This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa
File:                     3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa (raw, json)
Hash identifier:          IErpjoIb2RDgLmJv+fIpMBMIMknHA3rUjEH5Nq/9lFo=
Subject key identifier:   12:A0:70:A5:37:65:3A:5D:3C:43:19:9A:95:9D:82:EF:F7:F2:90:D0
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       33E903DAB51377368B3057C92EE02E453C5A775F
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa
Signing time:             Tue 06 Jan 2026 19:40:32 +0000
ROA not before:           Tue 06 Jan 2026 19:35:32 +0000
ROA not after:            Tue 05 Jan 2027 19:40:32 +0000
asID:                     263795
IP address blocks:        138.204.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e9:03:da:b5:13:77:36:8b:30:57:c9:2e:e0:2e:45:3c:5a:77:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Jan  6 19:35:32 2026 GMT
            Not After : Jan  5 19:40:32 2027 GMT
        Subject: CN=12A070A537653A5D3C43199A959D82EFF7F290D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:44:ec:39:9e:74:30:86:e4:59:38:2d:fe:
                    a5:24:48:f6:58:88:c1:88:ec:bd:c2:5c:78:ac:3c:
                    72:0b:9b:57:bc:66:75:5c:e7:d7:8c:cd:96:5d:ea:
                    82:9b:53:9d:ee:64:21:85:86:46:d0:ff:b9:bf:a2:
                    10:a7:77:e0:46:16:ff:9b:13:cc:b2:01:e0:29:f2:
                    84:88:01:ce:b1:20:6e:e6:53:e3:d5:56:9d:a3:95:
                    c9:2a:88:d0:28:16:89:e8:50:1f:da:aa:37:85:99:
                    ad:6b:fe:5d:52:b7:7d:16:12:0e:0e:3f:de:07:a1:
                    0d:a6:3c:d8:58:29:f5:c8:41:17:5f:9b:6a:b8:f5:
                    0b:15:f8:61:61:88:a8:08:83:39:a9:99:ed:42:bc:
                    16:60:8c:60:e0:d8:10:2e:08:78:1c:29:c7:18:33:
                    90:94:8f:d8:13:77:59:bd:b4:32:04:e5:d6:1c:ec:
                    62:bb:73:b6:e3:cb:5c:8f:70:a3:27:c4:23:74:47:
                    62:d9:b6:9f:44:79:b0:ee:b5:50:99:9d:1c:51:b4:
                    cd:a3:6d:9c:91:fb:0b:0a:f3:8d:11:f0:71:6f:98:
                    1e:f7:b5:f0:e7:33:05:14:c5:bd:8f:49:2d:78:94:
                    47:e0:3e:16:65:b2:08:6c:c8:d3:ef:64:f7:8f:7c:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:70:A5:37:65:3A:5D:3C:43:19:9A:95:9D:82:EF:F7:F2:90:D0
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:87:2c:24:3e:3f:6f:86:65:7b:89:0c:89:86:91:f0:b3:c5:
         6f:f1:8d:6e:a9:27:4d:d0:ae:11:c3:62:73:d8:18:b0:3e:cc:
         78:35:e3:4f:de:4e:76:5e:c5:75:17:d0:73:fa:c3:a2:55:9b:
         7d:b3:4b:3d:b3:ef:92:9d:8a:2d:bd:c9:5f:7a:8d:42:b5:2e:
