This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136322e302f32342d3234203d3e20323632313638.roa
File:                     3133382e3131372e3136322e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          VZbSN06POv/+fDYm1T8YusG8nkeaFuy1Z9Ahfye+7Tw=
Subject key identifier:   BC:92:7E:07:39:62:36:2D:A3:85:68:8F:2B:96:B9:0F:B2:26:EE:8C
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       03A3A2019C57CDE4370D78074B358B5D7DDBF783
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136322e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 06 Jan 2026 19:23:03 +0000
ROA not before:           Tue 06 Jan 2026 19:18:03 +0000
ROA not after:            Tue 05 Jan 2027 19:23:03 +0000
asID:                     262168
IP address blocks:        138.117.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a3:a2:01:9c:57:cd:e4:37:0d:78:07:4b:35:8b:5d:7d:db:f7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Jan  6 19:18:03 2026 GMT
            Not After : Jan  5 19:23:03 2027 GMT
        Subject: CN=BC927E073962362DA385688F2B96B90FB226EE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:2d:47:59:b7:e7:3a:60:8a:c4:45:3e:c0:
                    e0:09:35:21:63:5a:93:d7:e8:1d:d6:5d:5c:46:33:
                    40:c3:f1:74:cd:3b:61:89:76:ac:53:8d:f0:4f:94:
                    75:74:9c:65:02:3b:ee:0b:9d:ed:5c:f8:88:fd:db:
                    97:57:5c:da:8d:d1:4e:12:d9:f5:94:1b:19:bd:06:
                    06:b5:7e:26:de:d4:d1:b4:d8:be:37:b6:33:45:91:
                    41:e3:9f:08:56:ad:75:1b:71:4b:d9:a4:b1:11:3e:
                    ea:d1:55:d1:4f:5d:cb:26:b6:80:d3:a8:56:4d:5b:
                    5f:7f:89:85:73:49:13:fc:4e:1e:b5:42:68:22:21:
                    33:fa:4a:6a:be:ac:c0:3e:a1:55:92:53:1e:34:73:
                    2c:55:87:9c:75:07:51:3a:8f:ce:0d:41:b7:d9:c2:
                    78:b9:b8:15:20:cc:a2:32:e2:ad:f6:37:20:0c:9a:
                    84:88:4d:d3:28:24:f9:e9:6e:52:e0:9e:05:6d:bd:
                    66:95:10:1d:24:de:73:b7:b2:97:3a:4e:ce:34:7f:
                    4f:28:dd:97:0d:12:1b:73:c9:32:6a:b1:c9:ec:d9:
                    84:a7:21:a2:75:47:99:22:e8:f4:d1:fd:5d:55:7a:
                    3d:ee:19:e8:2b:c1:ce:5a:9c:53:c9:70:12:74:73:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:7E:07:39:62:36:2D:A3:85:68:8F:2B:96:B9:0F:B2:26:EE:8C
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136322e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d8:dd:6f:48:b4:d0:6f:4a:b3:98:e8:c4:1d:15:63:28:60:
         ee:9e:58:11:fd:c0:59:ab:b5:d6:25:23:af:e9:7f:c2:17:3d:
         29:87:27:ea:90:c6:b3:0a:e1:2d:ca:b9:c7:e0:d6:d5:07:c7:
         3a:46:46:5f:22:e1:18:92:25:95:e3:b0:67:d4:aa:88:aa:fe:
         45:98:03:b3:3a:63:29:c8:b6:6a:2a:ed:16:d7:fe:7a:d0:cd:
         a7:5c:be:03:cf:6a:3e:6c:66:21:f6:e3:16:f1:66:ef:47:5f:
         af:8d:84:37:94:e4:d9:c4:0c:b3:b5:93:ae:d6:d0:f9:d3:20:
         81:f7:42:41:f1:f9:ba:09:4f:b3:db:96:67:96:2b:19:67:86:
         3c:d0:b3:b9:24:27:74:1b:46:ae:de:65:d6:7f:24:c6:ac:c3:
         d3:73:53:e2:86:45:0d:e8:3f:a1:e4:71:30:52:59:12:2a:2b:
         87:47:b2:07:d5:90:c8:30:c1:73:b0:b6:40:08:4e:ef:0c:46:
         e9:5b:35:9c:59:9a:ab:31:e8:4e:cd:f6:d7:53:9c:ef:80:49:
         91:a9:b2:36:ff:9b:71:92:6c:e3:fb:31:2e:fa:0b:3a:05:6c:
         50:0b:d4:fc:24:1d:f7:04:e2:0c:7e:30:18:aa:8d:eb:11:9d:
         4b:40:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:20:06 2026 by rpki-client