This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
File:                     3133382e302e3234302e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier:          WiXSbugIZn6o7ARpgDYJh+7vV6mOYJzXd3iVySGfbqw=
Subject key identifier:   7F:E6:4D:44:8C:BB:64:C7:CD:25:B7:27:9B:03:1D:A8:99:C7:3A:9F
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       1588E9545B2CDBBB67B4E28B56F770EDF3E6A78B
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
Signing time:             Tue 06 Jan 2026 19:33:07 +0000
ROA not before:           Tue 06 Jan 2026 19:28:07 +0000
ROA not after:            Tue 05 Jan 2027 19:33:07 +0000
asID:                     264850
IP address blocks:        138.0.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:88:e9:54:5b:2c:db:bb:67:b4:e2:8b:56:f7:70:ed:f3:e6:a7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Jan  6 19:28:07 2026 GMT
            Not After : Jan  5 19:33:07 2027 GMT
        Subject: CN=7FE64D448CBB64C7CD25B7279B031DA899C73A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:d2:55:9d:23:0e:98:18:40:c2:94:7d:cb:
                    15:da:6f:51:7e:00:2a:ad:b3:29:42:32:04:29:26:
                    75:3a:6a:b2:48:1b:64:dd:36:2b:16:28:98:8f:fc:
                    76:e0:3b:42:d0:d9:ad:d6:1a:6f:8f:06:10:cf:fe:
                    20:3d:03:d3:4f:6c:3c:9a:7d:24:f3:44:2e:dd:9b:
                    16:6e:17:9e:7b:e1:9b:cc:95:22:8a:5f:1a:08:d5:
                    62:21:4b:cc:97:14:54:08:3e:0b:5d:c9:6c:c7:8a:
                    34:28:c5:ac:b2:d2:8e:fe:8f:ef:e0:81:a4:8e:43:
                    31:2c:1c:e7:23:74:76:11:f0:2e:08:fe:21:ce:9e:
                    d9:29:7a:9e:c9:87:68:a8:18:d5:ac:27:ed:b0:6d:
                    cc:be:df:10:77:18:a2:20:a7:e0:cd:ce:e2:d9:7b:
                    e8:62:b7:18:3c:a0:96:e2:e7:c4:1e:83:1e:b6:da:
                    28:3b:4a:cb:a5:77:0b:a1:07:c4:3c:bd:e4:f3:f1:
                    72:32:6f:2d:49:52:95:58:33:80:90:b8:dc:38:70:
                    8d:a5:c2:7f:c5:6b:dc:57:4b:24:09:88:0b:88:c0:
                    8c:0d:cb:35:33:7c:ad:35:03:96:d9:3d:c4:b4:ba:
                    ec:9f:6f:d1:73:73:dd:d7:01:8d:9a:b2:3f:97:a4:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E6:4D:44:8C:BB:64:C7:CD:25:B7:27:9B:03:1D:A8:99:C7:3A:9F
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:79:5e:fe:ae:a2:5e:35:41:e9:0d:60:31:0d:44:c0:34:
         94:a2:d0:d2:6c:f1:9b:81:22:68:47:a7:f0:06:be:1f:28:d8:
         3f:9d:36:f4:6b:96:5d:26:48:71:42:32:ee:29:d3:29:f3:fc:
         35:5e:8f:f9:ff:d9:2a:0c:1d:01:e9:19:37:7f:39:d0:5c:8c:
         41:20:6c:fa:1e:82:f9:da:cc:42:0d:f3:0a:77:e2:a4:87:71:
         64:a5:e0:f5:44:a8:b1:c9:1e:4a:cc:07:10:b8:b7:3c:5b:6f:
         d0:05:d0:79:2f:36:51:60:cf:65:68:29:83:9b:7d:5f:00:c3:
         61:61:4c:c1:f5:55:0e:95:12:56:1a:7d:b8:fc:1d:a8:54:da:
         9c:e3:61:8c:fd:84:2c:c3:df:16:e7:fc:f9:ce:53:2d:fd:11:
         1e:41:18:d7:fc:62:4d:a1:fc:3b:9e:c0:6f:d6:82:fa:be:86:
         5b:d5:ef:bd:24:47:de:fa:4b:3b:e0:b1:a2:3f:a5:ac:c0:6b:
         fd:5c:4f:23:58:73:be:5b:9d:65:27:81:3d:9f:eb:cd:cd:3c:
         33:33:10:00:8f:fb:d1:a0:a5:fb:de:2a:6a:08:6b:55:f1:8b:
         dc:4a:b9:bf:b5:21:29:ec:0b:15:9e:51:fc:b6:59:16:10:5e:
         74:1f:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:35:19 2026 by rpki-client