This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3133302e302f32342d3234203d3e203532333939.roa
File:                     3133382e3131372e3133302e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          iZfii1xsPYxd8VgnUEXaDcxlGk3GKwq/F7UCnl4kipo=
Subject key identifier:   C8:A6:2E:BC:71:08:B6:72:EC:DA:5E:60:7F:3C:89:A2:1B:7F:48:48
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       494567B5C98D830B83C57B13636FE2EF155E9A98
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3133302e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 06 Jan 2026 19:30:03 +0000
ROA not before:           Tue 06 Jan 2026 19:25:03 +0000
ROA not after:            Tue 05 Jan 2027 19:30:03 +0000
asID:                     52399
IP address blocks:        138.117.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:45:67:b5:c9:8d:83:0b:83:c5:7b:13:63:6f:e2:ef:15:5e:9a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Jan  6 19:25:03 2026 GMT
            Not After : Jan  5 19:30:03 2027 GMT
        Subject: CN=C8A62EBC7108B672ECDA5E607F3C89A21B7F4848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:78:88:1c:fc:28:f8:92:fb:14:87:fe:47:
                    28:62:2c:0f:68:b0:9e:ec:b9:12:2f:da:0a:98:00:
                    db:4a:35:f1:f5:cf:be:37:63:de:92:75:61:74:00:
                    70:82:11:d2:f3:48:d8:de:45:96:29:40:48:36:05:
                    65:31:65:99:7f:96:60:ab:df:31:f7:fe:6b:46:d2:
                    35:9f:5c:e9:e8:2a:c0:00:cd:b0:48:9c:02:99:bd:
                    37:bf:fa:11:92:ab:9f:af:c3:50:90:37:bf:95:30:
                    17:f3:e1:2d:6c:47:7a:d2:fd:24:24:69:00:15:c4:
                    fa:04:1a:df:f4:7b:61:63:8a:9a:ea:d3:9e:67:46:
                    0f:ca:88:eb:52:41:3f:df:12:1b:d6:6e:fe:97:8f:
                    2c:52:99:85:84:97:64:ec:d9:37:4e:91:99:bf:ed:
                    0b:b0:b1:69:fd:e0:8f:ac:16:34:59:ea:e6:80:ed:
                    0d:fc:b4:b5:a8:5f:93:ae:9d:17:ba:d1:68:1e:71:
                    32:f3:6e:c7:ec:1b:af:f7:81:5a:eb:87:5e:b7:05:
                    96:05:7a:45:87:a2:45:ee:77:24:04:61:e3:23:4e:
                    61:c0:c8:36:82:4d:11:ba:47:b4:90:2f:3e:88:dd:
                    10:c2:61:e8:8a:f9:84:4b:93:b9:a8:03:84:a4:eb:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:2E:BC:71:08:B6:72:EC:DA:5E:60:7F:3C:89:A2:1B:7F:48:48
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3133302e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:74:8a:b9:5a:4b:31:91:21:00:80:91:c9:5b:9a:1d:18:af:
         25:09:43:9c:cc:72:00:68:a4:dd:53:30:b9:ef:fa:e3:41:84:
         48:ca:20:bf:6c:9d:d8:62:f2:5a:cc:57:08:f3:28:70:70:e3:
         86:1f:94:8e:3d:89:c8:7d:eb:32:0b:b0:84:8d:3d:53:1b:6c:
         a4:4f:5f:b7:0e:70:49:45:7e:31:9b:2d:89:33:bb:00:19:d4:
         50:19:fe:fc:d5:6f:d3:e6:b6:18:ce:87:7d:59:bd:21:77:fa:
         3d:38:af:e7:14:50:ab:e0:b3:79:36:e1:27:32:96:54:1c:71:
         cd:10:16:b4:26:59:52:0c:9b:bc:88:d5:09:19:81:f0:2e:d6:
         e7:fa:ae:83:5f:1d:df:ce:42:ad:05:bd:20:4b:38:e8:60:5c:
         07:65:ca:a2:c0:09:6b:64:7a:b0:3a:10:9f:1c:b5:fc:0c:43:
         67:7b:e3:70:51:b8:4e:2a:7a:9a:46:54:07:f4:77:ca:91:87:
         62:c3:8a:f4:86:94:2f:85:6d:98:4d:06:9b:e8:a2:84:b7:d3:
         94:46:36:a0:f5:0b:5d:ff:2e:13:ab:6b:f5:cc:47:82:3c:e8:
         8d:30:79:b4:5a:b5:66:41:c3:fd:0f:3d:33:96:bd:db:3b:72:
         e7:5f:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:02:23 2026 by rpki-client