This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
File:                     3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          jx7EAbuxII/7UrSTHPmz+75CuCbKYifB1n3O6Q/Caq0=
Subject key identifier:   B1:CB:71:DB:A3:0E:18:30:97:1B:9A:A8:35:91:D3:4A:84:20:9D:25
Certificate issuer:       /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial:       2E458A9CF5E6C92C3B3CAA072E0EE5A4F35F2EC5
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
Signing time:             Tue 06 Jan 2026 19:26:10 +0000
ROA not before:           Tue 06 Jan 2026 19:21:10 +0000
ROA not after:            Tue 05 Jan 2027 19:26:10 +0000
asID:                     262287
IP address blocks:        138.99.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:45:8a:9c:f5:e6:c9:2c:3b:3c:aa:07:2e:0e:e5:a4:f3:5f:2e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
        Validity
            Not Before: Jan  6 19:21:10 2026 GMT
            Not After : Jan  5 19:26:10 2027 GMT
        Subject: CN=B1CB71DBA30E1830971B9AA83591D34A84209D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:34:29:aa:a8:77:10:d1:8e:0f:08:2a:de:
                    ee:da:1a:05:75:ed:14:06:fe:02:26:91:be:66:ad:
                    e4:46:3e:20:97:f5:fd:34:e2:46:fb:f1:f9:b5:41:
                    17:d8:41:c8:26:df:2b:3e:a4:4b:b7:4f:e9:51:1e:
                    53:64:bf:99:0e:ed:ce:69:18:c9:8d:cb:ab:71:c6:
                    2d:39:5d:c8:c3:9c:7e:67:05:66:5d:7e:83:db:63:
                    65:74:af:4e:d2:12:89:f0:8d:3c:f4:d2:9f:c3:66:
                    f3:83:85:fe:15:84:70:31:01:58:43:a2:f6:4b:40:
                    58:f4:05:a3:53:65:1f:f2:08:e8:33:77:4a:20:23:
                    22:dd:5f:3c:ba:6a:7d:96:f7:bc:a3:d3:10:e9:23:
                    c8:8a:2d:8b:3c:40:dc:98:98:4c:b7:b7:bb:88:19:
                    54:b0:64:71:4f:9d:45:d2:18:c4:99:f5:b3:1f:61:
                    fb:b2:50:f4:5f:0a:c6:36:79:c8:ab:1b:93:32:f0:
                    ad:84:f7:91:dd:2a:d3:11:56:21:4e:f4:30:b3:14:
                    d8:09:3c:82:13:2b:36:f5:a0:3f:fb:4d:26:38:81:
                    a6:07:c4:f0:8c:21:64:dc:0e:3b:ed:65:0d:9f:2b:
                    13:a5:25:58:33:4e:b6:f2:fb:a1:72:05:df:97:85:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:71:DB:A3:0E:18:30:97:1B:9A:A8:35:91:D3:4A:84:20:9D:25
            X509v3 Authority Key Identifier:
                keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e1:f0:c1:63:9a:52:32:84:00:18:8a:36:c7:0c:c1:b3:32:
         ac:30:a5:42:ca:96:f6:60:37:25:68:d5:db:48:89:06:dc:19:
         75:ad:f4:0e:b4:62:ce:e3:cb:28:0a:58:55:31:1b:55:1d:63:
         c8:72:99:6f:4b:97:47:b9:fa:d6:df:91:95:e8:cf:d5:b3:c0:
         b1:90:2f:61:b7:c5:b1:82:8e:6a:7c:39:85:80:56:3c:d6:e2:
         fb:56:c6:8d:ad:0f:52:7f:07:b1:72:cc:c0:53:da:64:1a:de:
         ab:d8:2d:b2:22:f5:14:f5:a3:ef:a9:b5:81:da:ae:a8:90:2f:
         e6:d6:54:81:be:ae:a8:81:92:5f:a4:e3:08:e7:6c:0b:18:9b:
         e0:b7:17:a5:7e:43:d5:83:fc:47:43:a8:c7:0f:77:80:61:2d:
         dc:18:b9:7c:d2:46:71:15:ca:b3:df:88:67:b4:2e:b7:4b:f0:
         e3:f9:35:89:26:65:33:e6:21:cd:34:26:b3:30:fd:83:58:0b:
         6d:1d:3c:fa:60:0b:0f:c0:0e:ce:57:db:e3:28:db:fd:ca:0c:
         2f:73:77:29:c5:4b:0a:54:f8:db:31:18:0a:f1:0f:e4:76:ba:
         01:9c:2b:82:8e:16:f5:27:b8:5d:de:12:dd:a4:6a:93:f7:90:
         f4:92:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:22 2026 by rpki-client