This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32342d3234203d3e203532353130.roa
File:                     3133382e3231392e35362e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          gRFfB2Mjb9KT7nZyymPdwwVGsC3N/M82Ya3a+Zz14r8=
Subject key identifier:   80:3C:FE:EA:92:8D:D4:4A:E8:04:94:24:14:17:49:C4:0E:85:B8:8F
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       6741AE3B85B11DD2022BBC215F163C591DB536B0
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:19 +0000
ROA not before:           Tue 06 Jan 2026 19:21:19 +0000
ROA not after:            Tue 05 Jan 2027 19:26:19 +0000
asID:                     52510
IP address blocks:        138.219.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:41:ae:3b:85:b1:1d:d2:02:2b:bc:21:5f:16:3c:59:1d:b5:36:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:19 2026 GMT
            Not After : Jan  5 19:26:19 2027 GMT
        Subject: CN=803CFEEA928DD44AE8049424141749C40E85B88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:c6:f3:52:d2:20:c8:af:aa:82:e6:40:c9:
                    8f:f7:14:07:2a:69:f5:74:5a:9b:fe:5a:53:4f:e1:
                    ef:39:3e:c2:f3:3b:54:fc:c4:06:db:67:07:9c:5a:
                    16:75:ec:44:50:26:f9:95:47:fb:dc:ea:2a:8b:9a:
                    18:c2:2f:ae:93:ee:0f:db:81:48:e0:db:84:e5:0d:
                    07:06:53:03:b0:ad:bd:c9:0e:92:87:a3:83:58:fd:
                    65:f5:24:51:84:67:b1:19:cc:5c:0f:49:ae:04:31:
                    55:b4:0a:1c:db:b3:c5:aa:9f:2c:4b:15:94:d8:55:
                    1d:4d:1d:6a:ee:27:a8:a5:c8:c2:ac:9e:de:a1:60:
                    81:65:b3:a0:9d:c5:77:c1:29:f0:1e:2b:a7:4b:95:
                    2f:d1:dc:e3:5c:16:99:64:03:a3:6a:74:16:ed:9f:
                    2f:48:b7:9e:32:d9:7b:cf:2f:5f:59:c0:8c:ab:61:
                    f8:57:1f:ed:f8:5e:4b:88:8c:0d:c9:f3:95:f2:95:
                    d9:99:43:bf:7e:50:8e:84:31:e7:7a:0f:43:16:34:
                    7d:d5:8d:45:85:92:98:93:8d:d9:10:7c:96:64:14:
                    1d:33:60:06:07:0c:98:5f:71:65:dd:68:48:b3:e1:
                    a3:3b:e3:51:22:6d:26:bf:f3:3c:a6:26:d6:d3:7b:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3C:FE:EA:92:8D:D4:4A:E8:04:94:24:14:17:49:C4:0E:85:B8:8F
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35362e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:af:ad:71:bc:a9:f2:cb:4e:80:b8:d9:88:f6:bf:77:d0:
         65:68:2b:94:f4:60:08:31:3f:0c:47:a3:24:8d:5d:c3:45:9e:
         19:e2:6e:e6:a2:e9:3f:47:5b:1c:b2:11:f6:5e:4f:02:b5:16:
         69:14:57:ff:9c:bc:5f:8b:17:c4:f5:27:8f:dc:21:b6:d3:70:
         5d:8d:28:dd:45:a9:72:d0:65:05:44:8e:9b:35:69:17:2d:1e:
         9d:9f:e0:45:59:a5:45:e0:b1:96:cd:68:95:db:74:46:e1:3d:
         57:bf:1a:36:2f:f3:40:a1:f2:da:6b:f9:31:7e:f1:77:77:fd:
         32:75:dd:21:61:99:ed:ae:f4:d5:80:02:e4:03:f0:5f:7e:fc:
         c6:2e:3c:ed:d6:37:ee:53:60:1b:f3:9a:69:da:87:9a:59:3c:
         20:de:e0:37:04:66:0a:b3:97:0f:0e:a0:3a:69:d8:39:dd:28:
         10:1d:25:bd:53:34:9f:c0:dd:a6:d8:e6:db:bc:1e:bc:8b:c6:
         4e:0b:c0:8a:77:7e:32:62:99:a6:88:9c:c2:bb:40:41:f4:34:
         9e:9c:b3:8a:92:0f:f7:eb:36:f0:6d:9d:5e:d0:93:9c:9c:cf:
         f4:fb:75:df:f5:cd:d4:c6:43:b4:51:65:66:33:11:dc:1b:5c:
         65:4b:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:49 2026 by rpki-client