This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa
File:                     3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa (raw, json)
Hash identifier:          VeAzO1a47Tnn0At9lrlQwwctfaIq56fpnIJnaldjdZU=
Subject key identifier:   93:D5:D9:96:51:A6:06:E6:F9:09:94:13:04:CC:56:36:75:4A:D7:C2
Certificate issuer:       /CN=CA031C4B7AEACDEFD1937A04646041A208257DB5
Certificate serial:       6DDE5E87C4E2E1E84D6F06B7D083ADD17D8FF8B6
Authority key identifier: CA:03:1C:4B:7A:EA:CD:EF:D1:93:7A:04:64:60:41:A2:08:25:7D:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa
Signing time:             Tue 06 Jan 2026 19:22:24 +0000
ROA not before:           Tue 06 Jan 2026 19:17:24 +0000
ROA not after:            Tue 05 Jan 2027 19:22:24 +0000
asID:                     270076
IP address blocks:        138.186.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:de:5e:87:c4:e2:e1:e8:4d:6f:06:b7:d0:83:ad:d1:7d:8f:f8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA031C4B7AEACDEFD1937A04646041A208257DB5
        Validity
            Not Before: Jan  6 19:17:24 2026 GMT
            Not After : Jan  5 19:22:24 2027 GMT
        Subject: CN=93D5D99651A606E6F909941304CC5636754AD7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:57:50:f1:25:c2:c3:68:0e:d0:35:bf:9b:
                    fb:7f:53:66:1c:1a:d0:13:da:09:4c:60:34:88:16:
                    4f:6b:34:2a:d1:23:6b:5f:7d:d3:1e:68:02:70:5e:
                    25:c1:6e:8e:1b:a3:ce:49:66:76:b6:7f:1b:00:b0:
                    71:9a:6a:d7:d3:4a:6b:d7:dd:1d:a2:d6:7c:ff:00:
                    be:c3:f3:1c:ad:c2:a1:12:9c:7c:19:7e:0c:31:fd:
                    13:c6:6f:7b:37:53:e6:37:6b:d2:a0:9f:4f:a0:62:
                    ea:b1:3b:5b:fc:6d:df:e8:b7:9a:8b:b6:e3:55:a3:
                    c0:d1:03:9d:9a:94:6d:65:15:36:7f:a3:b6:08:c5:
                    c6:cc:92:ee:6e:fb:ef:93:e0:f8:02:52:87:98:0f:
                    3c:db:af:60:44:2e:99:f8:45:35:de:aa:54:ee:4a:
                    1f:f0:bc:dd:23:64:d9:21:25:79:c1:a2:ee:7d:90:
                    22:f9:c9:dd:02:76:f4:ae:a6:e0:4d:e9:81:e9:43:
                    c5:18:1f:bf:bf:a4:33:c1:a9:17:94:60:cb:df:5b:
                    aa:50:5b:c0:ac:97:a6:1b:2b:09:fc:a1:a7:b9:a9:
                    85:ef:45:ef:65:bd:e2:d5:80:21:1a:1e:a9:c7:3d:
                    60:cf:8e:53:c9:0c:49:e0:8f:9c:b9:5d:fc:c1:f7:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D5:D9:96:51:A6:06:E6:F9:09:94:13:04:CC:56:36:75:4A:D7:C2
            X509v3 Authority Key Identifier:
                keyid:CA:03:1C:4B:7A:EA:CD:EF:D1:93:7A:04:64:60:41:A2:08:25:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:a3:81:37:d9:be:f0:12:9e:a4:e7:26:8d:e5:aa:58:a1:f2:
