This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3235203d3e20323633373339.roa
File:                     3133382e35392e302e302f32322d3235203d3e20323633373339.roa (raw, json)
Hash identifier:          4/OJMPYjv7HNq3awXkSlA41WJE161WCAkckBvBgUAzo=
Subject key identifier:   C8:30:A5:8B:A7:E9:F7:96:DA:06:CE:96:E4:CE:2D:F1:CC:5E:CC:40
Certificate issuer:       /CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
Certificate serial:       5C19C590280E0A886415212EB0D29D011785876E
Authority key identifier: 75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3235203d3e20323633373339.roa
Signing time:             Mon 29 Dec 2025 13:56:43 +0000
ROA not before:           Mon 29 Dec 2025 13:51:43 +0000
ROA not after:            Mon 28 Dec 2026 13:56:43 +0000
asID:                     263739
IP address blocks:        138.59.0.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:19:c5:90:28:0e:0a:88:64:15:21:2e:b0:d2:9d:01:17:85:87:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
        Validity
            Not Before: Dec 29 13:51:43 2025 GMT
            Not After : Dec 28 13:56:43 2026 GMT
        Subject: CN=C830A58BA7E9F796DA06CE96E4CE2DF1CC5ECC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:a6:d1:a5:db:9c:c7:07:7e:4a:89:96:91:
                    ee:65:13:ce:05:e4:26:11:37:bd:34:e5:e7:e9:0c:
                    50:f6:0d:55:01:f0:ad:96:53:55:fa:4d:3f:8f:5d:
                    c7:54:a7:4e:11:1d:f1:c7:d4:f7:5e:06:cf:6f:4d:
                    2b:56:64:14:13:03:56:33:c8:61:8b:ef:c3:a6:bb:
                    0d:71:a2:06:55:4a:6b:62:e2:5a:8a:58:41:df:16:
                    e7:30:e7:49:bd:91:a0:30:77:2f:cd:a3:06:98:56:
                    ee:4d:88:40:ea:d6:02:36:6f:75:e9:76:1a:a6:49:
                    2f:80:37:70:e5:d1:d8:44:cb:d3:ad:b6:2e:27:f5:
                    40:ca:0b:d2:c0:08:8f:62:db:db:c7:0d:16:77:41:
                    be:e7:65:c1:f9:8d:91:d3:c9:8f:46:47:de:03:f9:
                    5e:21:b8:57:6c:e3:24:b5:aa:d5:ad:c2:31:88:e5:
                    65:0e:99:4e:e5:76:18:ff:2c:98:fb:8b:44:22:f7:
                    c3:ea:63:03:2c:25:52:68:cd:22:f7:fc:25:6c:d7:
                    61:99:7b:6b:67:84:65:bc:fd:71:35:a8:a2:89:40:
                    c1:31:e2:b8:6c:00:57:9c:85:7a:e6:c1:bb:bc:28:
                    81:c1:cb:c1:b0:fc:e0:b9:af:6f:ae:40:1a:cb:fd:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:30:A5:8B:A7:E9:F7:96:DA:06:CE:96:E4:CE:2D:F1:CC:5E:CC:40
            X509v3 Authority Key Identifier:
                keyid:75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3235203d3e20323633373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:7b:1f:fd:46:63:12:1b:70:a9:07:1b:d2:c8:41:bf:fd:1d:
