This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e39392e302e302f32322d3234203d3e203236363137.roa
File:                     3133382e39392e302e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          16za3/CQ/lq6CFjLVY5Xw/NliR4BCaNtpOx32dVz6/g=
Subject key identifier:   BA:16:24:EE:54:7F:BE:4E:9F:5E:10:DB:2C:C6:AD:4E:F1:2F:B1:70
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       6587A1599EABF47D300F286E01F17DFCB43F715B
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e39392e302e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 06 Jan 2026 19:40:24 +0000
ROA not before:           Tue 06 Jan 2026 19:35:24 +0000
ROA not after:            Tue 05 Jan 2027 19:40:24 +0000
asID:                     26617
IP address blocks:        138.99.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:87:a1:59:9e:ab:f4:7d:30:0f:28:6e:01:f1:7d:fc:b4:3f:71:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Jan  6 19:35:24 2026 GMT
            Not After : Jan  5 19:40:24 2027 GMT
        Subject: CN=BA1624EE547FBE4E9F5E10DB2CC6AD4EF12FB170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:b2:d0:0d:c3:07:36:9f:53:0e:4d:9c:b5:
                    9d:20:5e:4e:ae:94:48:8a:f0:27:d4:39:27:1b:67:
                    22:70:35:ac:e7:d8:f6:9d:e4:74:51:f7:90:24:bc:
                    d8:b6:97:bf:ad:09:7e:be:34:ab:7e:bb:ca:76:7f:
                    96:55:bf:a2:91:c4:a3:d8:9e:66:6b:4e:80:51:01:
                    85:e1:5f:b7:88:fb:fc:39:69:94:87:de:ab:b8:79:
                    99:69:6c:1c:8d:67:1a:9e:62:4a:64:b3:61:18:97:
                    88:0b:25:f8:60:7c:be:08:f8:31:09:a7:5b:08:07:
                    0f:a9:f5:95:12:65:be:ab:3f:36:c3:4b:23:cf:9e:
                    0a:d5:f1:c4:99:77:06:c4:15:dd:3d:15:b2:28:ca:
                    f7:f6:a6:40:1b:1c:ad:0a:ac:0d:54:98:ec:85:7b:
                    5d:e7:28:c5:09:f1:96:79:69:a9:79:7d:32:78:02:
                    27:08:78:4f:5a:f0:a6:f9:61:50:84:ea:25:56:2f:
                    83:b4:a1:71:1a:68:ff:e6:62:e0:a0:52:ad:9f:2c:
                    1a:82:46:21:54:02:7a:4a:60:97:93:ca:d8:45:6e:
                    36:8a:76:68:66:fd:b6:34:91:cf:85:7b:8d:84:88:
                    62:c0:9e:df:db:27:35:89:41:5e:9a:58:15:58:10:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:24:EE:54:7F:BE:4E:9F:5E:10:DB:2C:C6:AD:4E:F1:2F:B1:70
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e39392e302e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:5c:22:42:96:02:86:6a:70:46:f3:be:a8:57:20:06:f4:
         1e:0c:a8:56:b0:32:fd:f9:d7:6c:14:55:20:1b:6c:67:f1:79:
         b3:af:41:ff:bb:2c:3d:78:b4:3f:03:03:f0:01:0a:1d:87:2a:
         b9:e2:f0:9b:b9:18:54:89:b6:cb:b2:5d:b3:b8:3f:34:94:e5:
         e9:27:29:ad:ce:90:6e:ec:1d:90:9a:02:6d:d0:aa:e6:f5:c1:
         44:d6:b5:7a:10:b1:31:21:d2:0a:a3:11:ab:ea:e4:6c:a3:2b:
         78:5c:56:f5:54:37:37:ca:ff:f5:92:0b:9c:f6:da:f0:0b:54:
         70:b5:2e:85:2a:ab:3d:2f:b5:47:2b:16:cc:e1:94:f0:71:02:
         89:ed:18:c5:11:98:d6:8e:b9:e3:ec:a8:42:5e:14:2c:24:80:
         71:5c:71:80:0a:e0:e9:78:5c:2d:81:a8:c8:ce:f4:26:3a:f6:
         52:8c:e5:3d:97:7b:38:84:47:6f:d9:1c:aa:35:7c:92:f9:b7:
         8a:1b:ee:13:49:a9:f1:9d:22:3b:a1:b5:9e:a7:5a:22:fd:32:
         de:9e:ff:24:a7:72:51:48:be:46:09:16:79:25:10:b0:2a:07:
         72:de:ff:b1:f4:af:4c:98:07:12:48:c3:b9:82:d0:7e:71:20:
         8e:49:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:16 2026 by rpki-client