This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35382e302f32332d3233203d3e203532353130.roa
File:                     3133382e3231392e35382e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          Bq2EcC9pMpJNpMGbkc2UtoyhHawfXMfW4TDg50LDIe4=
Subject key identifier:   3C:A3:13:E1:DB:61:85:90:4D:D3:BA:4F:AA:06:1F:FA:DD:41:20:24
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       30CD7D445A6A33C1F679CB2132827A867AEDD7CE
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35382e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 06 Jan 2026 19:26:23 +0000
ROA not before:           Tue 06 Jan 2026 19:21:23 +0000
ROA not after:            Tue 05 Jan 2027 19:26:23 +0000
asID:                     52510
IP address blocks:        138.219.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cd:7d:44:5a:6a:33:c1:f6:79:cb:21:32:82:7a:86:7a:ed:d7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Jan  6 19:21:23 2026 GMT
            Not After : Jan  5 19:26:23 2027 GMT
        Subject: CN=3CA313E1DB6185904DD3BA4FAA061FFADD412024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:89:c3:1e:3d:68:d2:80:6e:ab:64:13:c3:
                    87:2a:a0:f8:a7:71:22:12:8f:d5:3c:8b:92:3a:8c:
                    56:24:38:0f:58:b5:f9:00:f4:07:25:d2:41:19:de:
                    8b:c9:2b:cb:8f:ea:c7:ba:87:1c:e3:3b:d8:63:3a:
                    d4:db:d1:e6:a9:3c:9a:5d:32:09:23:f0:62:0f:20:
                    33:42:22:fb:d2:13:e7:5e:a5:69:c5:0e:cb:6f:c6:
                    80:f4:b7:68:81:76:ba:2c:a0:21:79:36:68:82:fb:
                    8a:65:ea:50:70:bc:a9:3e:b7:3f:f8:37:c1:5d:4e:
                    f1:c5:c4:6c:34:9e:50:87:90:26:52:ac:12:98:a3:
                    62:d5:8e:fa:0b:fd:5d:fe:8c:8b:f3:58:c9:f1:34:
                    68:dc:d5:ac:1d:9d:13:03:4f:13:c6:ff:20:5a:04:
                    4b:bc:ea:17:77:4a:b6:e5:e5:43:dc:98:cf:48:cb:
                    a1:d4:bc:d2:e8:26:b4:03:a7:d0:55:ed:1e:64:87:
                    af:5a:75:cc:04:6a:fa:39:e4:8c:bc:bd:64:09:2a:
                    41:35:b5:be:91:41:87:a7:3e:9d:9b:8f:09:1b:ba:
                    77:9f:d7:ce:c0:4d:67:eb:10:6f:aa:aa:d2:12:2d:
                    37:b8:98:d1:cb:e9:11:cb:46:74:64:04:38:93:60:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:13:E1:DB:61:85:90:4D:D3:BA:4F:AA:06:1F:FA:DD:41:20:24
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35382e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:92:2a:8b:6a:d1:62:b0:89:fe:8c:38:db:b3:88:31:5b:
         1c:0a:9b:dd:34:1f:54:cc:97:20:26:c0:79:4a:6f:1f:cc:25:
         3a:1c:96:cf:cf:97:e8:2e:d5:51:36:8f:02:b5:60:60:e9:37:
         4a:b2:89:34:dd:ce:c4:fb:e2:f7:7f:d8:40:50:a4:11:10:9e:
         3e:b8:fc:a0:d9:96:8f:d6:c2:92:a0:62:a9:5e:8b:6b:97:45:
         f2:24:f7:af:3a:86:bb:dd:52:11:93:61:1e:c4:56:bd:b0:44:
         f1:ad:2b:0e:cd:24:13:9e:9f:f4:9b:db:72:dd:53:41:30:c5:
         fa:40:6e:f5:93:29:f7:1b:7e:8f:ec:06:52:38:ca:83:7f:bc:
         b4:0b:97:08:7c:a4:14:34:b2:ec:fc:80:58:99:b4:e5:b2:99:
         30:19:51:b0:17:3e:f4:6f:04:7f:5e:7c:78:5f:dc:3f:83:11:
         29:8c:60:f7:53:6c:6b:fb:95:61:f7:7a:01:df:05:fc:18:14:
         b4:58:25:c4:6b:e4:c6:6f:c9:bc:51:53:3c:dd:98:44:a7:be:
         0d:20:69:c9:72:b7:f0:73:ce:18:cf:47:74:d8:08:aa:03:ee:
         2f:39:18:0a:76:7b:82:a3:d5:c8:dc:13:c0:f7:28:12:0f:77:
         8b:a2:84:c1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMM19RFpqM8H2ecshMoJ6hnrt184wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNjAxMDYxOTIxMjNaFw0yNzAxMDUxOTI2MjNaMDMxMTAvBgNV
BAMTKDNDQTMxM0UxREI2MTg1OTA0REQzQkE0RkFBMDYxRkZBREQ0MTIwMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VonDHj1o0oBuq2QTw4cqoPin
cSISj9U8i5I6jFYkOA9YtfkA9Acl0kEZ3ovJK8uP6se6hxzjO9hjOtTb0eapPJpd
Mgkj8GIPIDNCIvvSE+depWnFDstvxoD0t2iBdrosoCF5NmiC+4pl6lBwvKk+tz/4
N8FdTvHFxGw0nlCHkCZSrBKYo2LVjvoL/V3+jIvzWMnxNGjc1awdnRMDTxPG/yBa
BEu86hd3Srbl5UPcmM9Iy6HUvNLoJrQDp9BV7R5kh69adcwEavo55Iy8vWQJKkE1
tb6RQYenPp2bjwkbunef187ATWfrEG+qqtISLTe4mNHL6RHLRnRkBDiTYD+1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPKMT4dthhZBN07pPqgYf+t1BICQwHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzMzODJlMzIzMTM5MmUzNTM4MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM1MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrbOjAN
BgkqhkiG9w0BAQsFAAOCAQEAYuqSKotq0WKwif6MONuziDFbHAqb3TQfVMyXICbA
eUpvH8wlOhyWz8+X6C7VUTaPArVgYOk3SrKJNN3OxPvi93/YQFCkERCePrj8oNmW
j9bCkqBiqV6La5dF8iT3rzqGu91SEZNhHsRWvbBE8a0rDs0kE56f9Jvbct1TQTDF
+kBu9ZMp9xt+j+wGUjjKg3+8tAuXCHykFDSy7PyAWJm05bKZMBlRsBc+9G8Ef158
eF/cP4MRKYxg91Nsa/uVYfd6Ad8F/BgUtFglxGvkxm/JvFFTPN2YRKe+DSBpyXK3
8HPOGM9HdNgIqgPuLzkYCnZ7gqPVyNwTwPcoEg93i6KEwQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:06 2026 by rpki-client