This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa
File:                     3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier:          3yycZMJyZxGXzVU3y6FS5iauFWAY5xn4uIQwOxMoSL4=
Subject key identifier:   9F:9B:4D:46:01:53:9E:4A:ED:E0:F7:DA:19:E4:2D:47:39:8A:53:D9
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       6192AC5BF34426C895B4016F262BEDD1301707CD
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa
Signing time:             Tue 06 Jan 2026 19:10:42 +0000
ROA not before:           Tue 06 Jan 2026 19:05:42 +0000
ROA not after:            Tue 05 Jan 2027 19:10:42 +0000
asID:                     263744
IP address blocks:        138.94.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:92:ac:5b:f3:44:26:c8:95:b4:01:6f:26:2b:ed:d1:30:17:07:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Jan  6 19:05:42 2026 GMT
            Not After : Jan  5 19:10:42 2027 GMT
        Subject: CN=9F9B4D4601539E4AEDE0F7DA19E42D47398A53D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e1:b0:34:ee:bd:70:b3:f5:22:d1:28:96:47:
                    91:76:db:a0:3c:a2:13:24:64:9b:6e:21:aa:26:1a:
                    0e:fd:27:89:a6:21:55:72:69:6b:a2:59:ce:93:63:
                    22:3c:52:58:83:c1:66:20:3d:d5:92:0b:ab:21:c0:
                    8c:43:7b:cb:e6:fa:c3:c1:1f:c9:e0:03:8d:02:2d:
                    ab:ab:26:52:26:8e:a4:0c:83:06:fc:c9:b9:60:89:
                    90:f6:f6:83:a1:0e:10:fc:92:25:44:e6:8d:1b:1a:
                    ea:05:e2:b6:35:6b:4b:19:d8:e7:50:21:59:d9:9d:
                    f5:67:85:10:45:15:0f:6b:6f:df:0a:3f:2c:08:42:
                    63:83:27:0e:9b:1f:90:59:f0:24:1c:bc:e6:d8:39:
                    d0:4c:17:e9:8c:78:e3:7b:19:38:29:c6:a3:92:b6:
                    59:46:7b:1e:f8:c7:8d:78:c8:a9:d1:85:e5:c7:95:
                    52:60:ab:31:92:19:6a:d9:95:0b:71:aa:88:31:67:
                    2d:1d:5e:a2:34:e2:3e:b6:8d:81:32:22:54:86:c8:
                    c6:8a:a6:72:e6:4f:14:99:f4:6c:4a:32:eb:56:2d:
                    bd:9d:0e:30:0c:62:d9:5d:89:fd:3f:10:a6:c5:7b:
                    98:39:49:1e:ea:38:53:9c:fd:7d:ac:9a:84:38:66:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:4D:46:01:53:9E:4A:ED:E0:F7:DA:19:E4:2D:47:39:8A:53:D9
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:79:00:54:0b:e5:6f:73:ce:c6:af:66:21:af:eb:a8:59:6e:
         e3:47:9d:fe:68:99:00:00:ca:ba:27:4a:f9:c3:79:ca:06:36:
         58:23:ef:8d:86:ce:09:7c:5e:ef:9f:e0:01:79:0c:ac:4d:2b:
         90:4c:3f:2d:5a:30:8d:d5:58:39:29:a1:5d:48:58:d6:0d:60:
         aa:ea:cc:51:c0:71:06:46:75:76:62:db:fe:d0:3c:ab:25:e0:
         38:b2:1c:59:85:d2:a5:2d:59:f8:46:d4:38:19:1c:b9:8c:18:
         1b:5a:c7:18:79:c1:37:94:4b:ed:23:b8:85:d6:04:bf:af:7c:
         50:e0:aa:f8:19:c5:d7:c9:9f:8a:69:85:58:76:32:5f:ae:14:
         b7:7c:19:ae:24:ee:f2:95:47:28:b7:7a:2c:fd:7d:24:12:8c:
         8f:4f:2d:52:71:3e:3f:4e:87:97:5c:61:c9:76:41:b2:cd:9b:
         54:60:25:33:2a:1c:b5:5a:aa:10:86:c5:b0:9d:05:6e:1c:29:
         f1:21:44:01:3e:5c:79:5c:a7:2c:b0:01:1a:22:f5:06:11:5a:
         11:56:ec:0a:08:40:56:43:18:e1:82:c6:1e:f3:3b:4c:c4:c9:
         58:30:9a:72:35:fd:da:0b:74:86:7b:b5:f8:24:64:3c:54:c6:
         a2:bd:62:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:45 2026 by rpki-client