This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa
File:                     3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa (raw, json)
Hash identifier:          EX14MhidiaJS9r0JSMb+qDmk4obUBe8vQjl1X2z8HOc=
Subject key identifier:   E0:71:56:F1:02:6C:FE:AE:E7:3F:17:2B:49:B8:EC:4B:9B:50:61:77
Certificate issuer:       /CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
Certificate serial:       64CD5660D00D8BA5109ED3456BC62298F91BCF20
Authority key identifier: 91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa
Signing time:             Tue 06 Jan 2026 19:17:39 +0000
ROA not before:           Tue 06 Jan 2026 19:12:39 +0000
ROA not after:            Tue 05 Jan 2027 19:17:39 +0000
asID:                     264607
IP address blocks:        138.255.88.0/22 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cd:56:60:d0:0d:8b:a5:10:9e:d3:45:6b:c6:22:98:f9:1b:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
        Validity
            Not Before: Jan  6 19:12:39 2026 GMT
            Not After : Jan  5 19:17:39 2027 GMT
        Subject: CN=E07156F1026CFEAEE73F172B49B8EC4B9B506177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:a4:8d:ff:98:7d:16:c2:09:f2:36:a0:3e:
                    3c:5e:80:d1:ee:c1:42:c2:f0:e3:78:b6:2e:ed:53:
                    0a:a8:38:7b:a9:02:3b:ad:03:37:14:07:78:27:bf:
                    85:1c:ad:6b:dd:bb:6c:64:88:96:19:23:1f:41:4d:
                    b0:7e:84:97:dd:ce:e2:55:9d:3e:cc:64:e2:f4:55:
                    f9:fa:34:a3:2e:25:a0:a5:d3:ea:27:05:fd:cd:5f:
                    14:44:27:50:bf:cb:61:30:3d:8a:2e:04:60:1f:9c:
                    f3:a3:3c:cb:b8:da:ee:13:0d:cf:72:19:32:c5:b3:
                    68:16:9b:fc:30:51:90:b7:23:a6:cd:f9:a6:19:e3:
                    e1:b2:0d:d0:28:d7:a2:07:73:b6:32:10:65:f8:bb:
                    fd:7f:61:77:e5:b0:52:26:de:6e:d2:66:2b:36:d4:
                    9c:05:b4:7c:94:84:91:14:c0:4c:bc:f4:0a:e8:af:
                    b6:1e:de:f4:8e:87:2f:f5:7b:bc:f9:16:ca:b9:a9:
                    e3:aa:d6:10:26:b7:23:aa:bf:fa:a9:34:8e:6d:bd:
                    35:6c:7e:60:93:38:64:81:f2:f9:ef:31:e9:0e:6a:
                    eb:40:8b:64:4f:23:10:da:95:4d:f6:88:3f:05:1b:
                    db:21:13:35:f9:d4:97:a6:10:6a:b1:dd:70:8c:e2:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:71:56:F1:02:6C:FE:AE:E7:3F:17:2B:49:B8:EC:4B:9B:50:61:77
            X509v3 Authority Key Identifier:
                keyid:91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:8e:87:15:16:d6:61:e1:16:2f:dd:38:00:a3:98:13:a9:
         6d:ac:7c:ef:0c:b5:cb:88:c3:64:7e:78:71:fa:bc:25:49:61:
