This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/3133382e302e31322e302f32322d3234203d3e2036353037.roa
File:                     3133382e302e31322e302f32322d3234203d3e2036353037.roa (raw, json)
Hash identifier:          HEnrbAD+uQheTAnP0ZKpLR8uMFS2z5hAxgRAZRatiEM=
Subject key identifier:   1F:52:35:55:48:90:7C:6E:06:02:B2:3C:6E:0F:07:26:E5:6F:6A:9A
Certificate issuer:       /CN=26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922
Certificate serial:       2B4670C1B593FBC4495A9616F8BC6B983F5EBD6F
Authority key identifier: 26:DD:82:D3:A5:AB:AB:06:FA:1F:09:23:F6:F7:0A:2E:D7:A0:89:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/3133382e302e31322e302f32322d3234203d3e2036353037.roa
Signing time:             Tue 06 Jan 2026 18:59:39 +0000
ROA not before:           Tue 06 Jan 2026 18:54:39 +0000
ROA not after:            Tue 05 Jan 2027 18:59:39 +0000
asID:                     6507
IP address blocks:        138.0.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:46:70:c1:b5:93:fb:c4:49:5a:96:16:f8:bc:6b:98:3f:5e:bd:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922
        Validity
            Not Before: Jan  6 18:54:39 2026 GMT
            Not After : Jan  5 18:59:39 2027 GMT
        Subject: CN=1F52355548907C6E0602B23C6E0F0726E56F6A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:fe:8c:0d:81:bd:e7:17:50:49:d1:01:4d:
                    26:84:5c:da:5a:7d:84:c0:51:e2:8f:67:5b:bb:f1:
                    ca:33:67:e6:6f:74:8f:1d:b8:cc:95:a2:b1:d9:97:
                    40:f2:6a:78:79:ed:9e:9a:e7:98:bf:bf:bc:1b:19:
                    f1:5d:68:44:6c:be:16:19:04:e2:50:cb:a7:6a:6f:
                    bc:ef:ac:21:81:2b:b7:a8:e8:c7:ac:7f:69:3d:2c:
                    fe:1d:16:a8:15:73:47:2a:7c:d7:2d:5b:fa:03:44:
                    b5:40:03:c3:f3:cb:17:46:0f:d1:35:68:dd:98:3c:
                    d2:ca:3d:0c:79:bd:f5:02:53:19:75:22:14:64:9b:
                    29:1d:12:d0:48:53:5d:10:28:2c:6e:e3:ea:f2:9c:
                    a2:e8:88:47:1e:1f:89:63:9c:82:89:05:3a:7c:ea:
                    2c:15:ed:4d:3e:dc:7d:25:52:7c:a9:01:5e:a3:47:
                    d3:10:ff:8a:49:24:b8:d4:23:7b:59:a2:02:34:f9:
                    1e:99:14:a5:0e:16:c5:dd:af:88:11:1b:52:31:cf:
                    db:b8:3f:34:69:f8:bf:bc:ea:95:f0:b2:e9:34:75:
                    fc:13:de:50:93:f3:b6:ee:0f:36:1c:5b:c4:5f:7e:
                    37:e1:12:18:9b:90:41:ee:f0:fa:f8:33:81:40:5b:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:52:35:55:48:90:7C:6E:06:02:B2:3C:6E:0F:07:26:E5:6F:6A:9A
            X509v3 Authority Key Identifier:
                keyid:26:DD:82:D3:A5:AB:AB:06:FA:1F:09:23:F6:F7:0A:2E:D7:A0:89:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26DD82D3A5ABAB06FA1F0923F6F70A2ED7A08922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BCA1890E7CDFABF6DE6F1AD18E0FAA36280746C60EF2ECFAB99C62737B7AB984/0/3133382e302e31322e302f32322d3234203d3e2036353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:b7:b2:26:c6:af:3a:7a:2d:54:c6:fb:eb:4c:b9:7b:dd:cb:
         17:dc:31:1f:81:92:e7:6a:9a:f1:5d:4a:7e:a6:8e:21:92:23:
         8e:00:59:10:34:e3:a6:41:4a:9b:3f:4e:c6:05:ce:c7:7f:af:
         31:e6:5f:b8:77:be:66:63:49:38:9a:9c:86:fd:3e:d4:9d:e9:
         b4:53:33:34:ae:d5:50:d9:5b:47:97:34:7a:5c:35:70:b7:83:
         6f:72:53:1b:b8:9c:6f:e7:42:13:32:84:65:cd:ba:fc:b1:83:
         18:58:07:b4:cc:53:b7:d7:8a:72:b3:46:b4:02:6c:71:b8:31:
         18:d1:6b:ea:71:1e:58:e3:9b:48:9b:b6:a2:9a:89:b8:63:d9:
         8e:92:b2:81:af:a6:a6:74:ca:d0:58:2b:77:8b:88:87:a6:d7:
         c0:85:b3:28:cd:57:43:d1:5c:16:64:c2:c7:0f:0c:6d:6f:f3:
         9a:4d:2c:0f:24:b2:0e:a0:08:0a:89:99:3c:cb:38:75:e3:a6:
         71:3c:81:72:84:fc:f2:e0:9e:42:2a:13:f5:6c:e3:a1:0f:cd:
         4d:bb:68:30:8e:57:d3:42:e8:89:ba:4d:90:23:31:6f:60:8f:
         e0:10:df:45:13:76:21:19:2d:f2:0f:64:e4:ee:fd:17:68:e0:
         58:84:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:47 2026 by rpki-client