This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa
File:                     3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa (raw, json)
Hash identifier:          MJTXhQPF+ltrid7XNIM1+5GrZafV0kw1vFmXoK9y6ig=
Subject key identifier:   D9:80:6D:D5:CD:54:BB:59:44:17:D7:06:D8:78:8E:A3:E6:2F:D4:2B
Certificate issuer:       /CN=6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443
Certificate serial:       22DBE5B1982A23216606EB4210E9E6DE2B50A9D8
Authority key identifier: 6A:87:DF:E4:B3:8F:32:D9:EB:47:89:BB:7B:E2:DA:27:A3:98:84:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa
Signing time:             Tue 06 Jan 2026 20:58:39 +0000
ROA not before:           Tue 06 Jan 2026 20:53:39 +0000
ROA not after:            Tue 05 Jan 2027 20:58:39 +0000
asID:                     270110
IP address blocks:        189.85.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:db:e5:b1:98:2a:23:21:66:06:eb:42:10:e9:e6:de:2b:50:a9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443
        Validity
            Not Before: Jan  6 20:53:39 2026 GMT
            Not After : Jan  5 20:58:39 2027 GMT
        Subject: CN=D9806DD5CD54BB594417D706D8788EA3E62FD42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:25:91:da:47:36:cf:a7:63:82:e4:70:cb:
                    4a:60:2f:d3:33:89:80:7c:08:1e:ad:5a:a8:63:18:
                    7f:db:ab:38:05:db:90:cd:20:5f:79:33:80:40:c7:
                    a5:41:c7:c1:55:fd:3a:ef:0b:44:2d:8c:4d:73:c9:
                    54:77:b4:c7:95:64:ef:b4:2f:7c:8e:9f:c2:9b:f9:
                    c9:3c:86:79:8d:f4:dc:94:d8:03:25:4d:68:60:85:
                    c8:de:66:af:0f:1f:15:d9:7d:a1:29:21:7f:12:40:
                    e7:aa:bc:0a:09:12:46:ab:f6:ae:ef:f2:d8:44:8e:
                    71:a8:7f:b7:57:89:64:d6:8a:14:37:a6:8e:72:b5:
                    4a:b9:dd:70:26:0d:7d:77:5e:b3:19:c0:cc:54:44:
                    76:d4:a2:11:88:0c:6d:05:de:74:ea:92:4a:97:9c:
                    a8:e1:e1:6f:d5:0c:a7:11:9f:9a:88:38:bc:95:d5:
                    6d:4b:67:48:64:e5:97:22:21:8e:25:a6:cb:2c:2e:
                    67:0b:16:be:2e:6d:eb:e1:4a:41:c5:b8:87:5b:fc:
                    fc:56:0c:4a:0d:34:6f:2b:1b:fd:b0:bc:b2:87:6a:
                    76:19:42:b2:18:f6:aa:23:91:a9:4e:f9:0d:6a:9a:
                    00:0f:f3:d3:37:86:6c:39:9e:43:a6:f7:d2:42:12:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:6D:D5:CD:54:BB:59:44:17:D7:06:D8:78:8E:A3:E6:2F:D4:2B
            X509v3 Authority Key Identifier:
                keyid:6A:87:DF:E4:B3:8F:32:D9:EB:47:89:BB:7B:E2:DA:27:A3:98:84:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A87DFE4B38F32D9EB4789BB7BE2DA27A3988443.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1229D43AEF24193696DD8A311BE1B164003B32F390D8584D1A9384B245BE665/0/3138392e38352e3130302e302f32322d3234203d3e20323730313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:b3:eb:06:f5:84:b7:af:a9:22:56:3f:ee:9b:0c:c6:42:
