This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133392e302f32342d3234203d3e203631343937.roa
File:                     3133382e39392e3133392e302f32342d3234203d3e203631343937.roa (raw, json)
Hash identifier:          I/KJd2Zdz4QYX3AqagWc5jDLSBu5YbvZCRePbr1en1Y=
Subject key identifier:   08:24:01:F6:4D:9E:8A:C2:8E:F1:B3:0B:C1:3A:96:85:16:B8:1F:1A
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       3461B2EF9F5FECA64ACD769C465963289A749C8F
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133392e302f32342d3234203d3e203631343937.roa
Signing time:             Tue 06 Jan 2026 20:56:16 +0000
ROA not before:           Tue 06 Jan 2026 20:51:16 +0000
ROA not after:            Tue 05 Jan 2027 20:56:16 +0000
asID:                     61497
IP address blocks:        138.99.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:61:b2:ef:9f:5f:ec:a6:4a:cd:76:9c:46:59:63:28:9a:74:9c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Jan  6 20:51:16 2026 GMT
            Not After : Jan  5 20:56:16 2027 GMT
        Subject: CN=082401F64D9E8AC28EF1B30BC13A968516B81F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:a8:f2:2e:0f:1a:56:f6:a3:42:5d:94:8c:
                    c3:a1:51:29:f6:20:73:8f:cd:47:c9:1d:16:f6:fd:
                    6b:ad:57:c9:e3:be:1f:f3:ab:aa:96:59:59:44:55:
                    5b:38:ec:31:90:1f:3c:8e:d0:b9:4f:ef:11:19:19:
                    ce:f4:a1:66:7b:02:e1:dd:3e:f6:ce:86:47:66:cf:
                    9b:c3:80:f4:48:7a:bf:85:5e:c8:8b:e8:b2:ce:c0:
                    e7:9c:27:a7:f0:f4:17:72:ca:6c:57:ba:a2:b4:c8:
                    e6:ec:b6:30:24:5c:4f:d3:9c:8a:c2:3b:89:6c:80:
                    2d:ca:f4:e7:2b:ca:d5:49:f7:54:95:9f:0f:e6:83:
                    a8:ee:39:cd:ca:7a:ac:3e:db:85:52:b0:78:e7:e9:
                    a3:12:ac:8a:31:9b:dd:4c:e6:77:78:da:f4:bf:88:
                    82:0f:ba:d7:ee:67:90:ae:70:31:a9:2f:d1:b7:d8:
                    0d:cf:2e:3e:17:31:d1:0b:b7:cf:11:84:94:1f:3f:
                    f5:d1:bb:49:86:f0:76:80:e4:99:8b:c9:78:26:b3:
                    d5:c1:8d:fb:af:1f:7f:46:52:55:cd:c9:1c:8a:2f:
                    ff:b7:3e:57:4c:6d:54:04:18:9e:3d:5b:91:33:9f:
                    43:85:64:8f:a2:b0:ce:73:b6:7f:6d:62:7c:8d:30:
                    ad:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:01:F6:4D:9E:8A:C2:8E:F1:B3:0B:C1:3A:96:85:16:B8:1F:1A
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133392e302f32342d3234203d3e203631343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:31:2e:0b:b8:da:40:f7:54:31:26:f1:9a:cf:cf:12:c0:19:
         a6:29:84:42:3a:3d:76:e5:7c:7e:cc:0a:3b:aa:90:98:a3:92:
         ac:03:89:5a:5f:dc:ca:52:ae:f6:04:83:6b:d0:49:50:1b:cd:
         27:63:ff:63:05:98:5a:85:19:46:56:24:ff:cf:a8:3f:e8:7a:
         90:9b:6b:45:18:7a:da:f7:ec:8c:14:28:01:df:49:b8:12:d3:
         8d:94:6f:5a:aa:21:12:fc:36:fe:d7:e5:40:8d:64:6a:f9:89:
         c5:e3:2c:32:87:7e:7c:8e:dc:9b:8a:f0:8a:f9:ce:96:05:a0:
         cb:38:76:54:00:06:73:2d:52:d4:3c:1b:d6:8b:37:1c:ce:d2:
         5d:93:3f:47:9c:60:f4:91:84:c6:8b:1e:8b:c3:db:fa:e7:31:
         ce:fd:64:d0:de:f2:f0:7e:60:5a:c5:d3:6a:5a:7c:53:2c:9e:
         98:86:16:22:b6:90:44:9a:ea:bb:da:03:3e:6f:48:cd:db:45:
         08:29:03:a0:e4:3c:b6:e9:ca:c4:d8:35:02:d8:eb:30:11:20:
         51:39:80:e8:59:a1:4d:e0:f9:de:c0:8b:48:c7:d7:dd:5d:49:
         2b:e2:bc:12:65:26:2e:97:6e:ee:d8:b1:61:22:e9:e2:c2:ad:
         a1:23:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:06 2026 by rpki-client