This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa
File:                     3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          G+iK8Mjd3dtuAlGpmg+Ysep+UinADqCoGlAJgcIBEvE=
Subject key identifier:   A8:E9:04:8E:8C:D8:A6:A2:C0:33:B0:36:5F:DE:D5:77:D1:23:DB:F4
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       715FE8F4DBA03FB1E9C635BAC83FCDB787CBD23B
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 06 Jan 2026 19:05:33 +0000
ROA not before:           Tue 06 Jan 2026 19:00:33 +0000
ROA not after:            Tue 05 Jan 2027 19:05:33 +0000
asID:                     263686
IP address blocks:        138.59.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5f:e8:f4:db:a0:3f:b1:e9:c6:35:ba:c8:3f:cd:b7:87:cb:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Jan  6 19:00:33 2026 GMT
            Not After : Jan  5 19:05:33 2027 GMT
        Subject: CN=A8E9048E8CD8A6A2C033B0365FDED577D123DBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:e0:36:24:3b:b0:f5:5b:13:4d:d6:22:e2:
                    d0:8d:19:bd:46:f5:0b:8c:7d:2b:f3:da:93:c7:ff:
                    43:17:99:80:eb:67:86:bd:2e:7a:8e:5e:9a:81:4e:
                    ea:28:07:dd:70:4d:22:68:e7:13:ee:d4:73:0e:64:
                    41:5a:dd:63:8e:0d:6d:16:9c:70:e7:6b:0d:b4:70:
                    40:c8:58:b0:24:12:5e:16:57:26:e0:16:6c:d4:e9:
                    db:b8:c2:e1:12:54:65:1d:5a:87:8a:2b:56:41:0c:
                    17:4b:b4:47:42:3e:7e:f8:1b:c9:12:b2:63:ed:0c:
                    d1:53:4b:58:2d:cc:f9:71:26:9c:ce:b4:9b:f6:f5:
                    02:79:67:fd:27:09:01:9b:14:0d:72:46:c5:6f:57:
                    b0:6e:7f:15:27:7e:65:b8:c9:a1:44:5c:56:51:98:
                    7e:11:43:c1:91:72:da:af:97:4f:e5:7c:7c:89:14:
                    e0:91:6a:11:9d:68:5c:34:44:7f:71:c9:15:a7:75:
                    85:d0:a6:08:8a:c1:38:fd:3b:52:4b:79:89:ab:89:
                    2d:1b:03:6e:71:22:97:7d:9a:1c:96:18:80:38:02:
                    5b:80:79:7a:72:2b:21:1c:4c:5e:c8:b4:e0:9c:6f:
                    ba:44:2b:9d:79:96:e5:77:ce:c4:a8:85:7b:93:8b:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:04:8E:8C:D8:A6:A2:C0:33:B0:36:5F:DE:D5:77:D1:23:DB:F4
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:a2:a6:08:73:5e:78:83:f9:ed:16:16:65:36:a1:7c:26:
         91:a3:60:81:68:67:6c:49:1f:29:d2:89:f9:9e:7d:ba:70:3e:
         73:d4:b1:2c:ac:e0:b5:41:1b:67:05:09:02:ee:c4:94:7d:8a:
         bc:89:fa:84:af:aa:8c:ff:9f:28:6a:55:30:8f:9d:cc:d7:b3:
         31:c3:b2:29:f7:98:b0:fa:b5:1c:76:27:bc:1a:71:9d:0d:13:
         00:18:aa:f8:9d:cd:b3:b6:73:b1:4e:42:13:6c:48:88:5a:be:
         db:3e:b3:fc:50:c9:ba:da:f3:8a:0c:96:a4:bb:79:9d:a9:d6:
         af:b4:f2:37:c9:0e:d2:16:78:73:47:78:c7:57:0e:6d:91:8d:
         b5:1e:36:a7:ce:89:4d:60:7d:fa:39:3d:7e:71:bb:80:53:1e:
         b0:a4:c0:28:56:17:c0:4c:af:f6:46:2b:ee:a1:c4:c2:00:e6:
         92:1b:08:30:9c:49:37:0d:da:33:f0:d6:4d:ca:08:08:bc:5e:
         6e:3c:53:45:ca:db:f3:3d:c8:40:87:6e:01:2b:c3:c3:1e:67:
         92:a1:52:74:93:5b:f0:58:7d:86:f0:6b:4e:24:69:91:4d:e9:
         73:28:74:d1:cc:70:0c:81:b1:f1:a7:53:93:48:73:df:22:91:
         fa:98:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:35 2026 by rpki-client