         7b:50:79:95:07:73:40:86:3a:ae:7e:db:86:b0:52:a6:95:e9:
         1e:18:17:d0:f1:20:95:4c:40:97:57:77:5d:69:6e:1a:c0:f6:
         ee:03:a5:97:85:9d:36:5b:bb:4d:f6:dc:6c:44:3d:04:66:46:
         2c:97:ca:5f:b2:5a:92:52:6a:6b:54:2b:27:f8:98:d8:b3:2b:
         91:41:2a:5c:84:f9:ba:20:87:95:9a:3c:d6:70:8c:21:7b:44:
         c8:a5:d7:3b:a6:1d:ee:cd:55:e9:0e:54:1c:6b:34:01:3d:b3:
         b3:f9:0e:38:26:59:18:f1:e1:24:d4:3a:ba:c6:96:ce:9d:cb:
         b3:d1:82:43:ab:87:25:87:3f:07:b7:73:01:ea:05:d7:4f:50:
         aa:76:af:a1:12:cb:0e:a8:09:3a:71:d1:37:e7:69:77:21:41:
         18:09:72:26:b4:e7:2c:db:0e:7a:4a:6c:71:10:88:b6:33:82:
         f6:88:b3:43:00:06:d8:58:8a:81:5a:aa:05:31:91:14:8b:c9:
         c1:73:0c:28:6d:ae:cb:bb:39:39:ac:4f:d8:bd:5c:b7:07:70:
         85:9d:29:bf:6c:5f:b1:15:16:1d:cb:f9:05:5c:38:7a:69:c4:
         c7:08:cf:71
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbd5eh8Ti4ehNbwa30IOt0X2P+LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EwMzFDNEI3QUVBQ0RFRkQxOTM3QTA0NjQ2MDQxQTIw
ODI1N0RCNTAeFw0yNjAxMDYxOTE3MjRaFw0yNzAxMDUxOTIyMjRaMDMxMTAvBgNV
BAMTKDkzRDVEOTk2NTFBNjA2RTZGOTA5OTQxMzA0Q0M1NjM2NzU0QUQ3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDikldQ8SXCw2gO0DW/m/t/U2Yc
GtAT2glMYDSIFk9rNCrRI2tffdMeaAJwXiXBbo4bo85JZna2fxsAsHGaatfTSmvX
3R2i1nz/AL7D8xytwqESnHwZfgwx/RPGb3s3U+Y3a9Kgn0+gYuqxO1v8bd/ot5qL
tuNVo8DRA52alG1lFTZ/o7YIxcbMku5u+++T4PgCUoeYDzzbr2BELpn4RTXeqlTu
Sh/wvN0jZNkhJXnBou59kCL5yd0CdvSupuBN6YHpQ8UYH7+/pDPBqReUYMvfW6pQ
W8Csl6YbKwn8oae5qYXvRe9lveLVgCEaHqnHPWDPjlPJDEngj5y5XfzB92G9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUk9XZllGmBub5CZQTBMxWNnVK18IwHwYDVR0j
BBgwFoAUygMcS3rqze/Rk3oEZGBBogglfbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzQ1MEJBMzkwMjc1RjUyNTZENjY3OTg2QTM0OUZDRUYy
QkM5MjM5RDU2NkI3M0I2MEY4MEZFQzYwRjIwNDlCLzAvQ0EwMzFDNEI3QUVBQ0RF
RkQxOTM3QTA0NjQ2MDQxQTIwODI1N0RCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTAzMUM0QjdBRUFDREVGRDE5
MzdBMDQ2NDYwNDFBMjA4MjU3REI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjc0NTBCQTM5MDI3NUY1MjU2RDY2Nzk4NkEzNDlGQ0VGMkJDOTIzOUQ1
NjZCNzNCNjBGODBGRUM2MEYyMDQ5Qi8wLzMxMzMzODJlMzEzODM2MmUzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirpM
MA0GCSqGSIb3DQEBCwUAA4IBAQAGo4E32b7wEp6k5yaN5apYofJ7UHmVB3NAhjqu
ftuGsFKmlekeGBfQ8SCVTECXV3ddaW4awPbuA6WXhZ02W7tN9txsRD0EZkYsl8pf
slqSUmprVCsn+JjYsyuRQSpchPm6IIeVmjzWcIwhe0TIpdc7ph3uzVXpDlQcazQB
PbOz+Q44JlkY8eEk1Dq6xpbOncuz0YJDq4clhz8Ht3MB6gXXT1Cqdq+hEssOqAk6
cdE352l3IUEYCXImtOcs2w56SmxxEIi2M4L2iLNDAAbYWIqBWqoFMZEUi8nBcwwo
ba7Luzk5rE/YvVy3B3CFnSm/bF+xFRYdy/kFXDh6acTHCM9x
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:47 2026 by rpki-client