This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133382e3132322e3230302e302f32322d3234203d3e203130323939.roa
File:                     3133382e3132322e3230302e302f32322d3234203d3e203130323939.roa (raw, json)
Hash identifier:          MiKVmV3+es5y3sa3GqVRqJBBq2aszSvXZwTxqJjmmnw=
Subject key identifier:   86:D3:2D:99:CF:C3:2F:78:15:D2:82:D6:EE:A6:07:51:CB:2B:F6:2B
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       6D4D83DD6EC8E44C7703AD1C61712BBD050E6212
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133382e3132322e3230302e302f32322d3234203d3e203130323939.roa
Signing time:             Tue 06 Jan 2026 19:01:15 +0000
ROA not before:           Tue 06 Jan 2026 18:56:15 +0000
ROA not after:            Tue 05 Jan 2027 19:01:15 +0000
asID:                     10299
IP address blocks:        138.122.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:83:dd:6e:c8:e4:4c:77:03:ad:1c:61:71:2b:bd:05:0e:62:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Jan  6 18:56:15 2026 GMT
            Not After : Jan  5 19:01:15 2027 GMT
        Subject: CN=86D32D99CFC32F7815D282D6EEA60751CB2BF62B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:e0:92:cd:ee:c4:f4:1a:94:04:0c:ba:61:
                    65:11:12:51:2e:ab:23:14:57:91:1a:30:80:d0:13:
                    61:47:ac:6c:96:11:a8:d7:c7:7c:35:47:8d:ba:0b:
                    d6:d6:32:c4:31:26:b6:3d:d8:d1:f6:8c:62:07:d6:
                    a4:c7:ca:a1:97:4b:24:8d:a3:0f:41:fc:15:c9:fa:
                    24:53:dc:55:fc:94:f5:ca:13:28:cc:c9:67:a9:5a:
                    1f:12:e5:70:5c:01:97:5f:c4:91:17:aa:46:d2:02:
                    88:04:68:3b:6d:26:ca:4b:5b:55:b1:f3:44:3a:01:
                    b3:97:ca:f3:94:5f:11:41:ec:8a:b0:90:2d:71:87:
                    cb:27:58:5f:6d:c1:47:d2:c8:3f:7d:d8:12:d1:55:
                    34:b4:3b:29:e1:57:28:63:db:6e:0c:72:5d:4b:55:
                    16:0e:35:86:94:02:81:1a:d2:4a:18:f6:bf:e8:0d:
                    08:92:9b:38:89:c4:6b:94:48:49:2d:bb:10:1d:be:
                    d6:72:26:49:60:52:2c:20:37:e3:26:74:17:e8:9a:
                    43:97:05:77:9c:41:e0:85:21:75:c1:bc:14:f3:2e:
                    00:ae:82:27:d0:e1:3e:16:66:d0:e8:1f:2b:38:3d:
                    af:54:c6:17:57:c1:5c:b8:c5:f2:2f:11:21:75:b7:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:2D:99:CF:C3:2F:78:15:D2:82:D6:EE:A6:07:51:CB:2B:F6:2B
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3133382e3132322e3230302e302f32322d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:4c:2d:57:f5:72:0c:f3:5d:1b:be:24:6d:22:78:64:68:
         22:79:2c:b4:6d:f5:31:7a:05:6f:c4:bf:1c:45:29:12:c3:ca:
         f2:b7:4a:71:6c:d2:9d:8c:3a:d4:c8:e1:c9:fd:47:dc:ef:1c:
         ea:44:01:36:9b:c4:ec:78:19:ac:0c:37:6c:77:99:4a:7e:55:
         2d:22:17:ba:2a:4f:76:5d:e7:06:68:0c:ea:43:c6:28:47:3f:
         23:22:61:45:6d:68:1c:a7:8f:7c:8d:b5:71:48:62:75:fc:21:
         2f:d6:03:f3:4e:4f:9c:8d:5a:bc:d1:73:03:ed:32:57:4e:e6:
         0d:e3:1a:72:ad:4d:ae:90:06:83:70:60:ca:64:36:fa:fd:a6:
         e2:16:74:7a:89:0e:e5:40:65:bb:be:4b:d2:66:65:7e:d5:3d:
         25:b0:27:f7:fd:d5:7d:56:ea:e8:10:a7:ca:d7:1f:10:a0:bb:
         b0:88:9f:45:a9:8b:8c:e3:9c:24:98:b1:c6:c3:27:f8:bf:b2:
         e9:57:d3:5c:d4:09:65:27:d3:8d:a6:85:a8:80:f8:b6:ec:0a:
         c9:1c:cb:0f:91:e8:78:16:f9:c7:a7:b8:ac:04:7c:c7:ca:87:
         7b:4f:b2:bf:99:f6:57:59:7d:26:b3:07:e9:6c:c9:99:f6:b1:
         15:c9:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:30:22 2026 by rpki-client