This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa
File:                     3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa (raw, json)
Hash identifier:          2n9g/+umQ0ceVwKedkqkTEDTwbMQumZxF/S7gkuUaF4=
Subject key identifier:   19:93:53:61:54:24:FD:1A:71:8C:12:AA:AB:75:A6:00:F5:59:DA:DE
Certificate issuer:       /CN=6D2FA94F5131FEBB344C1140590E1E658A49A2D3
Certificate serial:       30CF59FE8D8709500386E2DA42633E83339EBA0F
Authority key identifier: 6D:2F:A9:4F:51:31:FE:BB:34:4C:11:40:59:0E:1E:65:8A:49:A2:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa
Signing time:             Tue 06 Jan 2026 20:58:06 +0000
ROA not before:           Tue 06 Jan 2026 20:53:06 +0000
ROA not after:            Tue 05 Jan 2027 20:58:06 +0000
asID:                     263781
IP address blocks:        138.118.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cf:59:fe:8d:87:09:50:03:86:e2:da:42:63:3e:83:33:9e:ba:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2FA94F5131FEBB344C1140590E1E658A49A2D3
        Validity
            Not Before: Jan  6 20:53:06 2026 GMT
            Not After : Jan  5 20:58:06 2027 GMT
        Subject: CN=199353615424FD1A718C12AAAB75A600F559DADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:ce:a2:71:9e:e9:d0:3f:b1:f6:44:fa:96:
                    45:6d:18:25:c0:0d:85:b8:2b:45:4c:34:46:e3:f9:
                    72:07:87:76:5d:df:8c:8d:38:e3:2b:b6:38:3c:c7:
                    0b:9e:eb:1f:f9:83:9c:d1:a5:a3:15:c8:30:53:ed:
                    f9:48:f8:98:48:cf:8f:e5:7f:ae:ac:80:3e:53:ea:
                    04:3b:7c:57:b9:1c:27:be:7c:25:97:89:97:bf:eb:
                    3e:26:d8:a8:1c:58:c0:16:d2:99:9c:34:df:db:fe:
                    eb:fe:bf:ee:75:34:03:46:9f:b9:1c:4e:70:be:de:
                    21:ca:c0:29:b5:da:fb:70:42:ea:49:cd:89:e8:c7:
                    7e:62:e6:8d:81:9e:45:74:3e:4c:92:8a:7a:5e:37:
                    61:6c:d7:26:1c:01:08:ce:5c:f5:f0:f8:23:ba:f5:
                    40:fb:d7:d5:37:0a:37:b5:62:b4:4e:94:c8:11:19:
                    a7:81:73:76:63:14:f4:1a:82:2d:2a:2f:9f:4a:35:
                    ca:55:56:62:f3:fd:bf:84:4b:29:d2:28:0a:fd:56:
                    9f:f2:c6:e7:c1:f3:a1:ea:90:ff:de:04:9a:17:30:
                    22:81:f6:9a:a7:3c:1a:41:df:7d:02:e6:89:8d:49:
                    5c:70:d0:8f:94:5f:76:41:91:ca:b9:a2:92:25:b1:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:93:53:61:54:24:FD:1A:71:8C:12:AA:AB:75:A6:00:F5:59:DA:DE
            X509v3 Authority Key Identifier:
                keyid:6D:2F:A9:4F:51:31:FE:BB:34:4C:11:40:59:0E:1E:65:8A:49:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2FA94F5131FEBB344C1140590E1E658A49A2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D04D926BC8F78DA6BDEB901CE50235E9F7FDB6AD4DF42E9DA2F3C4994581CC5E/0/3133382e3131382e3130342e302f32322d3234203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:0d:88:51:e1:e8:01:2f:b1:62:a8:c3:3d:9a:b2:8a:ba:
