This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa
File:                     3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          7oZkV5opqMTeghUYdhpRFHKU3nqaAP3k6YSnAQeUpvs=
Subject key identifier:   66:43:0F:93:F3:54:BF:37:D1:30:96:66:EF:10:83:90:28:CB:E4:AB
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       3E883E71A12F2D48D8261492648D57FDD649BB17
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 06 Jan 2026 19:34:03 +0000
ROA not before:           Tue 06 Jan 2026 19:29:03 +0000
ROA not after:            Tue 05 Jan 2027 19:34:03 +0000
asID:                     263829
IP address blocks:        138.36.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:88:3e:71:a1:2f:2d:48:d8:26:14:92:64:8d:57:fd:d6:49:bb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Jan  6 19:29:03 2026 GMT
            Not After : Jan  5 19:34:03 2027 GMT
        Subject: CN=66430F93F354BF37D1309666EF10839028CBE4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:82:9d:40:4b:94:95:95:67:ac:30:90:30:
                    34:54:fc:ef:92:ec:ae:c2:c0:d9:b5:4e:d6:88:64:
                    6e:09:12:78:3b:04:90:3e:cc:11:49:ce:9b:8e:2a:
                    b7:92:dd:8f:f2:2c:14:f2:62:1e:44:98:b8:bd:97:
                    d9:f3:b9:5b:41:89:8d:11:93:5b:ec:eb:5c:32:f5:
                    1e:6b:ff:8a:e9:8c:56:3a:91:94:7c:46:d6:65:65:
                    20:ad:17:89:c5:20:8a:e0:3f:f7:4a:f4:3b:78:51:
                    a9:94:ea:3a:56:cb:50:e8:c3:21:0e:72:56:61:b1:
                    5d:53:b9:00:44:a1:43:d8:49:82:65:33:55:57:41:
                    94:d0:97:40:f8:69:94:71:a3:dd:85:4e:8e:6e:9c:
                    bd:e9:c5:3b:18:70:07:9b:35:f1:94:59:8e:c3:2b:
                    e7:89:a5:f3:02:49:a8:89:e3:da:dc:ac:f0:0e:76:
                    5f:68:c9:4d:d5:eb:a5:55:20:5f:82:c2:56:d0:ed:
                    a3:af:90:07:bb:17:85:00:97:5d:f3:0b:b3:0e:05:
                    dd:65:74:25:20:ff:bb:e9:54:c9:e0:ac:cd:65:5a:
                    c3:aa:28:08:61:f5:13:01:4b:90:5a:71:07:d7:57:
                    55:c4:fd:35:39:de:ee:e5:a6:a8:47:10:d8:86:bb:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:0F:93:F3:54:BF:37:D1:30:96:66:EF:10:83:90:28:CB:E4:AB
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:d6:40:9d:07:31:94:7f:27:45:21:b4:a4:31:5b:46:b0:f8:
         70:c0:f7:6d:8c:cd:c2:94:2e:d3:44:ff:fc:97:03:a4:8e:04:
         85:16:15:bd:da:48:34:29:f2:b1:7f:a3:64:1e:04:89:3b:9f:
         04:59:5e:06:4d:53:fe:e3:49:64:20:7c:c3:5b:44:d7:9c:f4:
         7e:28:69:ba:15:94:f2:95:15:0d:d2:2c:fd:d9:21:f6:09:f1:
         7d:49:2a:81:1d:7f:6c:2e:91:68:fd:70:7f:c1:2f:37:c5:f2:
         94:d3:f6:31:6f:97:35:65:31:07:72:66:02:9f:90:33:61:48:
         a2:08:59:ce:5c:82:3e:36:10:4b:26:7d:51:fc:fe:60:af:8a:
         6a:40:75:64:5c:4c:e5:81:13:44:f1:4c:6b:99:11:30:6b:e9:
         76:65:2f:84:f5:c3:ee:6e:53:24:2c:7a:17:1a:6e:b4:5e:e3:
         03:56:8d:07:a3:bd:5e:4a:28:46:8e:62:8e:19:a7:1f:18:74:
         b6:fa:98:28:6b:52:84:6e:4e:59:4b:3d:70:86:41:4c:2e:d4:
         91:6b:cc:ec:3c:cb:b2:33:d1:c3:02:ae:32:8f:f1:05:35:db:
         84:58:dc:57:fb:23:83:4f:b1:d4:e0:b7:0f:47:5c:a6:cb:79:
         58:65:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:46 2026 by rpki-client