This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
File:                     3133382e3231392e35362e302f32322d3232203d3e203532353130.roa (raw, json)
Hash identifier:          SXVNKafzBCzhE5VweOzYATDMcX6/Jpf1Td6yoRNeWQc=
Subject key identifier:   01:91:B4:0F:24:E7:0D:2B:FF:D7:C3:5F:12:68:4C:84:81:50:BA:1E
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       4B09E46C7DADC8E71EC7186A22C412629737825F
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:20 +0000
ROA not before:           Tue 06 Jan 2026 19:21:20 +0000
ROA not after:            Tue 05 Jan 2027 19:26:20 +0000
asID:                     52510
IP address blocks:        138.219.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:09:e4:6c:7d:ad:c8:e7:1e:c7:18:6a:22:c4:12:62:97:37:82:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:20 2026 GMT
            Not After : Jan  5 19:26:20 2027 GMT
        Subject: CN=0191B40F24E70D2BFFD7C35F12684C848150BA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:1e:9a:54:aa:46:b2:5b:28:af:1d:74:bc:
                    d7:b9:4c:0f:a7:da:6e:8a:3a:f2:e1:4c:1e:80:df:
                    10:73:ba:97:07:69:a7:e1:fa:0a:df:48:a7:7f:ad:
                    99:1a:f9:28:c8:5d:2d:86:99:c4:e0:db:d5:4c:9e:
                    24:4a:ab:9c:45:9b:b1:3c:c4:f9:24:43:7f:32:be:
                    44:ef:cd:03:fa:88:e4:19:25:e5:1d:60:4f:f1:3f:
                    87:f9:a7:26:b9:6b:37:ec:82:3d:34:5e:6e:6c:d2:
                    c1:37:fb:f2:2f:94:9f:22:72:d3:fd:05:47:74:d1:
                    97:03:2f:c8:46:a4:94:32:10:2c:b7:bb:66:b1:e1:
                    20:2c:f1:6c:94:9e:7c:8f:ee:bd:e2:15:eb:07:df:
                    a0:db:15:fe:a6:49:fd:d7:a5:e0:71:65:e8:a0:ac:
                    5a:19:b2:c3:55:f5:64:b4:ae:50:d1:66:c9:2c:a2:
                    16:3c:21:63:a6:84:19:3e:b9:b8:b7:0c:3b:1c:15:
                    b7:7b:3a:5a:24:95:87:53:3e:34:83:ce:d2:be:6d:
                    6a:4c:be:51:98:df:16:84:3b:3c:93:24:f5:de:ca:
                    ef:b9:22:5a:05:05:b3:73:ad:0a:9f:ec:4a:ab:50:
                    0d:18:b3:fa:50:f3:cb:8b:dc:4a:c9:eb:6b:bb:00:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:B4:0F:24:E7:0D:2B:FF:D7:C3:5F:12:68:4C:84:81:50:BA:1E
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32322d3232203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:61:c7:7d:cb:44:ee:92:5e:11:9a:5c:f0:e2:cf:c1:03:28:
         13:f4:28:3b:f4:6a:c0:34:64:af:38:c1:06:9a:e6:79:f7:15:
         1a:8d:7c:f6:d0:3b:05:85:dc:5b:8f:98:b3:15:0d:aa:de:74:
         24:b1:fe:9a:cb:39:96:e3:8a:ca:46:a6:a8:c8:83:86:61:ba:
         2e:a6:b9:a6:28:39:e1:c1:5c:d8:46:c9:e8:e8:37:3a:17:15:
         b7:1f:a3:77:66:82:6a:b0:aa:1e:cf:13:09:ce:22:3c:ef:23:
         0e:7d:6c:ef:2e:59:6a:96:2a:d8:a0:07:ca:dd:51:a7:72:2c:
         2c:40:3c:5f:cd:f3:33:dc:87:e9:c3:1a:74:e1:5c:cf:c7:f0:
         a4:fe:9b:79:30:e3:2a:74:45:b5:be:66:e6:e5:01:95:b7:ed:
         1c:90:11:2f:0a:46:6f:c2:3d:56:1f:f7:33:b2:9a:b2:ae:32:
         70:ca:e1:5a:eb:90:0a:3d:2f:d2:4d:d3:8d:0d:83:02:a1:0a:
         f2:ae:f2:ef:c2:71:36:4d:b2:81:08:04:19:96:46:f6:3c:cf:
         04:65:da:a3:96:23:06:f1:c6:75:45:8f:59:16:0b:35:ae:a9:
         66:e5:cd:8e:4f:b5:95:e7:ba:a2:99:d1:36:69:2b:cd:86:16:
         db:92:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:12 2026 by rpki-client