         f3:d9:36:82:95:ee:9e:92:83:b4:19:0b:1b:20:c0:76:6b:6d:
         34:c2:8f:a1:18:da:4c:25:d5:84:fb:58:53:84:e4:72:20:eb:
         0d:da:12:27:d1:e6:88:e7:a9:80:06:e0:a1:6e:79:17:be:3b:
         09:44:e9:23:87:51:77:f7:ea:b5:5c:02:f0:5c:f3:29:f6:6e:
         d2:1c:49:99:b6:c9:2a:f2:fa:ad:e1:18:97:e9:4d:d2:57:3b:
         68:63:e5:7c:b3:bd:1d:1c:5b:c8:68:b3:df:ab:09:b7:5b:e4:
         75:84:a4:2f:e6:95:cf:14:28:6d:35:89:62:08:c8:66:f3:7b:
         03:6f:a8:c3:d3:25:3b:ca:fd:df:82:4a:12:76:9e:b2:e6:f4:
         f1:50:16:80:31:cd:d0:8e:eb:34:eb:f9:93:0f:10:ce:59:21:
         c8:be:06:15:20:dd:c0:f0:45:02:31:5f:0d:53:d6:8a:d7:5d:
         ef:f2:50:e9:eb:59:b9:e0:cc:d8:3e:07:13:b2:28:11:d9:10:
         af:1a:5f:ca:a4:e9:9f:12:de:80:80:05:d3:96:9c:0a:32:94:
         dd:31:53:9b:59:de:05:28:29:ea:d3:a0:df:87:06:b9:0e:87:
         9d:c6:fc:5c
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXBnFkCgOCohkFSEusNKdAReFh24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVCQTM5NzM4RDhEQjUzRjRGMUFBQ0IyRDAxRTMzMTlG
MUNFRDBBNjAeFw0yNTEyMjkxMzUxNDNaFw0yNjEyMjgxMzU2NDNaMDMxMTAvBgNV
BAMTKEM4MzBBNThCQTdFOUY3OTZEQTA2Q0U5NkU0Q0UyREYxQ0M1RUNDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4abRpducxwd+SomWke5lE84F
5CYRN7005efpDFD2DVUB8K2WU1X6TT+PXcdUp04RHfHH1PdeBs9vTStWZBQTA1Yz
yGGL78Omuw1xogZVSmti4lqKWEHfFucw50m9kaAwdy/NowaYVu5NiEDq1gI2b3Xp
dhqmSS+AN3Dl0dhEy9Otti4n9UDKC9LACI9i29vHDRZ3Qb7nZcH5jZHTyY9GR94D
+V4huFds4yS1qtWtwjGI5WUOmU7ldhj/LJj7i0Qi98PqYwMsJVJozSL3/CVs12GZ
e2tnhGW8/XE1qKKJQMEx4rhsAFechXrmwbu8KIHBy8Gw/OC5r2+uQBrL/XjpAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUyDCli6fp95baBs6W5M4t8cxezEAwHwYDVR0j
BBgwFoAUdbo5c42NtT9PGqyy0B4zGfHO0KYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkJFMDkwQkUzODJDODI2OTBGNzc3NDIzOEEyQTY3RTI0
MEQ5NjgzODEzMzI1NDZBRjU0RUFDRTg5MURCOTcxLzAvNzVCQTM5NzM4RDhEQjUz
RjRGMUFBQ0IyRDAxRTMzMTlGMUNFRDBBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NUJBMzk3MzhEOERCNTNGNEYx
QUFDQjJEMDFFMzMxOUYxQ0VEMEE2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJCRTA5MEJFMzgyQzgyNjkwRjc3NzQyMzhBMkE2N0UyNDBEOTY4Mzgx
MzMyNTQ2QUY1NEVBQ0U4OTFEQjk3MS8wLzMxMzMzODJlMzUzOTJlMzAyZTMwMmYz
MjMyMmQzMjM1MjAzZDNlMjAzMjM2MzMzNzMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKOwAwDQYJ
KoZIhvcNAQELBQADggEBAJJ7H/1GYxIbcKkHG9LIQb/9HfPZNoKV7p6Sg7QZCxsg
wHZrbTTCj6EY2kwl1YT7WFOE5HIg6w3aEifR5ojnqYAG4KFueRe+OwlE6SOHUXf3
6rVcAvBc8yn2btIcSZm2ySry+q3hGJfpTdJXO2hj5XyzvR0cW8hos9+rCbdb5HWE
pC/mlc8UKG01iWIIyGbzewNvqMPTJTvK/d+CShJ2nrLm9PFQFoAxzdCO6zTr+ZMP
EM5ZIci+BhUg3cDwRQIxXw1T1orXXe/yUOnrWbngzNg+BxOyKBHZEK8aX8qk6Z8S
3oCABdOWnAoylN0xU5tZ3gUoKerToN+HBrkOh53G/Fw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:02:28 2026 by rpki-client