This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa
File:                     3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa (raw, json)
Hash identifier:          gQcvtP4veIgDQnHAEB7oNjH3/Yfr+Vn2rVRMNRBoJ5k=
Subject key identifier:   5A:08:C4:43:74:44:4E:09:D0:09:80:71:79:F0:7D:A6:CA:29:F1:72
Certificate issuer:       /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial:       76531B2E599F57969D76D9564C39A23A0172426E
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa
Signing time:             Tue 06 Jan 2026 20:57:53 +0000
ROA not before:           Tue 06 Jan 2026 20:52:53 +0000
ROA not after:            Tue 05 Jan 2027 20:57:53 +0000
asID:                     263735
IP address blocks:        138.219.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 07:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:53:1b:2e:59:9f:57:96:9d:76:d9:56:4c:39:a2:3a:01:72:42:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
        Validity
            Not Before: Jan  6 20:52:53 2026 GMT
            Not After : Jan  5 20:57:53 2027 GMT
        Subject: CN=5A08C44374444E09D009807179F07DA6CA29F172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:fb:ab:6d:82:ce:ed:ea:c4:50:1b:9d:29:
                    3c:5c:63:e5:83:50:ae:3e:5c:c3:c4:65:8a:bc:73:
                    49:3c:e8:f9:8a:8c:3d:00:d0:83:ab:4f:85:6d:75:
                    33:ce:da:aa:c0:73:f2:5b:24:16:23:fd:7f:7f:83:
                    84:86:70:78:a4:aa:43:b0:10:bc:06:20:10:83:09:
                    99:ef:39:9c:b4:df:35:3a:13:bd:22:18:c1:3f:02:
                    91:f9:5e:b1:b2:b5:00:1c:f2:99:43:8f:f8:7d:c6:
                    30:36:f2:e0:23:6b:9f:2a:48:87:56:33:f5:b8:70:
                    8e:9e:f1:b6:a8:bd:b8:19:ee:d4:47:8f:61:1a:b7:
                    17:a0:68:6c:de:a5:d0:0a:43:9b:41:fe:16:63:da:
                    01:06:2d:cb:4e:03:cb:a2:53:13:d5:4b:b9:b4:e1:
                    be:9b:eb:88:9d:80:aa:33:b1:87:0d:ff:a6:81:ef:
                    e9:b4:48:cf:01:49:17:c0:34:49:0d:67:74:5a:20:
                    8e:6c:e8:90:6d:1f:2a:bd:53:b6:c9:25:97:ed:12:
                    4b:9d:88:aa:e5:e1:43:67:f3:07:0f:e0:df:26:37:
                    c3:59:17:d0:50:a1:ea:a9:10:3f:0f:d3:d1:33:40:
                    92:39:8f:fc:2e:4b:b0:58:61:32:51:18:d1:27:2a:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:C4:43:74:44:4E:09:D0:09:80:71:79:F0:7D:A6:CA:29:F1:72
            X509v3 Authority Key Identifier:
                keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3133382e3231392e3137322e302f32322d3232203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:a7:77:5e:18:60:fc:b2:14:79:86:76:92:34:7c:02:38:
         2f:71:7e:f5:e0:e9:34:8c:98:2d:54:2d:85:ad:59:c4:b8:79:
