This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa
File:                     3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa (raw, json)
Hash identifier:          lTeWeWTGy8on0wcOv3CxNomp3yu/qPtQRf18YL3BhFw=
Subject key identifier:   59:23:4E:96:A0:88:62:19:7D:06:7B:1E:06:5A:AB:81:B3:29:C0:B5
Certificate issuer:       /CN=188358D72A27E615B114F9B1D346721CB266F6EA
Certificate serial:       0121EBDEDD005921B945FBF2873FCA1B6A800EDF
Authority key identifier: 18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa
Signing time:             Tue 06 Jan 2026 19:35:31 +0000
ROA not before:           Tue 06 Jan 2026 19:30:31 +0000
ROA not after:            Tue 05 Jan 2027 19:35:31 +0000
asID:                     263780
IP address blocks:        138.118.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:eb:de:dd:00:59:21:b9:45:fb:f2:87:3f:ca:1b:6a:80:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188358D72A27E615B114F9B1D346721CB266F6EA
        Validity
            Not Before: Jan  6 19:30:31 2026 GMT
            Not After : Jan  5 19:35:31 2027 GMT
        Subject: CN=59234E96A08862197D067B1E065AAB81B329C0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:ea:b9:ea:98:f7:dd:be:ea:7f:3c:49:3e:
                    ed:99:c3:18:40:d4:4f:cc:4e:a3:3b:d1:8b:f8:53:
                    06:22:49:98:6f:8f:fe:e8:21:0c:65:28:e0:8a:7c:
                    c7:75:ac:d0:bb:36:9b:40:44:9f:fe:20:a4:5f:32:
                    97:00:80:55:8e:1e:88:39:82:5b:5c:80:c3:82:71:
                    cf:87:d4:d9:ae:96:41:0f:b2:5c:c5:1e:db:2a:c4:
                    e4:45:c3:39:91:f6:1e:c2:a0:38:c2:3c:84:ef:7a:
                    cc:c1:67:e4:7e:d0:02:b5:f9:54:85:b9:b9:77:80:
                    97:46:a0:28:7f:18:0b:f0:c1:ea:0a:c0:c1:e7:e3:
                    58:21:e6:58:2c:dc:aa:16:d6:3e:c7:09:9a:23:a6:
                    22:a0:1c:4f:f5:ae:8c:ec:52:e1:a2:af:2b:ad:70:
                    f7:ca:a0:d1:cd:85:03:6c:e0:d3:1e:51:14:5e:ef:
                    64:20:d2:81:80:6f:42:0b:30:d6:55:3a:49:5a:41:
                    c8:80:1c:d9:90:52:ac:9b:3b:5e:d0:67:3c:d9:ba:
                    fb:34:d9:c3:c0:33:77:f2:96:b4:d7:84:cb:98:44:
                    fd:86:96:8f:42:31:fb:e1:1e:20:d6:79:6a:f9:b8:
                    f6:16:b0:8a:8b:73:77:c4:54:f2:8c:9d:01:66:46:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:4E:96:A0:88:62:19:7D:06:7B:1E:06:5A:AB:81:B3:29:C0:B5
            X509v3 Authority Key Identifier:
                keyid:18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:99:44:76:8e:98:11:5e:48:19:fb:75:2c:25:9b:ec:f6:
         aa:ec:b0:ab:c5:95:48:6b:38:ca:fe:df:c0:16:3a:f5:17:41:
