This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32342d3234203d3e203532333238.roa
File:                     3133382e39392e3137322e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          EW6pTAVxYl/U+VJf5eB2TFQQxTsYe/JBfehyUq17VQw=
Subject key identifier:   71:17:BB:65:E1:64:C7:DD:76:8A:FA:F7:F0:2C:9A:31:A4:B2:69:59
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       5F395DDED3D99C0419BEFACCD1B6BCB6F027105F
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:59 +0000
ROA not before:           Tue 06 Jan 2026 19:07:59 +0000
ROA not after:            Tue 05 Jan 2027 19:12:59 +0000
asID:                     52328
IP address blocks:        138.99.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:39:5d:de:d3:d9:9c:04:19:be:fa:cc:d1:b6:bc:b6:f0:27:10:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:59 2026 GMT
            Not After : Jan  5 19:12:59 2027 GMT
        Subject: CN=7117BB65E164C7DD768AFAF7F02C9A31A4B26959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:8b:b4:8f:77:a9:09:3d:a9:66:aa:e1:f4:
                    de:92:33:f3:30:ee:ce:72:c4:ff:fa:25:65:4b:4a:
                    ff:92:f8:3c:76:6a:fd:50:fb:af:90:3f:20:19:d3:
                    23:18:47:37:e2:5f:a0:4f:84:1c:d6:61:76:5a:4c:
                    bd:d0:7a:7b:55:24:20:7a:7e:6a:f7:cf:8d:52:31:
                    1f:c1:16:6b:45:cb:0b:9e:f5:d7:d6:dc:dc:2d:0a:
                    41:e2:a4:85:6c:db:8c:48:b2:da:46:c6:35:1b:f2:
                    81:23:63:9a:5f:23:43:2b:9c:9a:8e:4f:03:dc:62:
                    5c:13:11:27:43:42:3b:4c:d8:9e:e7:4e:8c:4c:00:
                    84:b3:65:a8:cf:ba:1f:e9:e5:6b:53:57:0d:01:4d:
                    27:47:e7:e5:56:f6:bc:80:99:d0:58:d1:b4:ef:d9:
                    6c:9f:eb:ea:8b:2d:3e:dc:f6:30:6c:3e:71:dd:11:
                    cd:bc:a1:58:96:80:5a:06:cb:f3:f7:17:57:09:e5:
                    e0:e9:1f:de:83:12:ef:b5:5b:bf:38:01:b3:55:15:
                    50:1f:d3:c4:ea:87:72:24:1a:5e:b0:70:3d:33:12:
                    e2:c8:39:f9:80:98:5b:52:65:e7:55:b2:93:e5:ec:
                    32:c0:e3:9f:b0:c8:62:09:c9:19:f0:87:81:ef:f4:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:BB:65:E1:64:C7:DD:76:8A:FA:F7:F0:2C:9A:31:A4:B2:69:59
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:a8:46:b0:6b:f9:80:56:80:e6:b7:2c:9b:ba:27:21:b2:
         58:fd:03:53:bd:95:6e:b5:06:e8:4d:5e:c4:03:82:46:3d:90:
         3a:9f:67:7b:02:de:be:a8:31:62:2e:9a:d3:66:88:21:45:51:
         51:46:8f:fc:fe:d5:73:27:7e:2b:9b:19:af:b3:69:3e:e3:7d:
         83:49:9b:61:56:49:a7:42:79:88:01:fe:d8:be:91:6f:ea:14:
         58:91:34:6d:dc:57:b9:74:1e:60:0e:77:f0:e0:ee:4b:83:5d:
         a9:2b:c1:f9:3c:c6:43:eb:81:4f:3f:4d:14:fe:a1:a0:73:40:
         4f:49:79:8a:89:56:7b:9d:5b:65:b9:cc:75:fd:d8:9c:ba:61:
         2f:5f:ed:ce:9e:39:7b:b0:60:f1:35:ea:84:7e:09:ee:6c:c5:
         5f:e6:12:55:30:f5:92:d1:bf:80:5c:7d:88:55:36:79:58:65:
         2e:80:79:3f:65:2e:96:15:9a:2d:2e:16:c9:be:10:47:7f:8a:
         3c:0f:bc:1e:ed:85:8c:1c:42:bf:75:ff:6b:80:cb:19:ee:73:
         dc:f3:6a:94:a9:df:62:16:59:48:24:e3:01:ee:ba:1f:13:c2:
         fa:92:da:26:b5:9b:ef:ca:7b:fb:51:cc:7e:87:b8:5c:0d:f0:
         24:60:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:49:23 2026 by rpki-client