This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3133382e3235352e3234382e302f32322d3234203d3e20323634363035.roa
File:                     3133382e3235352e3234382e302f32322d3234203d3e20323634363035.roa (raw, json)
Hash identifier:          PQxOgxKyWm2OZHuebZfZVMA47cT7HUpO630te0REByU=
Subject key identifier:   9F:DF:A4:DC:C1:4F:A5:3E:32:D4:1B:A6:3D:DA:2F:BF:60:AC:59:33
Certificate issuer:       /CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
Certificate serial:       2673881A8C379E7D5EDAB09B453EB38B7C9FA452
Authority key identifier: 7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3133382e3235352e3234382e302f32322d3234203d3e20323634363035.roa
Signing time:             Tue 06 Jan 2026 19:41:20 +0000
ROA not before:           Tue 06 Jan 2026 19:36:20 +0000
ROA not after:            Tue 05 Jan 2027 19:41:20 +0000
asID:                     264605
IP address blocks:        138.255.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:73:88:1a:8c:37:9e:7d:5e:da:b0:9b:45:3e:b3:8b:7c:9f:a4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
        Validity
            Not Before: Jan  6 19:36:20 2026 GMT
            Not After : Jan  5 19:41:20 2027 GMT
        Subject: CN=9FDFA4DCC14FA53E32D41BA63DDA2FBF60AC5933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:bb:88:e6:a2:18:1d:a1:87:b9:41:ad:8a:
                    73:01:3d:c8:7a:a8:ca:ad:ba:7c:9f:8f:c2:7f:6b:
                    9a:c5:1a:74:72:f2:08:4f:7a:f6:41:b4:94:1f:b5:
                    52:12:62:75:6b:5b:6d:0b:18:da:f0:64:0d:e1:30:
                    1a:62:f0:3e:16:56:76:d7:67:27:44:a0:2a:74:c9:
                    f6:61:7b:88:a3:98:e1:28:45:33:b3:ea:2d:f4:e2:
                    18:67:09:c3:76:fc:5b:7a:32:16:be:ae:8b:c0:e3:
                    c4:fd:77:4a:7d:63:3f:88:9a:24:b5:d2:1b:cd:1c:
                    f9:0e:7b:c8:b3:8f:33:74:ca:07:80:17:84:be:58:
                    a8:2c:60:ec:ff:8f:2d:48:e0:78:03:1e:9d:96:90:
                    b2:50:bd:2f:f1:8c:b5:58:72:cd:d6:01:fd:7e:e0:
                    b1:48:2c:19:9d:2a:5e:d9:d5:c2:48:6e:8c:59:de:
                    3b:90:a8:f3:f2:f9:d8:7b:78:2c:fb:84:e7:33:74:
                    17:31:c0:ea:8c:e5:89:1b:f5:e0:5a:c3:19:88:40:
                    c9:1f:a0:f3:ff:d7:ed:8a:6b:78:37:e7:fc:53:6d:
                    8a:5b:0c:4f:30:da:f3:46:06:33:8c:a5:4b:28:3f:
                    5d:a5:7d:c4:5d:11:10:8a:3e:a9:77:16:90:a4:22:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DF:A4:DC:C1:4F:A5:3E:32:D4:1B:A6:3D:DA:2F:BF:60:AC:59:33
            X509v3 Authority Key Identifier:
                keyid:7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3133382e3235352e3234382e302f32322d3234203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:03:f5:66:20:56:86:12:f6:4f:65:7b:88:4d:31:c0:58:
         eb:20:b5:7a:27:5b:b3:61:2a:b4:dd:f5:49:bd:8d:92:6d:32:
         f4:6f:b7:2e:b9:af:f5:59:71:28:07:86:1b:a8:0a:81:77:2b:
         95:24:c8:14:3a:2c:ea:e7:a3:2f:f2:14:55:9d:c6:d3:a5:1e:
         7d:5a:8d:8a:7a:d5:d1:f1:66:c9:cf:bb:49:9c:38:5d:6a:21:
         ac:9a:d6:d0:a2:de:13:5e:8a:69:72:3d:b0:23:6c:71:19:0d:
         6d:df:61:a1:6e:8a:e1:ad:64:f2:7b:fb:aa:c3:3e:d1:b9:cc:
         c3:7a:9d:c5:04:3e:22:2f:4f:29:b8:d2:7d:f4:fc:72:6b:ac:
         10:ec:df:88:66:9f:97:32:24:94:c8:5c:ba:0b:f1:86:a5:af:
         24:7c:32:17:0c:cc:53:3e:28:6e:e1:c1:17:69:c0:ca:ef:68:
         bf:6d:b6:be:3b:25:3b:7d:7e:37:3a:14:71:d3:cc:5f:6c:1a:
         eb:77:dc:30:67:db:2e:34:30:d4:7d:69:a7:26:3a:c4:d0:00:
         2e:92:97:7c:e2:d4:0f:96:6a:37:18:46:78:2c:a0:81:6c:44:
         8d:6c:30:e1:2d:31:ff:94:7c:92:5c:fe:a3:7f:20:7d:7c:c7:
         94:bf:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:22:33 2026 by rpki-client