This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/3133382e3132312e3132342e302f32322d3234203d3e20323633373535.roa
File:                     3133382e3132312e3132342e302f32322d3234203d3e20323633373535.roa (raw, json)
Hash identifier:          uRskU4UZH+thpeCQrs0x3aGvi0MRC9KuBCm0PJ5BgTQ=
Subject key identifier:   AC:81:9C:AB:7A:1E:0A:5C:82:96:25:EA:68:F6:F1:BA:21:53:5D:C8
Certificate issuer:       /CN=64EBE7741095629A165538B55C948F9A0C4FB045
Certificate serial:       18885AA08C4D938D0186A92C5581F24A687AF9D4
Authority key identifier: 64:EB:E7:74:10:95:62:9A:16:55:38:B5:5C:94:8F:9A:0C:4F:B0:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/3133382e3132312e3132342e302f32322d3234203d3e20323633373535.roa
Signing time:             Tue 06 Jan 2026 19:35:49 +0000
ROA not before:           Tue 06 Jan 2026 19:30:49 +0000
ROA not after:            Tue 05 Jan 2027 19:35:49 +0000
asID:                     263755
IP address blocks:        138.121.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:88:5a:a0:8c:4d:93:8d:01:86:a9:2c:55:81:f2:4a:68:7a:f9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EBE7741095629A165538B55C948F9A0C4FB045
        Validity
            Not Before: Jan  6 19:30:49 2026 GMT
            Not After : Jan  5 19:35:49 2027 GMT
        Subject: CN=AC819CAB7A1E0A5C829625EA68F6F1BA21535DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:e1:7b:0d:7d:80:6a:4d:f1:f5:ce:45:28:
                    9b:c4:a5:22:4e:10:88:82:6f:1e:d3:a6:a8:20:79:
                    34:32:4e:e8:82:0c:30:0e:09:0a:46:f4:ba:30:80:
                    ff:02:7d:9a:db:4e:56:53:c0:80:03:d6:d1:08:75:
                    8e:5c:d6:a5:60:94:90:d4:10:70:67:fb:31:ff:84:
                    0d:49:39:05:41:e9:e1:bf:0f:05:86:80:5e:1c:d1:
                    f9:60:fe:3e:af:f7:6b:42:3d:3c:e8:5e:3f:55:2f:
                    6e:d9:13:c9:5a:72:68:ce:c1:61:d5:15:1e:dc:47:
                    36:95:7f:f8:20:d4:b4:1f:bc:5d:66:09:4d:70:1d:
                    67:12:a7:8f:f0:5f:e8:68:9d:3e:4e:b2:74:89:e8:
                    f3:9e:9d:63:8c:00:71:3f:d6:be:73:0b:43:80:0f:
                    d9:6a:71:d8:57:57:a3:99:53:70:7a:33:f3:c3:47:
                    8c:44:d6:3f:66:e5:cf:73:bb:fa:31:73:c1:a0:ec:
                    95:cf:66:c5:c9:84:c8:cd:b1:49:82:6b:f6:53:a4:
                    e1:ca:c0:d8:7a:97:a5:0d:56:29:25:af:59:eb:a3:
                    90:03:b8:de:fb:f8:f9:3c:3d:d6:09:12:cc:2d:58:
                    d9:66:85:0f:03:be:d5:33:6d:92:a2:80:99:0c:03:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:81:9C:AB:7A:1E:0A:5C:82:96:25:EA:68:F6:F1:BA:21:53:5D:C8
            X509v3 Authority Key Identifier:
                keyid:64:EB:E7:74:10:95:62:9A:16:55:38:B5:5C:94:8F:9A:0C:4F:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/64EBE7741095629A165538B55C948F9A0C4FB045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64EBE7741095629A165538B55C948F9A0C4FB045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32CF848E94534A3CD76C920E9349CED510FEAA4D77C21940B4DC108E5AC2920F/0/3133382e3132312e3132342e302f32322d3234203d3e20323633373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:5c:09:d7:4a:23:98:c0:0c:84:ff:ac:cb:9a:9a:e8:21:2d:
         fc:d2:bf:7a:69:ac:42:7d:ca:6c:5b:62:bf:52:aa:44:8b:8a:
         0e:3e:55:81:87:46:5c:ff:ea:b6:51:93:49:84:25:39:05:3e:
         85:a7:d4:a4:d4:a3:4f:da:0c:1e:38:5d:fc:b0:93:c3:f6:c5:
         ae:85:26:69:02:62:d9:fc:47:e5:f9:5f:c5:18:53:c6:0c:b1:
         c9:eb:f0:1f:29:ed:19:34:61:b0:89:3d:6f:51:4f:e8:f5:b3:
         35:46:29:48:41:28:81:df:eb:85:3f:5e:32:48:80:ea:77:10:
         fc:af:f8:65:97:50:66:98:40:f0:09:da:4e:f0:1c:b8:f7:c3:
         50:10:57:9d:e7:a8:63:8e:94:37:7d:24:8c:4a:ed:79:3b:60:
         50:55:44:56:81:04:ee:48:a6:47:5f:33:ad:5b:d8:81:17:0b:
         6d:d7:e3:66:3d:a9:cd:da:cc:63:6b:07:92:b7:3a:9d:1b:33:
         c2:47:6e:3b:1d:aa:91:b1:8f:d0:9b:1d:b2:45:d8:a3:f8:74:
         21:0b:b9:29:cb:18:3b:6a:67:48:0a:6b:4f:15:b7:50:8b:03:
         e5:3c:48:90:34:f2:58:44:c8:43:2f:cb:9b:bf:00:cb:c8:1f:
         4d:86:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:23 2026 by rpki-client