This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39372e302f32342d3234203d3e20323633383037.roa
File:                     3133382e3235352e39372e302f32342d3234203d3e20323633383037.roa (raw, json)
Hash identifier:          Nb8KOptWGNzGyez8VM8SSQRMFJibt6WMXvsRQr+yzWA=
Subject key identifier:   C6:77:85:37:C0:7B:DD:F8:DC:A5:7C:B2:D9:EA:43:18:47:76:D6:6D
Certificate issuer:       /CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
Certificate serial:       13C251ED99C8A0D574A4CD430C91B39294D4B8C0
Authority key identifier: 3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39372e302f32342d3234203d3e20323633383037.roa
Signing time:             Tue 06 Jan 2026 19:28:52 +0000
ROA not before:           Tue 06 Jan 2026 19:23:52 +0000
ROA not after:            Tue 05 Jan 2027 19:28:52 +0000
asID:                     263807
IP address blocks:        138.255.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c2:51:ed:99:c8:a0:d5:74:a4:cd:43:0c:91:b3:92:94:d4:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
        Validity
            Not Before: Jan  6 19:23:52 2026 GMT
            Not After : Jan  5 19:28:52 2027 GMT
        Subject: CN=C6778537C07BDDF8DCA57CB2D9EA43184776D66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:f9:d1:c5:16:ff:45:2c:1d:75:7a:fc:db:
                    0d:77:23:09:a0:4c:e1:74:18:da:e1:46:f7:36:28:
                    e9:83:c9:fa:79:e7:12:82:86:a2:21:c1:74:b7:a3:
                    b3:35:97:4a:e6:68:35:74:d9:07:05:ef:88:68:bc:
                    79:d0:9d:6a:8e:74:32:92:d9:fd:9f:47:5a:bc:21:
                    3c:5b:51:21:0c:d6:dc:24:80:a8:61:23:97:10:89:
                    fb:24:55:cd:a8:62:1c:dd:eb:97:bd:79:42:b6:b9:
                    dc:21:74:94:d0:70:04:d7:80:71:90:aa:b4:a4:6e:
                    98:18:29:3c:e2:7a:90:59:ae:2d:6f:b6:1d:d7:86:
                    bc:67:45:1b:ab:85:91:59:57:de:d5:eb:12:f1:2e:
                    20:0f:a9:18:9e:7d:9e:bf:d4:67:87:74:ae:92:c3:
                    1d:1f:c0:39:c3:93:eb:68:04:b8:74:cb:65:6d:7e:
                    64:a6:bc:fe:92:60:78:21:de:33:e5:85:82:c6:44:
                    a0:5f:c4:8e:56:3f:6c:a3:70:e3:1b:cd:4d:b8:6d:
                    25:7e:e6:c7:07:33:3e:7b:5c:2d:ff:24:0e:38:e2:
                    1d:32:e3:62:e8:ee:fe:48:25:d3:98:28:90:65:d0:
                    0a:84:62:85:ee:52:da:04:9f:c4:24:7e:7c:f2:b2:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:85:37:C0:7B:DD:F8:DC:A5:7C:B2:D9:EA:43:18:47:76:D6:6D
            X509v3 Authority Key Identifier:
                keyid:3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39372e302f32342d3234203d3e20323633383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:32:75:9b:f2:12:aa:b7:28:9d:61:6d:d0:b3:82:d5:76:
         0e:24:74:0c:92:b3:73:8d:2b:b9:9a:17:04:dc:b0:bf:6d:be:
         a1:10:c5:ea:17:6c:11:33:b6:11:5a:47:d8:24:b6:9c:70:92:
         ea:a5:dd:1e:3a:14:09:66:ea:cd:83:93:66:e4:de:27:e5:38:
         33:82:38:2a:cc:6a:b9:04:8f:e8:85:53:35:ee:3a:bf:04:0a:
         8c:45:d8:b4:ef:54:47:0f:1d:f9:4b:61:17:21:82:af:d2:42:
         ec:6f:d4:f9:78:2e:9e:fd:1a:67:ae:2a:23:53:66:80:da:15:
         81:87:7d:bd:05:d8:91:ec:34:44:8e:16:f3:7d:d1:d3:b7:d8:
         ef:be:33:b0:44:6e:ec:37:15:3b:f1:f9:f6:2e:06:bc:bf:46:
         7e:d4:9b:f7:35:91:64:5d:e1:03:e2:bd:5b:97:d6:dc:aa:37:
         4b:d8:f8:0c:ef:0c:6d:bb:3e:52:56:79:d0:70:1c:ee:5d:87:
         ac:a9:b5:f9:4f:eb:12:b1:5c:87:28:59:85:a3:10:a9:0d:e8:
         a0:d8:ce:25:3a:a3:26:51:60:7d:20:97:38:c6:cd:a9:b2:77:
         88:a5:bc:89:8e:92:b9:21:98:ee:ab:13:55:3d:6d:f3:7f:75:
         c0:e3:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:53 2026 by rpki-client