This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa
File:                     3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa (raw, json)
Hash identifier:          SO5ZVF6S1TH/ogrS/y9qyQbspdBez1ZFr5rDUEjVCU4=
Subject key identifier:   86:59:BF:D1:63:49:88:3B:C3:68:4C:0A:78:96:42:D7:DB:FD:72:CE
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       412B3D7E50949D897C5CA2CBFFEE07FECE0F8210
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa
Signing time:             Tue 06 Jan 2026 19:00:53 +0000
ROA not before:           Tue 06 Jan 2026 18:55:53 +0000
ROA not after:            Tue 05 Jan 2027 19:00:53 +0000
asID:                     263824
IP address blocks:        138.185.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:3d:7e:50:94:9d:89:7c:5c:a2:cb:ff:ee:07:fe:ce:0f:82:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Jan  6 18:55:53 2026 GMT
            Not After : Jan  5 19:00:53 2027 GMT
        Subject: CN=8659BFD16349883BC3684C0A789642D7DBFD72CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:65:0f:ed:af:20:b6:8d:32:e7:80:e4:07:
                    c5:20:d3:db:44:f6:6b:90:63:90:9c:29:ea:f4:15:
                    98:79:aa:41:81:e7:65:cb:ce:aa:5a:1e:c3:eb:de:
                    b1:44:83:b2:86:28:70:b7:e0:ae:2f:5f:74:bd:a5:
                    5f:38:57:06:2c:14:12:b4:ac:6f:2d:13:66:b8:b0:
                    1b:24:a6:92:98:87:78:00:89:fc:b4:47:33:8f:c8:
                    c6:44:64:83:ac:91:21:bd:d0:37:3a:cc:1d:c0:61:
                    fb:04:3f:8d:88:6e:97:dd:e9:ea:37:20:4e:ee:b3:
                    57:67:0d:25:95:de:38:63:b4:65:2c:90:61:35:fb:
                    8d:32:67:1c:c6:d5:c1:f7:51:26:52:16:b7:99:61:
                    43:f4:f9:d6:df:8c:75:08:77:ea:f4:c4:46:e7:c3:
                    d4:31:e5:80:4a:2f:a7:0d:e9:ae:fa:85:a1:35:63:
                    73:c5:91:3c:1b:22:43:61:5a:30:76:53:ce:47:14:
                    69:a2:f5:ec:58:ad:97:74:00:40:1d:1a:99:46:77:
                    84:ce:31:fc:d3:1c:78:c0:d0:e8:e5:da:6a:f5:6e:
                    07:77:26:b1:ad:8d:e2:7c:57:4f:81:b5:2a:18:55:
                    49:71:62:4c:b2:56:39:02:02:12:8e:3d:90:69:ae:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:BF:D1:63:49:88:3B:C3:68:4C:0A:78:96:42:D7:DB:FD:72:CE
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:22:46:7b:04:3b:e3:91:1f:72:4c:9d:78:71:3c:c7:31:
         ea:8d:1a:d4:2f:ff:41:b6:cc:cc:c4:32:8c:ef:db:d1:48:61:
         7f:38:e3:e9:12:e2:19:9c:2d:e7:d1:8f:52:52:2b:15:dd:1b:
         7b:47:05:3a:51:8b:e9:34:f6:37:af:74:ff:95:ba:64:ee:97:
         fe:1f:a0:e3:65:26:49:33:be:f8:ca:8f:71:04:a3:9a:b7:9b:
         e7:39:e1:89:af:26:36:fc:c5:87:7e:1f:5e:3a:21:bd:40:9f:
         ae:3c:a6:f6:08:00:85:69:cb:13:79:0b:1c:03:c0:ae:39:90:
         2b:9b:c4:3c:a4:b2:c0:97:8a:3b:92:d1:75:cf:a7:88:64:af:
         07:dd:c9:e3:01:0f:b4:87:b2:9d:e0:54:cc:70:a3:9b:40:b0:
         05:f2:30:f2:3d:f0:70:e1:c5:ec:e8:ed:0a:fb:0c:3b:de:14:
         4c:31:d1:e3:61:13:29:95:93:21:8f:8b:b6:c5:ca:ed:b5:c6:
         3a:c9:99:f8:46:3d:50:d8:8d:e2:8b:6d:eb:62:e7:f0:c6:fa:
         fb:a0:34:c6:b8:cb:82:17:fa:7c:5c:e6:10:19:a1:56:7e:85:
         b4:06:28:15:2e:d2:65:43:98:36:12:94:af:ba:3b:72:c5:3f:
         fc:c0:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:43 2026 by rpki-client