This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3133382e39342e3234302e302f32322d3234203d3e20323633323232.roa
File:                     3133382e39342e3234302e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          m4pPgxddXHCphOCcQOzw1QnaauqTvJJOJ/bhRBlrvzA=
Subject key identifier:   8A:02:44:0E:FD:58:B3:8E:D9:D6:72:2A:22:32:D1:BE:2C:E8:AD:48
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       3BE45577B2FA712EC1D2A08B452E617D6DBA5A5A
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3133382e39342e3234302e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 06 Jan 2026 19:30:17 +0000
ROA not before:           Tue 06 Jan 2026 19:25:17 +0000
ROA not after:            Tue 05 Jan 2027 19:30:17 +0000
asID:                     263222
IP address blocks:        138.94.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e4:55:77:b2:fa:71:2e:c1:d2:a0:8b:45:2e:61:7d:6d:ba:5a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Jan  6 19:25:17 2026 GMT
            Not After : Jan  5 19:30:17 2027 GMT
        Subject: CN=8A02440EFD58B38ED9D6722A2232D1BE2CE8AD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:1d:f1:dc:68:d0:ee:c3:df:9a:20:57:a9:
                    d3:8e:c5:f0:ce:3b:09:43:f8:29:65:78:36:00:b6:
                    5b:65:e1:c2:97:df:e9:2d:b6:85:0f:ed:62:9e:11:
                    0d:9f:ba:e7:c9:4e:58:78:e0:7c:8b:1e:a8:76:a0:
                    86:b5:f2:7c:fc:28:80:d2:19:d6:db:e2:61:9f:85:
                    70:2c:6c:b9:4f:a6:dc:26:c9:9a:29:dc:07:80:03:
                    c6:3a:05:8b:df:5e:67:63:3d:b6:8d:18:16:97:38:
                    5a:50:b2:d1:73:67:ac:c5:28:4b:65:f8:4d:f9:4f:
                    d4:df:a2:ec:b7:8c:ec:85:71:d5:5f:7e:dc:bb:8e:
                    47:11:a5:50:a9:36:e0:c2:8d:4e:be:12:3b:a4:b6:
                    08:3d:c0:6e:30:37:51:67:ad:d2:85:e2:30:bf:70:
                    6f:0c:5a:24:d9:1c:f0:c0:35:91:a3:2d:65:99:6b:
                    c0:c7:1f:e3:e9:4c:bc:5a:6f:05:09:b1:ff:de:20:
                    e1:d0:b0:5e:f2:70:35:89:48:f7:08:bb:1e:35:20:
                    6a:ea:03:8f:f7:a9:6e:65:0b:89:2e:68:4a:e0:2b:
                    21:a4:c9:bb:2e:19:2f:91:54:45:a0:aa:85:fd:dc:
                    ad:4c:2b:21:e9:7a:12:4e:2b:50:a2:d9:c1:80:fb:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:02:44:0E:FD:58:B3:8E:D9:D6:72:2A:22:32:D1:BE:2C:E8:AD:48
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3133382e39342e3234302e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:1e:74:0e:72:7e:99:30:a3:c2:b2:91:ae:83:21:3c:eb:
         91:32:b4:53:c8:22:d9:3d:28:2a:a5:0e:02:fc:ea:b1:56:96:
         d4:9a:0f:28:73:d2:14:f8:92:84:ac:35:1c:57:ea:e3:3a:f2:
         4e:cc:99:91:7d:bd:a9:f0:f8:08:b4:3c:eb:b8:04:34:91:a7:
         ac:72:8c:23:fe:87:e8:32:36:27:a0:f7:48:6b:13:50:60:d3:
         d5:1e:78:2f:75:bf:a4:bf:7c:a4:2c:21:e6:1a:fc:90:6f:14:
         0b:b1:c7:26:69:b4:ec:d7:d0:9e:58:44:7d:dc:53:10:e5:81:
         b4:ca:d3:72:b8:30:de:f7:95:53:67:7c:35:cc:2a:1a:6b:93:
         ce:f3:ba:06:39:f5:4a:fe:11:81:56:3a:29:e8:84:fe:b4:70:
         9f:c2:ca:68:55:94:f9:c9:18:31:b0:84:e8:21:28:ec:c5:40:
         4f:15:cd:d8:20:84:56:7d:44:ab:5b:75:06:ba:df:70:66:fb:
         bd:df:39:60:a2:4c:8d:7f:da:9d:26:4d:9f:fc:02:75:70:f6:
         26:6f:68:d3:35:42:3e:ec:dc:2f:26:10:7c:d0:f6:fd:8e:ba:
         1b:16:df:bb:c0:f9:9c:af:62:99:44:f7:62:25:8b:a9:dd:3d:
         4e:96:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:01 2026 by rpki-client