         d1:0f:1b:08:ba:b2:25:7d:0c:16:97:33:47:a6:f7:39:50:34:
         38:76:a2:7e:34:7f:88:ab:1b:44:c3:5a:c4:a0:84:6f:96:22:
         ec:72:01:ca:06:9c:fb:27:79:fc:08:b9:ac:89:2e:75:61:60:
         2d:77:90:c1:eb:d7:e5:4a:d5:9d:ce:ac:ed:c4:20:f7:b5:80:
         c5:8d:9d:4a:f9:67:77:13:f1:61:84:f8:bd:ca:d8:43:b6:6f:
         e3:b5:5c:cb:8a:b0:ea:49:b7:43:14:7c:94:1f:46:e9:fa:58:
         95:1a:58:b4:a3:c8:d7:ad:c7:a7:97:cb:b8:f2:86:05:9f:f7:
         4e:3c:2d:08:f3:27:a0:ee:97:90:19:c8:dc:00:e9:90:c8:ba:
         b9:fe:d9:67:87:2b:17:e3:85:17:e5:63:17:53:67:dc:45:09:
         06:5d:ad:8f:25:be:7e:88:00:e6:d1:76:3f:18:a9:5e:70:fb:
         17:1e:40:9a
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUM+kD2rUTdzaLMFfJLuAuRTxad18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlBQkYyQkY3Qzc0ODY1Qjc1OTA2NEJCQjBEQTQ5RUFF
MENDMzY0NzAeFw0yNjAxMDYxOTM1MzJaFw0yNzAxMDUxOTQwMzJaMDMxMTAvBgNV
BAMTKDEyQTA3MEE1Mzc2NTNBNUQzQzQzMTk5QTk1OUQ4MkVGRjdGMjkwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzUTsOZ50MIbkWTgt/qUkSPZY
iMGI7L3CXHisPHILm1e8ZnVc59eMzZZd6oKbU53uZCGFhkbQ/7m/ohCnd+BGFv+b
E8yyAeAp8oSIAc6xIG7mU+PVVp2jlckqiNAoFonoUB/aqjeFma1r/l1St30WEg4O
P94HoQ2mPNhYKfXIQRdfm2q49QsV+GFhiKgIgzmpme1CvBZgjGDg2BAuCHgcKccY
M5CUj9gTd1m9tDIE5dYc7GK7c7bjy1yPcKMnxCN0R2LZtp9EebDutVCZnRxRtM2j
bZyR+wsK840R8HFvmB73tfDnMwUUxb2PSS14lEfgPhZlsghsyNPvZPePfAf9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUEqBwpTdlOl08QxmalZ2C7/fykNAwHwYDVR0j
BBgwFoAUWavyv3x0hlt1kGS7sNpJ6uDMNkcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMzEwMTczRDkwMjkyMzREQ0ExNTZFN0ExNjE4M0M5MDhE
N0QzNkEyMTEyMTg1M0VBOTQ0QkVDQUNDM0I1Nzk0LzAvNTlBQkYyQkY3Qzc0ODY1
Qjc1OTA2NEJCQjBEQTQ5RUFFMENDMzY0Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUFCRjJCRjdDNzQ4NjVCNzU5
MDY0QkJCMERBNDlFQUUwQ0MzNjQ3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzMxMDE3M0Q5MDI5MjM0RENBMTU2RTdBMTYxODNDOTA4RDdEMzZBMjEx
MjE4NTNFQTk0NEJFQ0FDQzNCNTc5NC8wLzMxMzMzODJlMzIzMDM0MmUzMTMxMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM5MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
zG4wDQYJKoZIhvcNAQELBQADggEBAIiHLCQ+P2+GZXuJDImGkfCzxW/xjW6pJ03Q
rhHDYnPYGLA+zHg140/eTnZexXUX0HP6w6JVm32zSz2z75Kdii29yV96jUK1LtEP
Gwi6siV9DBaXM0em9zlQNDh2on40f4irG0TDWsSghG+WIuxyAcoGnPsnefwIuayJ
LnVhYC13kMHr1+VK1Z3OrO3EIPe1gMWNnUr5Z3cT8WGE+L3K2EO2b+O1XMuKsOpJ
t0MUfJQfRun6WJUaWLSjyNetx6eXy7jyhgWf9048LQjzJ6Dul5AZyNwA6ZDIurn+
2WeHKxfjhRflYxdTZ9xFCQZdrY8lvn6IAObRdj8YqV5w+xceQJo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:58 2026 by rpki-client