:ac:
         78:0c:2b:1d:d8:74:23:96:69:32:1b:8d:fb:db:e7:97:fc:d1:
         f5:01:f0:e2:16:95:4c:be:04:2f:df:6a:35:cb:65:cd:88:bf:
         c6:64:3d:62:a7:77:e0:f8:10:14:c8:f8:8a:84:d6:07:8f:4b:
         4a:67:a5:02:31:1b:64:a2:51:e6:67:e8:a8:9e:88:05:74:04:
         6c:8c:3d:b9:44:96:45:b6:02:29:09:c4:86:98:f9:84:3b:04:
         c2:8b:5c:36:57:b7:4f:1d:0a:53:af:80:2a:00:4e:56:6d:fe:
         1f:4e:f5:1b:fe:9d:f7:81:5e:ba:e5:eb:df:b6:ad:e0:cb:21:
         cd:b2:8b:af:da:75:1c:07:12:6e:c9:c0:48:3e:18:71:af:0b:
         e1:5a:d8:60:8a:0e:6c:38:b2:55:0b:c7:8a:f1:c3:13:fc:ed:
         3a:f6:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:41 2026 by rpki-client