This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
File:                     3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa (raw, json)
Hash identifier:          PjxVW8ztcb043XkEbEdDF+il+qZlxHDz6dwBrA5hLBg=
Subject key identifier:   BA:49:CA:BD:90:EC:1F:33:EA:99:CC:2E:7D:E5:1C:DC:59:1B:1F:30
Certificate issuer:       /CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Certificate serial:       576BD81C5D7D60641D14C3BAFB31C8D40F90C4E7
Authority key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
Signing time:             Tue 06 Jan 2026 19:17:36 +0000
ROA not before:           Tue 06 Jan 2026 19:12:36 +0000
ROA not after:            Tue 05 Jan 2027 19:17:36 +0000
asID:                     263700
IP address blocks:        138.121.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6b:d8:1c:5d:7d:60:64:1d:14:c3:ba:fb:31:c8:d4:0f:90:c4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
        Validity
            Not Before: Jan  6 19:12:36 2026 GMT
            Not After : Jan  5 19:17:36 2027 GMT
        Subject: CN=BA49CABD90EC1F33EA99CC2E7DE51CDC591B1F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:ee:67:fd:86:24:48:9f:eb:0d:50:ba:b1:
                    47:b9:cd:39:f4:9a:31:f2:ab:d6:34:5e:eb:90:0b:
                    a2:94:30:33:b7:39:cf:7c:5e:d8:b0:72:79:f5:00:
                    4b:58:ac:3f:ec:45:92:b3:d5:8f:ac:06:20:6b:0e:
                    3b:77:10:e7:42:7c:89:b3:c7:f4:15:a8:1f:22:93:
                    cb:d1:77:3d:14:60:a7:b9:b3:ed:61:98:c9:99:52:
                    de:cf:5d:7d:61:54:9a:e4:32:9c:cd:7a:32:51:7d:
                    b9:f3:49:52:94:62:83:4e:d2:12:56:55:d0:ee:44:
                    4f:17:0a:83:5f:f7:cc:19:3a:1d:61:58:55:5b:67:
                    20:36:aa:7f:2b:21:55:ef:d8:b2:c5:21:33:9c:ac:
                    0a:9e:0b:ed:2c:18:30:70:4a:04:d6:4c:73:06:32:
                    45:dd:00:3a:9a:72:dd:ca:6c:b6:12:0c:b9:4a:a5:
                    04:6a:e5:6e:c6:f1:03:46:4a:c7:f3:35:ad:a3:88:
                    68:5d:c5:64:ef:05:05:d5:cc:3c:90:e1:b4:ea:9d:
                    00:cb:de:89:92:b1:52:4c:db:e7:3e:86:3a:98:cb:
                    d6:44:7e:cc:00:82:98:d1:bd:75:0c:4a:93:ce:e4:
                    13:b6:57:ec:c5:d8:04:79:e3:4c:63:0f:9a:01:42:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:CA:BD:90:EC:1F:33:EA:99:CC:2E:7D:E5:1C:DC:59:1B:1F:30
            X509v3 Authority Key Identifier:
                keyid:B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:5b:99:dd:14:cc:cf:0f:37:bc:d2:63:c0:1b:72:9d:66:c1:
         2b:c3:6e:98:35:e8:37:a2:d4:33:49:74:3d:27:10:58:71:e9:
         85:ea:25:21:22:f7:03:37:97:cf:ee:b9:e0:54:ee:4c:20:d7:
         ca:e7:2c:ae:cd:57:1e:4e:12:c9:da:94:51:79:3f:e6:57:91:
         79:33:07:18:1c:83:6b:4c:a4:c3:e1:af:8d:1a:8b:be:a0:d3:
         8f:1e:3b:26:b9:db:b4:8d:2f:35:11:0e:ea:d9:f3:58:b4:9d:
         6c:30:d2:bb:c3:a4:01:d0:11:f6:04:e5:8c:f5:8e:4c:76:68:
         60:a2:10:13:97:9a:27:59:a1:14:3a:d3:da:f1:e8:3a:4f:72:
         36:58:49:92:4a:26:4c:39:50:2c:72:84:a7:21:52:fd:cd:aa:
         2c:88:a4:79:d6:9b:47:42:72:5d:80:9b:d1:1b:39:51:1b:af:
         3c:f6:a1:a6:35:a7:5e:bc:69:ea:32:c1:c4:ed:f1:a6:be:58:
         5f:cc:c0:24:4e:b2:42:db:6b:df:e7:7a:92:76:3c:65:b6:a1:
         d2:26:70:97:47:3f:af:8e:20:69:e2:97:bb:66:88:3f:8d:09:
         13:84:60:01:84:8b:e9:6a:d1:36:0f:6f:b4:8d:53:4e:a3:e5:
         72:a6:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:36 2026 by rpki-client