         34:a5:39:e5:10:4f:f2:d8:f4:e7:e6:91:39:a9:1a:ba:da:d8:
         e1:fb:e1:3e:d5:2d:d2:09:37:07:08:24:0e:04:ab:f6:b4:11:
         d8:08:e2:dc:09:ce:e4:7a:4c:38:45:2d:94:58:7d:49:63:0b:
         4e:4b:12:37:68:5c:3a:ae:37:c1:a0:aa:6a:5f:7b:3d:ee:20:
         c7:cc:fa:ff:89:99:e4:78:03:35:b7:f7:28:89:32:95:85:dc:
         65:c8:61:1d:b4:c0:5f:63:9d:3e:85:50:38:17:84:3f:38:15:
         88:9b:d8:cf:61:2f:40:b2:e6:66:49:4b:54:a1:d6:2a:90:a2:
         f4:b8:17:e2:3e:48:f3:51:4c:50:8e:ec:0d:d4:6d:f6:d8:6d:
         cf:cb:45:e9:ac:76:86:b4:35:82:8c:e1:ab:51:0c:6f:cf:95:
         86:e6:3d:92:9b:fd:42:33:b4:b3:af:fe:52:91:5a:18:10:03:
         3c:d5:ad:1e:f8:dc:8a:2c:e1:16:53:56:50:b2:85:09:41:6c:
         d8:0d:5e:c2:de:09:03:fc:1f:a6:50:49:1a:f6:12:73:2c:c8:
         90:0f:45:3e:ed:0d:97:a4:cc:95:b5:ab:09:01:37:59:fe:6c:
         bb:fd:54:69
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMM9Z/o2HCVADhuLaQmM+gzOeug8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQyRkE5NEY1MTMxRkVCQjM0NEMxMTQwNTkwRTFFNjU4
QTQ5QTJEMzAeFw0yNjAxMDYyMDUzMDZaFw0yNzAxMDUyMDU4MDZaMDMxMTAvBgNV
BAMTKDE5OTM1MzYxNTQyNEZEMUE3MThDMTJBQUFCNzVBNjAwRjU1OURBREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2s6icZ7p0D+x9kT6lkVtGCXA
DYW4K0VMNEbj+XIHh3Zd34yNOOMrtjg8xwue6x/5g5zRpaMVyDBT7flI+JhIz4/l
f66sgD5T6gQ7fFe5HCe+fCWXiZe/6z4m2KgcWMAW0pmcNN/b/uv+v+51NANGn7kc
TnC+3iHKwCm12vtwQupJzYnox35i5o2BnkV0PkySinpeN2Fs1yYcAQjOXPXw+CO6
9UD719U3Cje1YrROlMgRGaeBc3ZjFPQagi0qL59KNcpVVmLz/b+ESynSKAr9Vp/y
xufB86HqkP/eBJoXMCKB9pqnPBpB330C5omNSVxw0I+UX3ZBkcq5opIlsTCPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUGZNTYVQk/RpxjBKqq3WmAPVZ2t4wHwYDVR0j
BBgwFoAUbS+pT1Ex/rs0TBFAWQ4eZYpJotMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDREOTI2QkM4Rjc4REE2QkRFQjkwMUNFNTAyMzVFOUY3
RkRCNkFENERGNDJFOURBMkYzQzQ5OTQ1ODFDQzVFLzAvNkQyRkE5NEY1MTMxRkVC
QjM0NEMxMTQwNTkwRTFFNjU4QTQ5QTJEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDJGQTk0RjUxMzFGRUJCMzQ0
QzExNDA1OTBFMUU2NThBNDlBMkQzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA0RDkyNkJDOEY3OERBNkJERUI5MDFDRTUwMjM1RTlGN0ZEQjZBRDRE
RjQyRTlEQTJGM0M0OTk0NTgxQ0M1RS8wLzMxMzMzODJlMzEzMTM4MmUzMTMwMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
dmgwDQYJKoZIhvcNAQELBQADggEBAEuQDYhR4egBL7FiqMM9mrKKujSlOeUQT/LY
9OfmkTmpGrra2OH74T7VLdIJNwcIJA4Eq/a0EdgI4twJzuR6TDhFLZRYfUljC05L
EjdoXDquN8Ggqmpfez3uIMfM+v+JmeR4AzW39yiJMpWF3GXIYR20wF9jnT6FUDgX
hD84FYib2M9hL0Cy5mZJS1Sh1iqQovS4F+I+SPNRTFCO7A3UbfbYbc/LRemsdoa0
NYKM4atRDG/PlYbmPZKb/UIztLOv/lKRWhgQAzzVrR743Ios4RZTVlCyhQlBbNgN
XsLeCQP8H6ZQSRr2EnMsyJAPRT7tDZekzJW1qwkBN1n+bLv9VGk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:41 2026 by rpki-client