This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e203631333137.roa
File:                     3133382e39392e3134342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          lSwcmBJtU1FwLzfXpoXaAqi4F8GoB0DM58ZdhQjsuXY=
Subject key identifier:   A6:30:09:79:37:33:A0:48:BD:1D:94:FF:2D:50:31:87:5D:35:A1:D1
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       5C372131AEB4BAB30969BEACF93037AB7E0A4DBC
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 06 Jan 2026 19:37:33 +0000
ROA not before:           Tue 06 Jan 2026 19:32:33 +0000
ROA not after:            Tue 05 Jan 2027 19:37:33 +0000
asID:                     61317
IP address blocks:        138.99.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:37:21:31:ae:b4:ba:b3:09:69:be:ac:f9:30:37:ab:7e:0a:4d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: Jan  6 19:32:33 2026 GMT
            Not After : Jan  5 19:37:33 2027 GMT
        Subject: CN=A63009793733A048BD1D94FF2D5031875D35A1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:6a:2d:3d:0a:32:4d:0c:ad:ea:cd:4a:2b:
                    28:db:08:e5:ee:f7:5b:58:01:9e:7d:e7:eb:83:00:
                    4f:3e:e8:bf:b6:16:df:87:dd:09:41:19:1b:df:a1:
                    80:2e:43:12:53:0a:fe:e1:42:14:a1:fd:e0:f8:8c:
                    eb:57:7b:78:90:4f:4c:4b:8a:58:3b:d1:48:6e:e9:
                    e9:f2:02:6d:b5:12:5f:1f:17:d0:c7:7b:77:2e:20:
                    24:57:b1:c4:f9:4b:3c:a9:dd:12:3e:50:2f:d8:67:
                    d6:06:a8:3f:e3:06:eb:43:47:91:fa:46:fd:81:73:
                    92:22:3e:85:34:5a:7b:6f:a5:38:a6:41:1b:11:78:
                    32:02:d1:b8:43:12:74:9f:c0:b8:a3:a3:c8:85:cd:
                    a5:ab:8b:c3:cf:1a:07:7a:0d:a9:5b:9e:cc:35:00:
                    f5:6b:f6:8d:3b:36:af:b6:1a:7e:93:a5:7f:fa:b5:
                    f8:9f:21:08:cd:37:5d:b2:fd:fd:4a:60:c2:0a:42:
                    59:57:2c:29:80:e4:0d:f7:53:3a:6b:02:56:36:b8:
                    ca:81:f6:29:4d:ff:02:e3:08:01:32:ba:98:19:7a:
                    6c:0a:96:e5:12:3e:ac:f2:6d:9a:43:ea:0f:c8:3a:
                    19:bd:08:f9:de:37:6f:8b:94:53:6d:51:2f:8b:2f:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:09:79:37:33:A0:48:BD:1D:94:FF:2D:50:31:87:5D:35:A1:D1
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:a9:8a:6e:0c:8c:e4:a2:4a:b5:f3:3b:ef:88:19:e0:f9:
         f1:ff:a3:85:1f:84:dd:30:11:3f:f7:3d:e1:41:7f:c3:03:11:
         f6:8c:86:ad:9f:4f:1f:67:6e:fc:61:9d:92:65:23:37:84:9c:
         fb:e5:e4:10:98:83:f4:53:f4:9b:48:d1:76:78:7e:a9:9e:a7:
         20:aa:24:97:69:04:c9:1c:71:c6:db:59:27:e2:2c:9a:45:ac:
         18:cd:ae:68:6c:0f:4b:88:cf:d3:c8:b2:f0:9c:80:7e:1f:44:
         29:b2:ab:1a:d2:88:65:52:04:2a:db:75:bc:8a:90:c8:2f:87:
         ee:a9:b6:5e:ea:d1:bc:ce:d6:e9:b5:ff:f4:28:7b:5d:0f:3f:
         b0:d3:2e:1d:95:cb:92:0e:bf:e0:7c:a0:e5:40:63:1a:30:b5:
         3c:d9:df:43:e5:f5:df:b8:5f:08:95:0c:7e:a0:90:42:30:a9:
         51:cb:2f:95:3d:21:27:fc:7c:10:a3:7e:32:74:a3:ce:bb:c2:
         ca:43:7e:28:bc:8a:21:22:84:37:65:ad:b0:83:90:ab:b7:7c:
         c6:56:3e:26:8f:16:fc:1a:7a:06:a0:24:c0:32:87:6d:f9:99:
         c6:4f:78:5d:87:5c:a5:ec:27:c1:fe:c4:cb:ea:fd:04:b0:0a:
         35:c7:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:58:02 2026 by rpki-client