This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3133382e302e3138342e302f32322d3234203d3e20323633373336.roa
File:                     3133382e302e3138342e302f32322d3234203d3e20323633373336.roa (raw, json)
Hash identifier:          35OFgy6elGAeXZOa/YnrejZfj/agSLs399AZPqWrFVM=
Subject key identifier:   0D:A0:34:15:29:73:A4:C7:32:95:35:37:35:D3:76:BC:98:1C:B1:98
Certificate issuer:       /CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
Certificate serial:       7B5E95922A40F7C377A914D675E33462C244A31B
Authority key identifier: 6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3133382e302e3138342e302f32322d3234203d3e20323633373336.roa
Signing time:             Tue 06 Jan 2026 19:31:34 +0000
ROA not before:           Tue 06 Jan 2026 19:26:34 +0000
ROA not after:            Tue 05 Jan 2027 19:31:34 +0000
asID:                     263736
IP address blocks:        138.0.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5e:95:92:2a:40:f7:c3:77:a9:14:d6:75:e3:34:62:c2:44:a3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
        Validity
            Not Before: Jan  6 19:26:34 2026 GMT
            Not After : Jan  5 19:31:34 2027 GMT
        Subject: CN=0DA034152973A4C73295353735D376BC981CB198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:74:05:f3:ac:b2:45:88:ca:c3:0e:ad:db:
                    e0:dd:ed:5b:bd:bc:b3:22:ce:dc:23:49:4c:0e:cf:
                    16:3a:47:4e:63:b0:86:ae:9c:3e:06:52:e4:33:fb:
                    b0:0f:cd:dd:25:93:5b:93:f3:c7:fa:fa:bc:25:85:
                    c4:14:19:44:06:f5:26:37:56:dc:0e:65:fd:5d:0f:
                    53:4a:f7:fb:70:f2:51:57:a3:a8:8d:e6:29:a7:89:
                    13:30:09:50:1c:f2:b8:8f:d6:d8:69:54:17:bf:76:
                    d8:a3:c1:98:1c:f8:43:b0:8a:6b:d0:95:46:cf:a5:
                    1f:41:56:e4:41:73:da:3d:2a:18:ab:0b:7e:58:98:
                    a7:6f:b9:41:eb:bc:99:6c:54:0d:df:f1:12:51:fe:
                    e8:8a:be:61:72:c0:c0:a0:93:51:5e:f1:2b:45:03:
                    ee:24:8c:7b:eb:db:89:42:b9:99:25:b5:9d:93:69:
                    e4:66:d2:4c:87:02:08:0a:b7:4f:34:24:3a:fb:c4:
                    b9:a8:d1:92:05:63:64:14:a3:01:1b:03:32:d2:56:
                    41:57:e9:91:67:ec:d0:01:d9:3d:20:ec:cc:61:76:
                    5d:c5:cc:27:df:6c:23:d6:1a:52:29:65:89:d5:02:
                    79:02:f0:8f:14:a6:b3:e6:c0:59:6b:a8:55:10:2b:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:34:15:29:73:A4:C7:32:95:35:37:35:D3:76:BC:98:1C:B1:98
            X509v3 Authority Key Identifier:
                keyid:6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3133382e302e3138342e302f32322d3234203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:43:5c:e2:f1:ad:11:fe:e9:39:1b:4a:6b:f0:b3:fa:21:
         fe:39:65:c1:80:7c:59:3e:97:d8:fa:5e:91:f0:7f:0f:eb:2a:
         3e:7d:37:e9:50:a8:40:c1:2f:63:52:6b:0b:b0:0c:7d:c7:eb:
         6c:e1:29:e1:45:98:b0:93:6f:66:42:be:93:e7:55:5e:0d:ef:
         a2:b7:a1:22:88:8f:83:39:1c:96:92:58:ee:e6:0f:ca:62:c5:
         4c:1c:82:4a:f1:8e:0a:b9:c4:20:a1:85:9f:54:24:63:86:a9:
         46:59:b0:13:81:50:bd:bd:b5:1e:2b:74:53:37:79:38:ab:5c:
         13:82:ef:56:09:ff:fd:d3:21:0f:d5:9b:57:d9:64:c5:23:60:
         65:a1:cd:6c:db:e5:a4:65:fd:a5:bf:aa:40:1f:4f:18:e5:19:
         8c:54:92:89:5e:37:d1:6a:79:3f:cb:1c:99:c0:8d:53:e1:6b:
         bd:4a:67:75:8d:16:21:da:31:3f:f7:e5:fa:a9:a4:a8:4c:d2:
         7c:de:0e:26:81:a0:f4:c2:01:fd:32:fa:30:cf:e6:56:26:16:
         e1:0c:3c:1f:83:ea:b6:80:cc:8b:61:05:92:17:01:94:49:17:
         75:26:63:cf:c0:3d:1a:0e:f9:88:e2:dc:d8:79:6b:7a:43:18:
         bb:ae:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:34 2026 by rpki-client