This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
File:                     3133382e33362e31362e302f32322d3232203d3e203437383639.roa (raw, json)
Hash identifier:          13TNtR/WGSGh8MJomJjPH9myBAD9uF0BUhwSbPjDR+o=
Subject key identifier:   D5:F3:AE:CA:E9:B2:F5:FC:B8:24:BC:0D:2B:E7:90:1D:9F:67:5E:44
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       617286CE1ABB87CFBFDFA285597CB7242A2417C7
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
Signing time:             Tue 06 Jan 2026 20:57:20 +0000
ROA not before:           Tue 06 Jan 2026 20:52:20 +0000
ROA not after:            Tue 05 Jan 2027 20:57:20 +0000
asID:                     47869
IP address blocks:        138.36.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:86:ce:1a:bb:87:cf:bf:df:a2:85:59:7c:b7:24:2a:24:17:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Jan  6 20:52:20 2026 GMT
            Not After : Jan  5 20:57:20 2027 GMT
        Subject: CN=D5F3AECAE9B2F5FCB824BC0D2BE7901D9F675E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:0c:72:0d:ed:48:19:ff:94:1a:d6:69:79:
                    9c:75:d5:7d:77:e2:13:37:94:76:f9:1c:c3:40:74:
                    7c:34:d7:94:ce:7b:f0:fd:f5:fd:ae:9d:1c:93:88:
                    f9:fd:12:88:45:48:37:1d:7a:2c:c3:8f:f9:90:3d:
                    7f:35:24:2b:ad:63:7c:b2:5b:fc:ed:53:be:2b:fc:
                    7c:33:ba:18:7b:10:fc:f9:0b:63:b3:ab:ad:3f:3a:
                    09:a0:21:90:f6:cd:41:97:51:b8:3f:0f:55:c5:0e:
                    65:2b:d7:98:35:da:dd:97:75:31:5d:42:c8:fb:cf:
                    eb:78:38:d5:d4:ac:c8:c9:10:99:37:6b:18:91:53:
                    e8:93:09:8b:96:ec:4c:98:6d:5d:37:26:35:ad:5e:
                    1e:5f:87:cd:49:43:b6:a4:49:4f:84:8a:73:58:e7:
                    e0:a5:95:bf:f6:68:aa:7a:f9:53:99:e9:a1:03:c4:
                    b0:76:aa:4d:5d:4e:b9:ff:a5:e3:7d:f9:39:2e:6c:
                    f1:3d:72:73:40:7f:9a:9f:4d:83:eb:b0:da:b1:99:
                    27:96:1f:2a:c8:f8:fd:6e:37:64:c1:61:9e:a0:c9:
                    fc:3e:b4:c6:fa:a1:0e:a1:c2:67:5e:36:f0:7f:66:
                    84:dc:b4:36:0b:a5:a8:14:70:c7:e9:b9:33:3d:a7:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:AE:CA:E9:B2:F5:FC:B8:24:BC:0D:2B:E7:90:1D:9F:67:5E:44
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:fe:ab:ef:e0:0d:09:2d:af:e8:e6:67:33:70:00:2a:fa:a4:
         f8:33:be:71:12:93:bf:fb:71:38:05:6c:64:de:0f:3a:7f:fb:
         96:af:d5:aa:c2:8e:9a:e8:0d:0b:6c:ef:e7:f7:fa:d2:cf:f9:
         e2:00:a9:e7:de:23:38:54:d8:8f:b6:83:6b:7f:a9:a1:89:71:
         5b:23:ea:5c:e9:5b:7a:45:64:e2:d2:43:cb:66:d7:92:b0:4f:
         7a:91:73:4e:6e:81:65:ec:c6:a3:d1:1e:42:87:53:4c:b7:6c:
         33:db:06:09:d2:90:99:c6:60:90:d6:4f:6c:be:e5:23:64:58:
         0c:6d:f3:bb:84:ee:28:70:d3:ae:33:93:43:4f:45:b1:63:58:
         97:b6:fb:fa:e1:4c:de:8c:73:a0:df:fe:9a:93:c1:cd:3d:59:
         33:78:63:e5:00:4a:71:b6:1a:1a:cc:c8:01:ac:eb:56:ff:43:
         00:78:51:03:c0:5a:ce:aa:42:e9:f4:9b:91:c8:40:89:68:fa:
         9c:1f:48:b3:68:93:02:91:04:e6:e0:8b:25:21:de:40:33:81:
         8c:d5:a0:ca:38:46:ee:87:f7:64:7a:4c:8e:db:2e:49:8e:21:
         1c:b7:84:bc:e0:cf:db:a2:35:72:01:71:a3:7a:4d:af:8b:05:
         f4:66:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:58:56 2026 by rpki-client