         4c:a3:04:f0:6d:21:f2:dc:4f:0b:80:1f:32:fc:a5:f6:28:dc:
         6a:f1:f6:c4:64:0d:cf:2f:a1:68:c2:4b:ef:6d:86:1e:e1:e1:
         56:ec:40:ae:a6:e8:e7:a4:19:51:bf:76:b2:38:e8:30:52:ac:
         ad:84:6a:0c:fc:0d:2e:58:6b:8d:f7:f7:f8:ef:a9:73:0c:da:
         0e:a6:8a:e3:d2:d2:74:44:22:c9:94:46:d6:af:5c:55:7b:a9:
         50:fd:da:16:ee:6a:6c:29:8d:c8:90:3b:43:5d:90:5b:cd:c9:
         28:1b:85:c8:2a:24:58:57:16:64:88:60:3c:8f:94:e8:07:02:
         af:1f:3e:ae:04:91:4b:91:98:6a:50:0e:f3:fd:04:4b:4d:3a:
         e6:74:36:00:0d:90:90:57:fe:55:25:0c:7d:64:97:ac:3f:36:
         45:b6:5d:66:91:fa:db:aa:22:30:9c:4e:9f:6c:4f:8d:aa:b8:
         3a:bc:6b:44:07:94:26:7c:ac:f8:15:28:83:24:d1:c8:51:68:
         4c:6a:eb:f5:8a:2f:10:aa:1f:17:64:97:b7:28:a6:1d:bd:e9:
         3e:2e:cd:5e:0b:30:57:63:d6:83:98:d0:3a:a3:b8:e3:0a:1e:
         4d:ea:30:70
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUItvlsZgqIyFmButCEOnm3itQqdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4N0RGRTRCMzhGMzJEOUVCNDc4OUJCN0JFMkRBMjdB
Mzk4ODQ0MzAeFw0yNjAxMDYyMDUzMzlaFw0yNzAxMDUyMDU4MzlaMDMxMTAvBgNV
BAMTKEQ5ODA2REQ1Q0Q1NEJCNTk0NDE3RDcwNkQ4Nzg4RUEzRTYyRkQ0MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8iWR2kc2z6djguRwy0pgL9Mz
iYB8CB6tWqhjGH/bqzgF25DNIF95M4BAx6VBx8FV/TrvC0QtjE1zyVR3tMeVZO+0
L3yOn8Kb+ck8hnmN9NyU2AMlTWhghcjeZq8PHxXZfaEpIX8SQOeqvAoJEkar9q7v
8thEjnGof7dXiWTWihQ3po5ytUq53XAmDX13XrMZwMxURHbUohGIDG0F3nTqkkqX
nKjh4W/VDKcRn5qIOLyV1W1LZ0hk5ZciIY4lpsssLmcLFr4ubevhSkHFuIdb/PxW
DEoNNG8rG/2wvLKHanYZQrIY9qojkalO+Q1qmgAP89M3hmw5nkOm99JCEta3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2YBt1c1Uu1lEF9cG2HiOo+Yv1CswHwYDVR0j
BBgwFoAUaoff5LOPMtnrR4m7e+LaJ6OYhEMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTIyOUQ0M0FFRjI0MTkzNjk2REQ4QTMxMUJFMUIxNjQw
MDNCMzJGMzkwRDg1ODREMUE5Mzg0QjI0NUJFNjY1LzAvNkE4N0RGRTRCMzhGMzJE
OUVCNDc4OUJCN0JFMkRBMjdBMzk4ODQ0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QTg3REZFNEIzOEYzMkQ5RUI0
Nzg5QkI3QkUyREEyN0EzOTg4NDQzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDEyMjlENDNBRUYyNDE5MzY5NkREOEEzMTFCRTFCMTY0MDAzQjMyRjM5
MEQ4NTg0RDFBOTM4NEIyNDVCRTY2NS8wLzMxMzgzOTJlMzgzNTJlMzEzMDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzMTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvVVk
MA0GCSqGSIb3DQEBCwUAA4IBAQACWrPrBvWEt6+pIlY/7psMxkJMowTwbSHy3E8L
gB8y/KX2KNxq8fbEZA3PL6FowkvvbYYe4eFW7ECupujnpBlRv3ayOOgwUqythGoM
/A0uWGuN9/f476lzDNoOporj0tJ0RCLJlEbWr1xVe6lQ/doW7mpsKY3IkDtDXZBb
zckoG4XIKiRYVxZkiGA8j5ToBwKvHz6uBJFLkZhqUA7z/QRLTTrmdDYADZCQV/5V
JQx9ZJesPzZFtl1mkfrbqiIwnE6fbE+Nqrg6vGtEB5QmfKz4FSiDJNHIUWhMauv1
ii8Qqh8XZJe3KKYdvek+Ls1eCzBXY9aDmNA6o7jjCh5N6jBw
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:31 2026 by rpki-client