This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa
File:                     3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa (raw, json)
Hash identifier:          502/ZJRJUUlILGtZ517vEd1yQ6jM/kjoXP/1VpXpXU4=
Subject key identifier:   0B:5A:94:04:DE:A5:5B:42:20:7B:53:82:6E:1B:16:11:1B:38:44:34
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       4DF3C76A68A149DD7B763C905C06A8319E3FF0F1
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa
Signing time:             Tue 06 Jan 2026 19:22:16 +0000
ROA not before:           Tue 06 Jan 2026 19:17:16 +0000
ROA not after:            Tue 05 Jan 2027 19:22:16 +0000
asID:                     263823
IP address blocks:        138.219.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f3:c7:6a:68:a1:49:dd:7b:76:3c:90:5c:06:a8:31:9e:3f:f0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Jan  6 19:17:16 2026 GMT
            Not After : Jan  5 19:22:16 2027 GMT
        Subject: CN=0B5A9404DEA55B42207B53826E1B16111B384434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:c0:f9:a5:81:87:cb:14:ee:68:3c:6e:dd:
                    e0:4d:41:22:67:5d:d0:02:0e:a0:76:fa:88:ad:01:
                    3c:bd:f4:32:43:d1:09:1d:bb:4f:1b:cd:eb:46:06:
                    01:ce:ca:21:c9:eb:cc:3b:4e:0e:4b:63:2c:c0:79:
                    b1:cc:be:36:2f:cb:7a:15:21:f8:8a:27:ac:92:b7:
                    98:b1:f3:ea:88:b5:52:48:9a:c4:5e:94:ec:72:69:
                    ec:fb:b3:56:f7:05:92:a4:75:45:5d:1a:6d:d3:8c:
                    75:21:07:0a:c8:63:dc:15:8b:a4:83:58:12:1c:96:
                    61:f2:62:5c:93:0e:f7:cf:30:ef:0e:2a:e3:fd:36:
                    58:55:3d:8d:7f:17:fd:72:d4:d8:9a:06:20:c8:11:
                    2c:87:ef:96:8b:ab:0c:6d:42:8f:83:e8:ea:33:29:
                    ab:99:21:a1:10:7c:e0:fc:82:22:0f:7d:7b:aa:de:
                    48:56:91:30:51:a1:44:a7:4c:c5:05:4b:75:ec:0a:
                    20:86:45:bc:63:ed:8d:6a:76:20:32:bd:e1:36:cf:
                    f3:81:27:e2:bb:85:a6:14:96:9d:06:3a:05:41:ca:
                    82:19:ae:ab:0e:bd:f1:86:c3:2a:3d:fb:37:1a:8e:
                    fc:7c:65:af:55:7c:54:1c:70:1d:b7:32:6e:e5:3b:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:94:04:DE:A5:5B:42:20:7B:53:82:6E:1B:16:11:1B:38:44:34
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:24:40:33:d3:11:6c:03:b3:ef:c7:89:92:2c:44:cb:14:
         e1:b5:87:fe:ea:e7:66:3d:f7:fc:32:1a:b9:56:0b:dc:98:5a:
         18:8e:2d:ab:04:c6:99:14:ce:f6:6b:82:59:d9:ad:17:0e:ff:
         75:a1:88:70:a1:e8:69:1d:5f:2b:fd:21:a4:83:9f:3f:21:ab:
         3b:86:e4:6d:cb:ff:5e:7b:49:37:16:0f:c5:a7:e2:3f:3f:c8:
         05:25:1d:5a:0e:64:3a:84:48:96:ca:9c:81:39:3c:96:85:7b:
         2e:af:fb:27:91:95:cb:f0:6e:5d:ed:76:78:c9:2e:bc:0e:94:
         df:6d:fc:3d:dd:04:73:df:ac:4c:bd:67:11:98:4a:e8:a3:e3:
         a0:83:8b:48:e4:86:0d:7a:e6:60:12:6c:a3:39:cf:ec:cc:8c:
         e2:d7:42:2b:b2:15:f2:47:b7:b8:0c:59:3f:dc:36:fc:71:23:
         1d:14:ea:48:92:58:fd:b1:c7:ff:1b:6c:63:8b:3c:82:50:80:
         12:bf:e2:d0:17:0b:4d:0b:1a:2c:9e:ba:40:00:0e:8e:d9:fe:
         21:12:08:e5:81:5d:e2:ad:f3:66:fb:42:0c:06:30:5d:f8:91:
         63:57:e9:e5:c8:d1:58:77:d0:4e:3f:d4:59:36:05:2e:44:71:
         9d:ca:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:33:13 2026 by rpki-client