This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235312e302f32342d3234203d3e203634313033.roa
File:                     3133382e3230342e3235312e302f32342d3234203d3e203634313033.roa (raw, json)
Hash identifier:          rxn+MEdzfWZdhyWwotmXKJWEoV7DklYUA260URh7mfA=
Subject key identifier:   BC:4E:A5:00:C8:F5:AD:98:CD:BB:4F:E3:74:83:DE:B0:1C:3F:33:33
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       228427B9762E7685FC9523008DC302D8A42C1E72
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235312e302f32342d3234203d3e203634313033.roa
Signing time:             Tue 06 Jan 2026 19:29:31 +0000
ROA not before:           Tue 06 Jan 2026 19:24:31 +0000
ROA not after:            Tue 05 Jan 2027 19:29:31 +0000
asID:                     64103
IP address blocks:        138.204.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:84:27:b9:76:2e:76:85:fc:95:23:00:8d:c3:02:d8:a4:2c:1e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:31 2026 GMT
            Not After : Jan  5 19:29:31 2027 GMT
        Subject: CN=BC4EA500C8F5AD98CDBB4FE37483DEB01C3F3333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:eb:aa:a8:90:c7:22:6f:2c:02:41:97:0a:
                    30:cb:1b:14:a7:c7:82:1f:b1:3b:7c:ec:7a:e7:b5:
                    5e:27:d8:a4:6c:fb:de:71:9e:e2:09:93:53:f0:7d:
                    2f:76:34:ef:7d:d2:c7:3b:37:b4:d4:14:10:37:44:
                    51:8d:7b:99:0b:ef:2f:91:23:a4:ae:0b:5e:9d:57:
                    48:a9:97:a5:3d:9c:04:a9:3e:52:b5:64:52:2d:1e:
                    43:d4:4c:75:9a:30:e6:9b:a0:94:a5:95:33:d7:cf:
                    6b:93:50:50:11:f4:f0:ac:3f:dd:aa:c0:89:aa:05:
                    63:97:55:63:d3:fd:49:0e:ec:a9:67:72:19:a2:27:
                    c3:f4:25:9c:d1:7b:9a:81:26:a0:29:e2:2c:63:90:
                    52:10:06:b2:66:85:98:5d:b9:a7:48:31:e6:86:76:
                    14:bc:26:a9:1c:05:23:9f:d8:49:f5:7c:0b:8e:66:
                    aa:19:62:fd:29:e2:22:df:7b:9c:37:ec:9e:4f:a1:
                    0f:67:07:cd:5b:09:84:91:25:5b:ab:fe:73:af:da:
                    cb:1a:1c:a3:e5:26:70:4f:f6:2e:d1:ed:6e:21:33:
                    af:d5:ee:0f:ad:15:ad:55:ac:7a:c4:6b:75:ef:74:
                    57:24:1f:45:5c:84:d0:9f:f6:01:f2:b4:bb:33:97:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4E:A5:00:C8:F5:AD:98:CD:BB:4F:E3:74:83:DE:B0:1C:3F:33:33
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235312e302f32342d3234203d3e203634313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:08:47:fc:df:47:6f:f6:fd:24:68:50:7d:5b:d4:62:3c:
         eb:58:eb:5e:d0:20:bb:1f:d9:6e:08:be:57:0d:5d:7e:53:da:
         0d:a3:07:7c:fb:ec:3c:57:2c:f8:4d:b8:03:4b:dd:4f:1e:17:
         b5:0f:82:5e:c4:8b:9f:48:22:d5:ce:6b:c2:53:49:8b:2a:de:
         57:1c:e3:39:e3:13:a4:01:30:2b:c9:39:cb:c6:f3:a0:ed:9d:
         2f:02:0b:b9:97:f9:c3:f7:ab:d8:79:53:3a:ee:97:d1:3d:76:
         b1:ac:4e:dd:9a:49:13:72:9d:79:e6:55:ac:a0:98:44:b7:d0:
         4d:c0:00:09:53:72:ef:da:bb:6f:a4:bc:6e:1f:ca:bd:a7:49:
         37:ab:e1:65:15:8f:bd:7d:07:09:b1:93:73:68:b4:0f:21:21:
         03:57:1e:7e:45:a5:b9:c9:27:94:a9:8b:30:ee:65:97:bb:1d:
         21:02:a2:48:af:49:97:53:8d:7f:6d:c3:a6:1a:71:6a:76:36:
         b7:d2:3f:4d:12:6c:df:3b:3c:67:8f:30:8a:58:f3:15:9b:60:
         ff:8d:c4:94:26:51:26:ae:ab:2d:c1:5a:50:26:9d:57:35:db:
         58:35:7d:58:26:02:3f:c1:11:df:d5:cf:86:70:cb:31:c4:b0:
         06:1d:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:31 2026 by rpki-client