This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32322d3232203d3e203532333238.roa
File:                     3133382e39392e3137322e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          MwruzVZMNOGwEZwYkHoK/eDWsOjpiaenNglZp5ruPqw=
Subject key identifier:   75:1E:85:3D:23:75:59:9C:77:AC:07:7E:2D:7D:E8:76:56:B0:31:7B
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       13F656A6B07381477C6D3139B8DB9886969B94FC
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:53 +0000
ROA not before:           Tue 06 Jan 2026 19:07:53 +0000
ROA not after:            Tue 05 Jan 2027 19:12:53 +0000
asID:                     52328
IP address blocks:        138.99.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f6:56:a6:b0:73:81:47:7c:6d:31:39:b8:db:98:86:96:9b:94:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:53 2026 GMT
            Not After : Jan  5 19:12:53 2027 GMT
        Subject: CN=751E853D2375599C77AC077E2D7DE87656B0317B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:5d:16:23:5a:73:e0:2e:c2:2f:cf:66:b4:
                    04:0b:f8:9e:3a:18:57:3c:01:65:e5:85:de:c8:8c:
                    e7:f3:c4:3e:9b:4f:a5:6c:40:81:68:e9:a4:87:78:
                    e1:ec:8f:03:03:91:3f:65:58:49:7b:de:0a:65:7b:
                    13:82:66:9b:8f:5c:cc:29:b8:6c:f4:60:51:67:90:
                    12:77:c7:e2:9f:cc:2b:53:9d:33:4b:44:84:40:cf:
                    dd:17:a7:bc:88:82:2c:fe:8e:6d:40:33:ca:87:bd:
                    bf:fa:83:21:9a:02:80:19:fe:7d:56:fa:c2:ee:fe:
                    49:82:3e:a8:f5:a3:f1:f9:30:57:90:33:cc:aa:b6:
                    d8:45:8a:5d:d1:55:2a:95:f8:fc:c8:43:6c:06:70:
                    c2:fe:24:39:c8:26:0a:e2:3e:ce:6d:a0:f2:61:c8:
                    1d:7d:92:5d:58:dd:6d:0b:23:a5:e8:9f:de:1d:44:
                    81:47:05:1f:7b:76:26:e1:2e:33:de:ab:f7:b9:47:
                    fc:fa:74:99:29:e3:cf:01:b9:fb:89:9b:a4:b2:b4:
                    00:82:2d:a5:e6:3c:1a:2d:4a:20:f9:9a:c2:6f:10:
                    8d:10:0b:39:6c:b7:55:96:86:f8:3b:50:43:1d:fe:
                    35:5b:7d:2c:8e:21:0a:32:19:28:30:d4:2d:24:79:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1E:85:3D:23:75:59:9C:77:AC:07:7E:2D:7D:E8:76:56:B0:31:7B
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:98:a5:c5:1a:ae:c0:f9:e1:e5:1a:80:a8:40:23:5f:f8:88:
         59:11:96:7c:a4:3a:28:cb:14:c5:39:28:f9:a7:f2:f2:98:fa:
         4a:55:cb:f7:6b:54:fb:79:dd:86:1b:6e:98:c1:b3:4a:a7:c4:
         c9:19:13:01:d0:4d:f6:e9:7f:a6:b1:1c:1b:24:4d:e6:82:88:
         f4:d8:43:b8:ae:82:89:5c:b5:2f:ce:78:f7:32:70:04:a3:2b:
         8d:c8:08:07:48:45:61:9b:2f:db:46:f5:a8:55:c1:ca:6d:5d:
         3f:34:28:f6:c2:fc:4b:0a:fb:7a:c7:f3:02:63:9f:5a:56:81:
         f2:0a:8a:ba:ed:f1:19:71:77:3d:59:bf:33:4e:e0:31:ff:99:
         c1:c3:94:f8:bd:94:95:a1:d4:55:4c:57:15:82:e1:bd:5c:e2:
         f4:e1:6c:03:34:cc:92:10:5f:1b:88:49:14:ca:5f:20:a0:bb:
         fa:7b:10:3e:80:e1:09:0b:bd:97:45:8c:b3:68:9b:b7:17:4e:
         20:1c:56:88:a7:f6:4e:c7:46:31:d9:2e:70:94:3e:f5:41:d5:
         0b:00:53:61:54:f0:ef:0d:13:b6:a3:c7:77:04:6b:ec:d2:42:
         f5:af:8d:1b:88:a7:ec:6c:05:75:61:ce:9b:44:83:74:3d:c7:
         90:ea:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:43 2026 by rpki-client