This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31322e302f32322d3234203d3e203532343339.roa
File:                     3133382e3138352e31322e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          mQFjze0Q9sIHWHsDJyprZWRgav+SydokVTvtO47Yh2c=
Subject key identifier:   A8:9D:C3:C2:5C:85:67:8C:A6:97:8A:23:95:9E:B6:16:62:3D:D1:63
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       02BD00CC87B5C70E25FE01D802AF4D04CEC01D6A
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31322e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 06 Jan 2026 19:40:56 +0000
ROA not before:           Tue 06 Jan 2026 19:35:56 +0000
ROA not after:            Tue 05 Jan 2027 19:40:56 +0000
asID:                     52439
IP address blocks:        138.185.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:00:cc:87:b5:c7:0e:25:fe:01:d8:02:af:4d:04:ce:c0:1d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Jan  6 19:35:56 2026 GMT
            Not After : Jan  5 19:40:56 2027 GMT
        Subject: CN=A89DC3C25C85678CA6978A23959EB616623DD163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:05:a6:76:d5:b5:38:2c:db:ab:93:87:dd:
                    7a:19:1e:84:a1:e9:c6:1c:8b:4c:87:39:23:dc:e5:
                    9f:4d:fc:26:87:f1:11:44:ca:a2:c5:32:32:3d:ff:
                    ec:20:67:09:d7:76:de:f8:1f:b4:98:b6:a5:7c:be:
                    1d:37:f1:ee:57:22:85:f0:84:4d:d3:ee:ec:b1:5e:
                    b5:1f:17:60:1c:56:78:a2:b9:4d:de:b7:5b:34:3a:
                    70:a2:88:a8:9e:13:76:d2:c0:78:73:0b:ba:a4:c9:
                    a0:83:a0:f4:53:e7:f0:40:4d:13:33:46:4b:39:33:
                    dd:91:a4:c4:5b:09:6c:c7:d4:c0:8a:1b:a1:64:24:
                    aa:2d:a3:0a:98:28:fe:7e:b3:f4:52:82:c9:c9:b2:
                    11:fd:4a:a4:2b:e6:75:27:48:a5:2f:e9:8e:5c:cd:
                    6f:b3:8c:05:ae:52:91:cb:1b:cd:39:02:57:7e:11:
                    97:3f:27:18:b0:a9:db:ac:97:b1:d7:36:19:5b:03:
                    37:17:ab:02:96:27:e4:07:5a:c1:b8:73:7d:17:8b:
                    b4:da:12:de:cd:c6:c0:e9:91:0b:65:5f:09:d8:b5:
                    99:a7:b5:53:85:fb:19:f6:db:cf:66:72:6c:63:14:
                    07:81:2e:8a:a0:4a:79:74:39:da:89:b0:0a:d5:47:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9D:C3:C2:5C:85:67:8C:A6:97:8A:23:95:9E:B6:16:62:3D:D1:63
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31322e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:87:ff:58:28:3d:8a:4f:09:cc:b0:32:57:12:56:a9:32:d5:
         6c:74:96:e2:4f:43:2b:66:92:1d:9f:25:78:ef:a5:09:73:df:
         84:45:c4:95:6a:66:62:bb:5e:81:31:3c:2e:6d:d7:5e:45:0e:
         20:da:b3:09:c7:8e:1c:d2:18:02:72:34:94:9f:51:c7:41:e1:
         35:9b:30:1d:4e:e0:3c:c5:f8:97:b4:71:54:27:6b:0f:71:25:
         59:79:7e:2f:b2:ad:6c:5e:3a:4c:ae:c6:f0:b2:ca:0c:cf:05:
         cf:82:d4:ce:1f:ce:1b:a0:d0:d9:fc:85:73:97:63:40:01:34:
         c7:37:4c:43:61:2e:39:d2:6b:1d:b4:6c:3c:9d:bd:4c:92:d9:
         20:09:22:04:10:f1:1a:01:de:e3:58:12:de:84:98:82:38:70:
         9a:d8:11:94:85:a5:b4:6d:56:e7:48:8e:bf:6a:a6:49:f3:46:
         23:77:b5:96:68:8d:67:f8:da:48:39:18:f8:63:b4:40:3b:13:
         79:52:c0:7e:01:cd:85:30:33:35:82:9e:c7:ec:64:65:3b:96:
         2f:f4:42:48:e8:ee:30:e2:28:d3:53:52:e2:23:b8:44:08:8d:
         d3:7b:4c:36:71:4e:26:37:93:71:61:3b:ce:4f:50:53:68:b8:
         c1:fa:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:31 2026 by rpki-client