This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234382e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3234382e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          zcprAVg0t67y/K8lK95bIeWY1waBb1ZrR4oPCJv/WFY=
Subject key identifier:   66:ED:27:66:F7:0E:A1:79:F3:CB:C0:88:8C:17:CF:6E:8F:7C:D9:7B
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       4A5538824B3FAFCE6A31BD3D437611A36C91A5B4
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234382e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 06 Jan 2026 19:21:37 +0000
ROA not before:           Tue 06 Jan 2026 19:16:37 +0000
ROA not after:            Tue 05 Jan 2027 19:21:37 +0000
asID:                     27895
IP address blocks:        181.94.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:38:82:4b:3f:af:ce:6a:31:bd:3d:43:76:11:a3:6c:91:a5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Jan  6 19:16:37 2026 GMT
            Not After : Jan  5 19:21:37 2027 GMT
        Subject: CN=66ED2766F70EA179F3CBC0888C17CF6E8F7CD97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:bc:92:fb:a7:c4:b1:1e:64:c8:28:e0:0d:
                    3e:06:93:5d:9a:eb:09:4b:a2:76:ad:70:d2:50:28:
                    23:c9:88:8c:00:38:5f:f6:4c:d3:00:18:c8:2c:69:
                    45:7e:a7:fd:3e:e6:2b:6a:7d:ce:08:5b:55:d2:5c:
                    09:e7:12:4e:e6:43:69:52:61:5a:8d:43:cc:96:9c:
                    7b:3f:3a:e6:00:e8:31:e4:b7:ed:2c:f7:70:57:71:
                    7d:e7:4f:55:97:a0:a5:ef:50:67:96:c7:ae:15:8d:
                    93:61:b8:f9:ad:63:42:df:d9:b8:60:9e:2c:8c:9c:
                    61:8a:58:61:b5:6e:a9:a1:03:26:0c:58:6b:0d:b9:
                    c9:fc:4f:c2:b8:9a:b0:aa:28:b3:b6:e0:f7:f6:6e:
                    06:73:63:d3:c3:88:f7:11:fe:f8:a3:d7:a1:ad:b4:
                    a6:e7:d4:60:6b:4e:22:4f:39:08:dd:45:c8:61:f3:
                    16:d8:34:34:28:1a:5b:66:c7:ee:8a:fe:ba:de:c4:
                    d1:ce:72:e5:40:50:02:db:81:11:c6:07:24:aa:45:
                    7e:c2:3a:4c:6c:17:d2:29:66:7e:a2:f3:00:b2:8e:
                    75:3a:18:76:22:13:61:86:03:af:60:68:83:8e:0d:
                    f9:5b:81:b8:fb:41:63:73:91:3f:f6:cf:ba:14:ae:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:27:66:F7:0E:A1:79:F3:CB:C0:88:8C:17:CF:6E:8F:7C:D9:7B
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234382e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:e1:56:9c:6a:69:ec:a7:5c:c0:9a:6a:5b:9c:83:86:a6:
         2f:2b:32:59:2f:a9:9f:41:1c:c1:c2:4b:0c:5f:89:f5:f3:07:
         b2:a3:8f:9b:87:cd:9f:b6:4c:f9:f4:9f:84:a6:4b:c2:68:91:
         e8:2c:ed:a5:52:18:0e:16:3c:38:44:05:4f:2f:88:66:3e:d7:
         1e:db:e3:d6:4d:bf:67:8e:09:c1:6d:a6:c0:9f:a6:8c:b9:49:
         6b:ff:d3:30:a1:cc:24:f0:53:1c:db:3d:d6:1e:32:ba:49:6d:
         65:f1:33:ce:93:99:eb:25:fa:e7:1f:7b:be:a3:fe:8b:3b:4d:
         56:8e:a7:01:e4:25:bf:f5:05:19:88:da:42:77:09:8a:d4:4b:
         3c:21:13:3a:98:18:7a:a6:bb:80:fb:18:82:e3:b1:82:f3:e5:
         8e:cb:4e:ee:1c:38:54:06:29:d4:a4:2d:2e:bb:48:3a:de:c2:
         47:7c:ce:d4:78:29:84:f1:e6:48:3a:b5:eb:bc:12:ae:78:53:
         49:a6:ca:5a:a8:03:59:dd:78:8a:9c:dd:f0:6e:cf:28:b2:29:
         a4:b2:e0:24:b5:4f:1a:72:06:35:30:bf:9d:7d:a1:aa:bb:3e:
         0c:13:87:0d:2f:60:ff:51:ac:b3:bb:00:aa:55:5c:96:ab:d9:
         30:db:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:28:49 2026 by rpki-client