This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34302e302f32322d3234203d3e203237383233.roa
File:                     3133382e3231392e34302e302f32322d3234203d3e203237383233.roa (raw, json)
Hash identifier:          UNqer8itzTU8qURVNZ8faYq3AKetS0Pw/lciMT45Y9w=
Subject key identifier:   2D:5E:B4:7A:AE:6D:04:EB:02:F9:DB:43:07:3E:C5:F9:34:73:94:59
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       07322255E17EF333DB523445A2A0EAA5F9A427D3
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34302e302f32322d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:41 +0000
ROA not before:           Tue 06 Jan 2026 19:00:41 +0000
ROA not after:            Tue 05 Jan 2027 19:05:41 +0000
asID:                     27823
IP address blocks:        138.219.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:32:22:55:e1:7e:f3:33:db:52:34:45:a2:a0:ea:a5:f9:a4:27:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:41 2026 GMT
            Not After : Jan  5 19:05:41 2027 GMT
        Subject: CN=2D5EB47AAE6D04EB02F9DB43073EC5F934739459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:1e:60:4e:ab:24:54:95:18:65:22:c2:a9:
                    a3:7a:1b:2a:88:30:5f:19:42:a3:54:9a:0d:2a:08:
                    11:44:0d:4f:89:36:50:84:58:2a:73:e4:8c:4b:5c:
                    52:33:0e:17:16:e9:bd:14:4f:dd:f8:4b:4e:53:9d:
                    fc:62:10:72:cc:49:b4:46:fc:c4:a4:ee:04:9f:22:
                    67:a5:fe:7a:fe:18:90:4a:26:d2:ca:47:38:90:a8:
                    48:18:46:4c:5e:0c:00:41:d6:e1:1b:e5:50:db:50:
                    38:28:f0:5b:f1:e8:b1:ac:97:2f:46:71:fa:60:60:
                    45:4c:36:b8:e4:83:d4:6c:d0:96:fe:8c:fb:af:d3:
                    dc:9c:6f:8c:a1:68:64:23:e5:6d:65:9a:a4:e5:82:
                    db:99:c5:e5:3d:65:1d:c9:6c:b9:85:ff:99:52:84:
                    d2:81:29:e5:f4:bb:67:68:55:b0:40:76:72:59:0e:
                    9b:77:00:45:7a:10:3a:5e:5b:58:0b:07:52:0f:7d:
                    08:65:64:8c:df:ea:2b:99:d8:99:8f:7e:73:40:83:
                    6e:65:e3:3e:28:1d:b7:bc:e7:c6:ef:89:d4:bd:9c:
                    90:64:4c:45:58:87:2d:32:8a:f6:84:9f:91:9b:f7:
                    a5:d9:c2:86:7c:83:87:15:f1:44:5e:85:d7:a6:7e:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:B4:7A:AE:6D:04:EB:02:F9:DB:43:07:3E:C5:F9:34:73:94:59
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34302e302f32322d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:cc:d2:f2:ac:d8:b3:7c:48:3f:4b:58:c1:b8:e1:d5:d9:
         32:b2:84:15:2b:ee:47:97:f8:ab:15:96:ab:85:d6:fd:23:39:
         45:39:91:0d:1c:0d:20:8c:3b:a2:da:8b:07:c0:7f:ef:a6:ca:
         b1:37:e7:f1:27:69:b8:bd:5d:e0:d7:42:82:32:fc:00:83:9b:
         15:93:37:43:55:a1:35:bd:35:fb:ce:a4:61:f2:dd:ee:92:8f:
         18:5b:31:cd:c6:51:8c:0b:2f:95:69:3a:50:53:52:8d:6d:f6:
         bb:be:79:42:06:70:45:0d:29:e4:35:88:c5:6b:21:11:b6:fb:
         c0:f6:28:8b:51:9e:09:f2:75:c4:ac:13:95:cb:c6:77:d5:dc:
         42:08:6b:dc:36:29:9e:c1:2a:8b:ad:9d:d3:fb:57:69:6e:fd:
         ad:5c:9f:d1:05:5b:5c:db:79:c3:c4:76:2f:45:59:0d:77:91:
         46:05:12:b9:65:c7:e3:ae:aa:7a:62:3e:cb:fd:e5:4b:5d:98:
         f3:28:1a:bc:2d:1e:c9:e7:99:83:a5:cf:99:17:02:6a:06:ab:
         c9:d0:17:8d:d8:4d:6b:a8:e4:ba:29:81:ce:f7:8a:be:db:da:
         de:67:55:70:7f:29:24:b1:56:13:c1:d2:c1:06:eb:6f:ee:2d:
         74:fe:96:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:18:34 2026 by rpki-client