         0d:c0:4d:be:ff:92:f3:51:f7:30:c8:50:52:74:86:bd:c2:e9:
         ca:64:21:f3:91:a4:5c:38:58:f0:d6:38:c8:82:cb:67:97:a5:
         ca:33:e5:b5:13:5d:81:48:6e:d5:27:2e:2a:36:24:fa:93:5d:
         23:78:f3:09:b6:75:51:48:cf:d3:86:ea:dc:a6:8b:d1:93:c7:
         1b:c7:f2:4a:cd:45:3d:ce:3e:7e:3b:45:23:ed:16:28:50:69:
         6a:69:bb:43:76:27:7c:1c:aa:9a:11:50:b0:0a:e0:ad:bd:0b:
         69:76:7e:b4:36:c8:01:b3:bd:ab:91:e0:90:d9:e3:0a:ec:a1:
         da:13:40:5e:24:36:69:44:e2:32:ee:21:5c:b4:f6:b5:74:37:
         f7:a7:e1:60:e2:2a:b2:45:8c:88:13:ab:95:04:75:1a:66:b9:
         1f:fa:98:46:0f:76:d0:29:01:b1:cc:1a:98:00:9b:60:8d:f7:
         bc:b1:bc:dc:19:7f:70:96:f4:03:47:4a:f9:24:9e:95:f3:50:
         ec:5b:80:e7:e6:fd:7b:92:b5:c6:2d:1b:c7:fa:b9:13:69:c4:
         e6:17:da:a4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZM1WYNANi6UQntNFa8YimPkbzyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFBNDA1RURGNjNBOUYyOTU4QzZCMzY2NjJBNkIzQ0VG
NDc2QTg5RDAeFw0yNjAxMDYxOTEyMzlaFw0yNzAxMDUxOTE3MzlaMDMxMTAvBgNV
BAMTKEUwNzE1NkYxMDI2Q0ZFQUVFNzNGMTcyQjQ5QjhFQzRCOUI1MDYxNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TqSN/5h9FsIJ8jagPjxegNHu
wULC8ON4ti7tUwqoOHupAjutAzcUB3gnv4UcrWvdu2xkiJYZIx9BTbB+hJfdzuJV
nT7MZOL0Vfn6NKMuJaCl0+onBf3NXxREJ1C/y2EwPYouBGAfnPOjPMu42u4TDc9y
GTLFs2gWm/wwUZC3I6bN+aYZ4+GyDdAo16IHc7YyEGX4u/1/YXflsFIm3m7SZis2
1JwFtHyUhJEUwEy89Aror7Ye3vSOhy/1e7z5Fsq5qeOq1hAmtyOqv/qpNI5tvTVs
fmCTOGSB8vnvMekOautAi2RPIxDalU32iD8FG9shEzX51JemEGqx3XCM4sJLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4HFW8QJs/q7nPxcrSbjsS5tQYXcwHwYDVR0j
BBgwFoAUkaQF7fY6nylYxrNmYqazzvR2qJ0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NUJDQUY4NjQ5MERFNjlBNkJENkM0MUQ4NkE4NEYwQzhC
MERBQ0Q5Qzc1ODdEOTY2M0RFOThBNjBBMzY4RDEwLzAvOTFBNDA1RURGNjNBOUYy
OTU4QzZCMzY2NjJBNkIzQ0VGNDc2QTg5RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MUE0MDVFREY2M0E5RjI5NThD
NkIzNjY2MkE2QjNDRUY0NzZBODlELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjVCQ0FGODY0OTBERTY5QTZCRDZDNDFEODZBODRGMEM4QjBEQUNEOUM3
NTg3RDk2NjNERTk4QTYwQTM2OEQxMC8wLzMxMzMzODJlMzIzNTM1MmUzODM4MmUz
MDJmMzIzMjJkMzIzNzIwM2QzZTIwMzIzNjM0MzYzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiv9Y
MA0GCSqGSIb3DQEBCwUAA4IBAQAtC46HFRbWYeEWL904AKOYE6ltrHzvDLXLiMNk
fnhx+rwlSWENwE2+/5LzUfcwyFBSdIa9wunKZCHzkaRcOFjw1jjIgstnl6XKM+W1
E12BSG7VJy4qNiT6k10jePMJtnVRSM/ThurcpovRk8cbx/JKzUU9zj5+O0Uj7RYo
UGlqabtDdid8HKqaEVCwCuCtvQtpdn60NsgBs72rkeCQ2eMK7KHaE0BeJDZpROIy
7iFctPa1dDf3p+Fg4iqyRYyIE6uVBHUaZrkf+phGD3bQKQGxzBqYAJtgjfe8sbzc
GX9wlvQDR0r5JJ6V81DsW4Dn5v17krXGLRvH+rkTacTmF9qk
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:00 2026 by rpki-client