This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31362e302f32322d3233203d3e203332303938.roa
File:                     3138372e3235312e31362e302f32322d3233203d3e203332303938.roa (raw, json)
Hash identifier:          1CcLgch3TFyg5NXNF/eYUjRY009ODngRvw0v9hwPJbM=
Subject key identifier:   15:56:3B:A9:8D:97:08:5F:38:B6:4A:6F:D5:05:03:03:76:3E:63:E8
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       7F5148C0985F879960073A67E9F4080329A96A2E
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31362e302f32322d3233203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:54 +0000
ROA not before:           Tue 06 Jan 2026 19:35:54 +0000
ROA not after:            Tue 05 Jan 2027 19:40:54 +0000
asID:                     32098
IP address blocks:        187.251.16.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:51:48:c0:98:5f:87:99:60:07:3a:67:e9:f4:08:03:29:a9:6a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:54 2026 GMT
            Not After : Jan  5 19:40:54 2027 GMT
        Subject: CN=15563BA98D97085F38B64A6FD5050303763E63E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:05:c7:64:a1:d6:2f:08:30:2e:62:21:e4:
                    e3:d2:37:0b:9f:56:ae:cd:d1:13:b4:f6:ef:a3:e6:
                    bb:d7:c5:fb:40:40:39:36:10:c2:79:87:55:85:61:
                    92:07:69:bd:6b:87:4d:1c:4d:6d:ed:34:db:c0:a2:
                    9c:9f:23:65:a8:79:35:c0:b7:39:31:d3:85:cb:37:
                    5e:d8:88:82:4d:b8:43:8b:61:fe:1e:4e:bd:97:75:
                    d6:3a:18:61:e5:ce:59:8e:f4:3c:db:bd:9c:3e:b2:
                    6d:2f:53:be:9a:5b:0e:e0:48:af:57:cf:db:cf:4a:
                    b7:53:1a:6e:55:9f:19:62:bd:e7:14:be:d6:b5:6d:
                    22:8b:73:6c:ac:8e:b3:a1:82:8f:a1:58:72:88:cd:
                    c2:1d:26:6b:98:95:6e:2d:9c:0e:af:07:d1:4c:77:
                    26:65:a1:84:51:22:6a:af:af:7e:8f:0a:f9:92:f6:
                    73:cd:7d:7a:96:96:7b:51:63:09:ff:45:59:65:93:
                    de:65:e6:07:d0:a3:b0:23:f6:f2:a1:9b:4b:84:95:
                    63:fa:20:41:31:0f:60:e3:75:f2:d8:ca:5a:8d:98:
                    54:59:a9:d0:91:28:15:9c:7d:35:4b:05:7b:c9:ac:
                    eb:ce:06:de:8c:93:ca:46:e5:70:42:a3:b3:df:f8:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:56:3B:A9:8D:97:08:5F:38:B6:4A:6F:D5:05:03:03:76:3E:63:E8
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e31362e302f32322d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:21:f5:a0:08:10:68:7a:2e:e6:78:1e:b4:d8:9b:b4:74:
         12:44:60:09:49:c8:31:d0:2b:0a:1f:99:7a:8a:e6:63:f8:7d:
         53:0a:f5:8c:30:2f:b8:39:b7:f4:89:3a:10:a5:bd:2f:07:1b:
         60:34:9b:3a:90:ca:6c:09:3d:6b:36:55:73:03:de:2b:f0:70:
         26:ac:ae:6a:7a:14:d3:a2:ae:a5:aa:a0:ad:e7:03:1a:55:12:
         fa:de:10:ac:fb:a8:ff:52:95:e0:97:47:02:94:4a:6b:06:ba:
         4d:80:cb:d6:f9:53:22:8a:1d:fe:e8:af:39:71:68:14:16:01:
         ba:10:e1:5d:dc:c3:19:11:56:2a:18:6b:d5:4d:55:74:bf:bf:
         c9:f7:e2:54:32:2f:f7:c1:0e:b9:0c:f9:37:da:1d:3c:de:9e:
         b0:b0:a2:b2:fd:12:03:38:50:8a:f6:7e:17:b8:fc:1d:65:6b:
         eb:5e:de:47:e8:4a:10:05:6a:a8:b9:30:35:4a:57:f4:c6:29:
         c0:48:12:65:85:ae:21:94:6f:74:04:c3:ae:4f:cf:84:88:83:
         27:d6:ed:d9:32:0c:fa:cc:5a:11:3f:29:09:5c:29:cf:ed:36:
         9b:07:c6:0b:be:c2:d1:77:94:70:c6:41:96:56:5c:40:0d:c9:
         db:c9:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:45 2026 by rpki-client