         60:25:73:03:85:fe:dd:b2:07:7c:11:2e:29:98:5e:9d:02:1f:
         70:e2:0a:99:8a:0b:62:49:7a:46:3c:73:75:5b:a0:21:57:c1:
         4b:3d:ed:99:af:27:37:f2:28:72:6d:91:66:ec:1f:d6:76:a8:
         55:6c:45:ac:6d:13:f2:92:b1:3f:ec:c0:92:ae:e7:88:d1:75:
         06:3a:a9:17:2e:5e:af:d7:53:65:6b:96:04:7c:c9:b9:03:c7:
         f8:ff:9e:d5:6e:db:e1:28:60:68:6c:d0:41:a4:5e:35:21:a5:
         88:4b:57:52:50:7d:db:52:00:a7:6b:20:fc:6b:de:09:3e:60:
         65:be:59:ff:7f:8e:93:55:db:2d:7a:c5:40:a8:2d:15:b3:42:
         01:c3:14:0d:35:66:e9:f1:51:ae:d1:87:16:aa:42:14:48:b5:
         1d:29:4e:a9:76:83:71:18:e2:e6:59:22:d7:b9:7e:5c:02:71:
         4d:00:b9:6e:9c:d2:d7:8d:f1:05:0f:3c:25:c9:31:1e:66:d6:
         80:b6:c5:e0:30:7a:96:55:ff:45:bb:f5:df:34:34:bf:f4:c5:
         22:57:0f:a6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUASHr3t0AWSG5Rfvyhz/KG2qADt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4MzU4RDcyQTI3RTYxNUIxMTRGOUIxRDM0NjcyMUNC
MjY2RjZFQTAeFw0yNjAxMDYxOTMwMzFaFw0yNzAxMDUxOTM1MzFaMDMxMTAvBgNV
BAMTKDU5MjM0RTk2QTA4ODYyMTk3RDA2N0IxRTA2NUFBQjgxQjMyOUMwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Neq56pj33b7qfzxJPu2ZwxhA
1E/MTqM70Yv4UwYiSZhvj/7oIQxlKOCKfMd1rNC7NptARJ/+IKRfMpcAgFWOHog5
gltcgMOCcc+H1NmulkEPslzFHtsqxORFwzmR9h7CoDjCPITveszBZ+R+0AK1+VSF
ubl3gJdGoCh/GAvwweoKwMHn41gh5lgs3KoW1j7HCZojpiKgHE/1rozsUuGiryut
cPfKoNHNhQNs4NMeURRe72Qg0oGAb0ILMNZVOklaQciAHNmQUqybO17QZzzZuvs0
2cPAM3fylrTXhMuYRP2Glo9CMfvhHiDWeWr5uPYWsIqLc3fEVPKMnQFmRt4hAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWSNOlqCIYhl9BnseBlqrgbMpwLUwHwYDVR0j
BBgwFoAUGINY1yon5hWxFPmx00ZyHLJm9uowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkI4RTBBODAzNjg0Q0E2OTEzNkRGMDcwNjgzMDJGNjU4
MzkwQzkxRkE3NEFBM0YxQjI5OEJGNTg3NTdDQTc0LzAvMTg4MzU4RDcyQTI3RTYx
NUIxMTRGOUIxRDM0NjcyMUNCMjY2RjZFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODgzNThENzJBMjdFNjE1QjEx
NEY5QjFEMzQ2NzIxQ0IyNjZGNkVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJCOEUwQTgwMzY4NENBNjkxMzZERjA3MDY4MzAyRjY1ODM5MEM5MUZB
NzRBQTNGMUIyOThCRjU4NzU3Q0E3NC8wLzMxMzMzODJlMzEzMTM4MmUzMjMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
dtgwDQYJKoZIhvcNAQELBQADggEBAE7zmUR2jpgRXkgZ+3UsJZvs9qrssKvFlUhr
OMr+38AWOvUXQWAlcwOF/t2yB3wRLimYXp0CH3DiCpmKC2JJekY8c3VboCFXwUs9
7ZmvJzfyKHJtkWbsH9Z2qFVsRaxtE/KSsT/swJKu54jRdQY6qRcuXq/XU2VrlgR8
ybkDx/j/ntVu2+EoYGhs0EGkXjUhpYhLV1JQfdtSAKdrIPxr3gk+YGW+Wf9/jpNV
2y16xUCoLRWzQgHDFA01ZunxUa7RhxaqQhRItR0pTql2g3EY4uZZIte5flwCcU0A
uW6c0teN8QUPPCXJMR5m1oC2xeAwepZV/0W79d80NL/0xSJXD6Y=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:23 2026 by rpki-client