This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34322e302f32342d3234203d3e203237383233.roa
File:                     3133382e3231392e34322e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          UomhnL22Wltq/xKTA/nXixFEDrrwVK9ax3fcA0U965w=
Subject key identifier:   73:1B:AF:11:A2:14:53:C2:E4:14:73:7E:54:69:38:38:D9:2A:8E:C9
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       1A0C04FFD33AA2D68CAFF6D73FA91C30B87FC48E
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34322e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:59 +0000
ROA not before:           Tue 06 Jan 2026 19:00:59 +0000
ROA not after:            Tue 05 Jan 2027 19:05:59 +0000
asID:                     27823
IP address blocks:        138.219.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0c:04:ff:d3:3a:a2:d6:8c:af:f6:d7:3f:a9:1c:30:b8:7f:c4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:59 2026 GMT
            Not After : Jan  5 19:05:59 2027 GMT
        Subject: CN=731BAF11A21453C2E414737E54693838D92A8EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:8e:d3:c1:69:2d:64:4c:67:97:6b:32:fe:
                    90:bc:08:73:39:cb:56:0f:d5:b8:76:a0:95:51:c3:
                    76:72:05:78:59:53:d6:19:fc:88:b6:7d:47:da:2f:
                    57:49:3f:a1:7d:a9:d3:25:69:f8:62:0a:2c:56:28:
                    02:40:65:5e:0e:29:72:8c:b3:14:71:f1:02:77:29:
                    01:a8:59:4d:e6:1b:e7:ca:9b:55:9c:e8:09:da:d1:
                    0e:85:dc:59:43:62:42:51:9f:f4:a9:9d:ff:5d:ad:
                    c2:96:26:0c:b8:51:3e:c4:73:4f:82:17:48:27:4d:
                    ef:fb:91:94:fa:db:c2:8a:77:50:0b:0e:43:68:9f:
                    cf:41:c4:4b:4a:3d:3c:83:b9:63:df:bd:e4:7d:5c:
                    9b:02:e4:92:b5:b0:cd:13:1d:cb:2e:14:21:8d:df:
                    39:aa:b5:a3:65:98:af:69:37:94:92:ed:d1:db:2c:
                    e5:6c:6c:f2:23:11:94:7b:52:61:6f:5c:bc:77:5e:
                    f6:da:c1:7d:a6:7b:16:4e:76:6a:85:d7:67:47:ae:
                    b9:dd:95:64:ba:16:7d:a4:b3:dc:46:6b:35:a9:f4:
                    2c:a5:8b:af:f9:1b:74:a6:26:e7:d1:d1:03:9e:62:
                    b4:ac:f1:63:07:12:7b:50:1b:03:46:dd:36:32:00:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:AF:11:A2:14:53:C2:E4:14:73:7E:54:69:38:38:D9:2A:8E:C9
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34322e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:f4:c9:c0:88:4c:39:28:e8:f0:92:c3:35:96:f5:21:a3:
         d5:49:6e:47:dc:a7:95:94:85:07:bb:8e:f6:d5:e5:1d:ba:eb:
         de:04:26:9a:a5:c0:17:f8:18:22:3e:46:66:7d:16:9a:5b:61:
         3a:ba:b7:df:bc:9a:67:fc:54:14:4c:d6:72:c9:ee:be:52:66:
         f9:38:99:8f:9e:6f:a9:a4:8d:3b:67:10:ab:e9:ac:75:0f:dd:
         1b:3a:bb:06:65:7e:3e:07:8a:ac:43:8c:3a:3f:93:b6:5b:c5:
         1a:91:4f:c4:ce:cb:32:39:e7:ba:24:ad:0c:e8:73:db:7c:cf:
         7a:53:b7:a9:fc:e9:74:7a:52:78:c0:c8:2b:98:91:b3:7a:31:
         74:ee:df:00:58:eb:0c:98:37:8d:aa:43:aa:39:55:e6:77:b2:
         98:2b:8a:29:02:3b:64:4d:5a:93:29:0d:1d:b4:85:08:5d:e5:
         d9:f3:90:cd:56:0e:81:7b:e2:f4:c8:4b:f0:63:30:13:71:51:
         3f:cd:c4:17:47:ac:13:df:1a:00:1f:ef:87:72:7a:48:ee:05:
         b8:d6:9e:ba:f6:4b:5a:18:07:f6:8c:a2:ce:73:97:40:33:2d:
         57:b4:67:89:8d:d3:27:d2:71:83:45:01:8f:65:35:59:e1:66:
         59:c8:51:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:46:55 2026 by rpki-client