This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa
File:                     3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa (raw, json)
Hash identifier:          EMREluY5Bj0EOEQkZz8g5qjbtuPt3RdDP/nvaueCGpk=
Subject key identifier:   71:40:62:4B:98:D7:74:CA:C3:26:18:A2:13:DE:C9:68:C4:A2:AE:C2
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       76D43A9CD15DE5A49CCFC2FED31AECBAA1B495BE
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa
Signing time:             Tue 06 Jan 2026 19:04:31 +0000
ROA not before:           Tue 06 Jan 2026 18:59:31 +0000
ROA not after:            Tue 05 Jan 2027 19:04:31 +0000
asID:                     18734
IP address blocks:        138.122.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d4:3a:9c:d1:5d:e5:a4:9c:cf:c2:fe:d3:1a:ec:ba:a1:b4:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Jan  6 18:59:31 2026 GMT
            Not After : Jan  5 19:04:31 2027 GMT
        Subject: CN=7140624B98D774CAC32618A213DEC968C4A2AEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:00:9a:3a:7a:7e:70:fa:25:d0:8f:36:19:
                    d7:63:af:16:6d:fc:f8:f8:e1:49:8f:55:a0:27:42:
                    a2:06:71:05:8a:07:e7:90:87:d5:e1:99:66:a7:e9:
                    06:12:76:f8:45:b1:a8:28:21:7d:79:21:2c:bb:f9:
                    8c:03:4f:6a:19:74:a0:4a:85:7e:fe:22:14:87:1a:
                    39:b4:cf:17:aa:5a:77:f6:32:f5:57:68:6f:96:37:
                    23:5f:97:1a:3a:d3:d5:65:dc:c6:1b:1e:81:3e:3e:
                    9a:63:46:4c:1f:fb:bd:f4:2f:f1:dc:59:ea:39:f9:
                    36:0a:9b:f9:68:99:71:79:98:1c:cf:fc:60:2f:75:
                    5d:26:65:6e:6c:9f:0f:b1:d8:42:a4:ac:ae:93:46:
                    0c:5b:52:aa:b7:ab:75:4c:fe:cd:68:c8:c9:46:32:
                    c6:5d:f0:5b:8a:41:d9:d7:85:7a:56:25:b6:fa:bd:
                    5c:db:a2:5b:97:6b:95:3b:42:24:86:3d:d7:8c:de:
                    ee:58:74:80:ac:df:22:f5:7f:6d:4e:5d:e0:07:41:
                    17:d8:d8:bd:f1:c5:d3:a7:b5:1a:df:37:fd:d5:85:
                    f9:34:93:b1:22:03:ec:11:3d:0e:d4:97:2c:e0:cc:
                    01:a4:8a:11:e2:e3:0f:9a:72:69:4b:58:f2:da:84:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:40:62:4B:98:D7:74:CA:C3:26:18:A2:13:DE:C9:68:C4:A2:AE:C2
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:31:7e:83:e0:62:b9:cc:46:04:2d:cd:71:fd:93:c0:88:
         36:27:81:8b:9a:19:24:99:cb:ff:b7:6e:bf:0f:0f:f5:98:87:
         e2:5a:01:49:c6:0f:05:2a:e4:16:df:c7:c4:d8:cd:86:b5:d8:
         0d:22:95:80:f8:eb:51:dd:e2:7a:67:a8:67:92:f7:50:7e:6d:
         39:b4:b9:71:85:42:3d:a3:e5:01:50:d9:43:9d:0a:f7:25:5a:
         6a:72:a2:e9:9b:c4:35:70:0e:5e:74:21:f7:c2:2e:3e:a1:07:
         36:eb:0f:67:14:33:22:25:ee:42:59:6d:89:21:ee:a2:85:fd:
         ba:f9:e8:2f:6a:69:9c:1e:da:d0:f4:0c:ad:7a:c9:6f:4f:dd:
         08:af:30:32:95:bf:5e:7d:67:9c:23:d4:8c:d0:01:9f:01:e2:
         5b:73:7d:ff:2c:de:34:cc:01:83:94:ad:38:5a:a2:b9:79:6f:
         e4:9b:21:a6:ad:aa:6c:f6:27:2c:ee:70:94:19:7d:ef:48:60:
         da:9a:82:7f:16:c6:66:b0:a9:77:0f:22:74:ed:e6:47:8a:be:
         04:ab:a9:86:bb:e9:45:e4:4e:f3:9b:fd:7d:15:ce:60:8a:01:
         88:35:47:a9:4f:7a:21:0a:87:a8:55:56:1a:6c:c5:59:dc:2a:
         e1:40:b2:7f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdtQ6nNFd5aScz8L+0xrsuqG0lb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNjAxMDYxODU5MzFaFw0yNzAxMDUxOTA0MzFaMDMxMTAvBgNV
BAMTKDcxNDA2MjRCOThENzc0Q0FDMzI2MThBMjEzREVDOTY4QzRBMkFFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGwCaOnp+cPol0I82GddjrxZt
/Pj44UmPVaAnQqIGcQWKB+eQh9XhmWan6QYSdvhFsagoIX15ISy7+YwDT2oZdKBK
hX7+IhSHGjm0zxeqWnf2MvVXaG+WNyNflxo609Vl3MYbHoE+PppjRkwf+730L/Hc
Weo5+TYKm/lomXF5mBzP/GAvdV0mZW5snw+x2EKkrK6TRgxbUqq3q3VM/s1oyMlG
MsZd8FuKQdnXhXpWJbb6vVzboluXa5U7QiSGPdeM3u5YdICs3yL1f21OXeAHQRfY
2L3xxdOntRrfN/3Vhfk0k7EiA+wRPQ7UlyzgzAGkihHi4w+acmlLWPLahDn1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcUBiS5jXdMrDJhiiE97JaMSirsIwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMxMzMzODJlMzEzMjMyMmUzMTM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzczMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinqQ
MA0GCSqGSIb3DQEBCwUAA4IBAQACLjF+g+BiucxGBC3Ncf2TwIg2J4GLmhkkmcv/
t26/Dw/1mIfiWgFJxg8FKuQW38fE2M2GtdgNIpWA+OtR3eJ6Z6hnkvdQfm05tLlx
hUI9o+UBUNlDnQr3JVpqcqLpm8Q1cA5edCH3wi4+oQc26w9nFDMiJe5CWW2JIe6i
hf26+egvammcHtrQ9AyteslvT90IrzAylb9efWecI9SM0AGfAeJbc33/LN40zAGD
lK04WqK5eW/kmyGmraps9ics7nCUGX3vSGDamoJ/FsZmsKl3DyJ07eZHir4Eq6mG
u+lF5E7zm/19Fc5gigGINUepT3ohCoeoVVYabMVZ3CrhQLJ/
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:04 2026 by rpki-client