This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa
File:                     3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa (raw, json)
Hash identifier:          DGBdxCYUv9H/AbvVUT0wQRkjqf3MtIjM9JW8Y19Iv84=
Subject key identifier:   74:DA:79:AC:1A:20:EC:14:57:DA:B3:32:E5:18:E5:11:CA:31:40:C9
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       6E72EFBC6821580274307124C8652E457320EAD4
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa
Signing time:             Tue 06 Jan 2026 19:29:28 +0000
ROA not before:           Tue 06 Jan 2026 19:24:28 +0000
ROA not after:            Tue 05 Jan 2027 19:29:28 +0000
asID:                     64105
IP address blocks:        138.204.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:72:ef:bc:68:21:58:02:74:30:71:24:c8:65:2e:45:73:20:ea:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:28 2026 GMT
            Not After : Jan  5 19:29:28 2027 GMT
        Subject: CN=74DA79AC1A20EC1457DAB332E518E511CA3140C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:50:4f:9e:f3:ce:b8:6f:9c:a4:6c:91:2d:
                    b0:aa:c6:e4:a6:bc:8b:b0:f0:74:6b:af:82:1e:00:
                    d0:06:fd:2b:4c:f3:64:14:68:b1:42:54:d2:85:e5:
                    d2:b5:1d:db:f7:5d:06:3c:31:50:06:fc:00:96:b1:
                    06:e8:a7:a1:ce:24:1d:27:31:44:e2:31:05:26:b8:
                    0e:f2:df:44:7c:be:51:91:98:72:be:6a:9c:07:72:
                    e5:14:2b:e7:48:46:36:2d:d1:5d:c0:b6:f6:bf:53:
                    f2:dc:0e:64:bd:eb:7e:3e:50:e9:a6:53:d5:98:a9:
                    06:60:82:2f:92:8b:f4:47:52:2f:35:5e:b2:37:6a:
                    88:35:b8:d0:9b:d2:2a:8d:c7:cf:63:26:f1:ac:2e:
                    6c:10:8a:19:f6:fd:5c:fc:b9:7e:47:9a:94:dd:d7:
                    e4:96:4d:b7:1a:1e:32:4b:a4:77:75:f5:7c:02:6d:
                    89:8b:6a:60:40:96:c6:cf:66:41:e7:dc:a0:cc:3d:
                    85:a7:9d:f4:0d:1e:e5:d6:c1:e3:ad:f5:90:8d:70:
                    6c:55:53:1a:2d:c9:fa:41:4d:22:ca:05:50:6d:6c:
                    5d:2e:39:6b:64:3d:c5:4f:1e:9e:45:f0:a3:0e:b9:
                    ff:d3:0a:8d:a1:a1:bf:61:ff:9e:81:7a:ea:67:a0:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:79:AC:1A:20:EC:14:57:DA:B3:32:E5:18:E5:11:CA:31:40:C9
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235322e302f32342d3234203d3e203634313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:54:c7:0a:05:f0:ce:e1:c8:68:fc:7d:4b:38:2b:dc:ad:
         fb:55:1d:28:c0:6c:7a:29:5d:65:04:ef:52:c5:8f:50:35:ad:
         78:76:d1:7b:ec:14:7f:9f:82:c6:54:2a:eb:14:1b:10:c8:75:
         89:88:15:89:bb:b5:22:db:bb:01:fd:e1:4c:77:e1:53:eb:23:
         3c:09:e8:9a:cf:72:28:1c:8f:7b:7b:ae:56:12:20:35:a7:90:
         61:f1:65:fd:16:60:4d:47:94:46:a6:64:62:32:5b:27:ab:9f:
         af:c6:03:dd:83:c4:cf:d1:93:a0:f7:25:66:d4:45:9e:d6:ff:
         11:4e:d9:04:a7:9f:db:40:6d:0d:a2:1d:49:3a:b4:02:7e:04:
         20:b7:30:42:03:ee:87:fc:14:82:81:84:15:2d:a8:e7:ec:2a:
         11:99:1a:f5:5b:98:97:ce:de:78:0e:fc:4d:28:17:45:4b:00:
         89:41:a1:9b:ea:34:ae:28:2d:27:9c:c3:2c:62:f5:82:bd:5a:
         f8:79:d7:88:fc:05:89:ff:14:37:ae:aa:6c:30:e2:c5:7c:68:
         97:c7:94:fd:28:30:a3:f9:f8:8c:33:02:24:ff:d2:5e:73:a6:
         fa:37:ed:bc:08:61:e4:78:50:05:e5:dc:3c:e7:0e:e8:3a:36:
         4b:04:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:40 2026 by rpki-client