This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231362e302f32312d3234203d3e203237383935.roa
File:                     3138312e39342e3231362e302f32312d3234203d3e203237383935.roa (raw, json)
Hash identifier:          2w0ORi7QxTNRNnrGJ00t10W6iXJe9fwRBTyfLJD9jYw=
Subject key identifier:   82:01:85:E1:1F:36:E9:00:1E:D9:D9:32:D6:FE:5C:B8:1F:84:69:B6
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       5CCEE3CE132FE21379EE9AB3EB89890042D97D7F
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231362e302f32312d3234203d3e203237383935.roa
Signing time:             Tue 06 Jan 2026 19:21:38 +0000
ROA not before:           Tue 06 Jan 2026 19:16:38 +0000
ROA not after:            Tue 05 Jan 2027 19:21:38 +0000
asID:                     27895
IP address blocks:        181.94.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 13:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ce:e3:ce:13:2f:e2:13:79:ee:9a:b3:eb:89:89:00:42:d9:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Jan  6 19:16:38 2026 GMT
            Not After : Jan  5 19:21:38 2027 GMT
        Subject: CN=820185E11F36E9001ED9D932D6FE5CB81F8469B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:fc:a8:81:43:37:b8:2a:36:70:14:16:70:
                    53:a1:a4:4a:fd:a6:43:2b:ff:71:fc:83:27:51:69:
                    a9:f9:75:9a:07:30:96:cb:86:ff:49:53:27:77:8a:
                    9d:46:c8:f1:ce:7e:4a:94:30:28:7a:2f:2b:ac:a4:
                    89:ee:8d:ab:69:20:fe:16:3f:4b:05:a7:8c:e0:74:
                    68:9d:04:f2:d2:e6:30:4a:e0:b5:20:f2:98:2a:33:
                    81:f6:5f:fd:d5:f3:11:32:41:67:fe:cd:5e:3a:e7:
                    65:d0:bc:2f:7c:27:6f:ef:d8:23:1a:d5:b9:aa:41:
                    0a:ae:b3:fe:b9:d3:e5:8d:aa:91:30:ca:a5:e3:ad:
                    f5:d5:28:3a:31:71:68:5e:8c:cb:95:02:15:4d:36:
                    00:92:56:78:ad:d8:55:10:c9:a0:7e:09:ec:0b:f0:
                    a6:a4:dd:f7:01:88:72:32:42:9e:6d:23:e2:aa:ed:
                    85:17:fd:60:31:76:4e:e2:c2:4a:a7:87:ff:29:50:
                    13:36:6c:96:41:8c:62:6b:9e:8e:6c:e5:2f:fe:fb:
                    84:47:ad:cb:c2:0b:63:38:cb:5c:63:86:7b:b1:0e:
                    96:6a:64:ee:c6:b7:97:e3:ba:d1:76:7c:67:86:43:
                    27:b6:48:10:1b:6b:94:c6:d4:f9:30:71:6b:e9:fc:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:85:E1:1F:36:E9:00:1E:D9:D9:32:D6:FE:5C:B8:1F:84:69:B6
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231362e302f32312d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:49:0d:c9:23:28:e9:84:6b:c4:00:ba:52:1a:e7:0f:0b:
         f9:64:27:9a:bd:d0:79:37:7d:19:01:4b:94:a9:36:c5:0e:4a:
         ff:64:f8:e1:fe:ec:dd:ac:85:fa:b6:79:bf:d2:c6:41:3c:97:
         36:7b:8b:90:50:a8:36:ec:37:12:f5:60:39:44:a0:00:c9:12:
         51:33:a0:f7:df:e9:1b:85:ff:87:b4:cc:87:33:97:a5:b4:b5:
         a6:00:11:4e:e3:a5:d9:12:3c:92:07:e3:d8:97:04:3f:a4:77:
         56:18:6d:7e:1f:ac:07:d1:24:97:c3:0f:01:19:a3:09:3b:1a:
         bd:3b:75:f8:11:65:0b:03:ac:49:53:3c:2a:54:4f:cf:8e:08:
         76:64:3e:7b:dd:af:e4:71:c8:ff:07:83:6b:d7:7f:bc:cf:13:
         10:60:f3:d9:cb:67:f2:39:b8:5b:56:14:18:e9:5c:13:e1:38:
         59:30:c4:05:18:4b:86:a7:39:3b:68:93:b9:5b:f1:4e:67:6c:
         8d:ad:82:d8:c8:ed:7d:3e:86:52:89:bc:e5:7f:6e:27:cd:19:
         8c:15:d9:70:1c:85:03:6f:f4:69:b0:eb:fc:26:4f:b9:cc:6b:
         19:8a:db:09:5f:be:28:42:8f:d6:e3:19:04:f9:b5:a6:e1:d0:
         22:bd:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:56 2026 by rpki-client