         de:f3:9b:b7:d1:80:6b:00:5b:d2:86:bc:06:00:68:17:ed:05:
         b2:a9:64:3a:00:fb:a4:96:bc:6d:bf:28:8e:77:cb:4a:64:53:
         78:da:41:d1:2d:58:60:cb:0c:95:e1:b2:dd:c8:3e:cb:5a:70:
         a8:01:34:97:4e:de:a2:43:a1:03:36:1e:5f:09:05:4c:e0:cf:
         6f:d8:fe:ee:cb:71:b9:f3:74:db:2d:77:7c:27:3d:88:93:b0:
         48:84:97:ca:de:fa:5f:c8:4c:2d:84:26:8e:d9:45:36:ed:05:
         e3:52:af:0e:4c:95:30:76:b7:81:37:b9:7e:09:e7:7a:ce:4c:
         2f:99:3e:c9:3a:8f:e0:4b:75:22:b5:f9:05:a9:fe:f3:60:35:
         b6:bb:05:90:4e:5a:24:1e:5a:56:ce:1f:f4:bd:93:de:8c:dd:
         ee:ea:d2:32:64:63:78:90:22:8b:dd:a1:3a:0e:69:06:dc:af:
         aa:6c:2b:c6:57:da:da:70:d5:5e:46:8f:b1:89:7d:f4:aa:c2:
         5b:41:3a:b2:21:6a:92:71:8a:a9:21:27:ab:64:91:6c:92:19:
         1b:ad:67:b0
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdlMbLlmfV5addtlWTDmiOgFyQm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ1NzY2M0RGQUEyNzk5QTFBRDAzREM0M0ZDQUY4RDMx
OTQyMkJENTAeFw0yNjAxMDYyMDUyNTNaFw0yNzAxMDUyMDU3NTNaMDMxMTAvBgNV
BAMTKDVBMDhDNDQzNzQ0NDRFMDlEMDA5ODA3MTc5RjA3REE2Q0EyOUYxNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPM/urbYLO7erEUBudKTxcY+WD
UK4+XMPEZYq8c0k86PmKjD0A0IOrT4VtdTPO2qrAc/JbJBYj/X9/g4SGcHikqkOw
ELwGIBCDCZnvOZy03zU6E70iGME/ApH5XrGytQAc8plDj/h9xjA28uAja58qSIdW
M/W4cI6e8baovbgZ7tRHj2EatxegaGzepdAKQ5tB/hZj2gEGLctOA8uiUxPVS7m0
4b6b64idgKozsYcN/6aB7+m0SM8BSRfANEkNZ3RaII5s6JBtHyq9U7bJJZftEkud
iKrl4UNn8wcP4N8mN8NZF9BQoeqpED8P09EzQJI5j/wuS7BYYTJRGNEnKoUHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWgjEQ3RETgnQCYBxefB9psop8XIwHwYDVR0j
BBgwFoAUJFdmPfqieZoa0D3EP8r40xlCK9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjkzOEUwQTU1NzY2RTE4MEYzODc1Q0EzQjcyN0QxQzU2
MUM0RjI0RUVEMTdDQzI1RkY5RUIwQUJEMUIxNkYwLzAvMjQ1NzY2M0RGQUEyNzk5
QTFBRDAzREM0M0ZDQUY4RDMxOTQyMkJENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDU3NjYzREZBQTI3OTlBMUFE
MDNEQzQzRkNBRjhEMzE5NDIyQkQ1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUI5MzhFMEE1NTc2NkUxODBGMzg3NUNBM0I3MjdEMUM1NjFDNEYyNEVF
RDE3Q0MyNUZGOUVCMEFCRDFCMTZGMC8wLzMxMzMzODJlMzIzMTM5MmUzMTM3MzIy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzMzNzMzMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
26wwDQYJKoZIhvcNAQELBQADggEBAEsAp3deGGD8shR5hnaSNHwCOC9xfvXg6TSM
mC1ULYWtWcS4ed7zm7fRgGsAW9KGvAYAaBftBbKpZDoA+6SWvG2/KI53y0pkU3ja
QdEtWGDLDJXhst3IPstacKgBNJdO3qJDoQM2Hl8JBUzgz2/Y/u7LcbnzdNstd3wn
PYiTsEiEl8re+l/ITC2EJo7ZRTbtBeNSrw5MlTB2t4E3uX4J53rOTC+ZPsk6j+BL
dSK1+QWp/vNgNba7BZBOWiQeWlbOH/S9k96M3e7q0jJkY3iQIovdoToOaQbcr6ps
K8ZX2tpw1V5Gj7GJffSqwltBOrIhapJxiqkhJ6tkkWySGRutZ7A=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:55 2026 by rpki-client