This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
File:                     3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa (raw, json)
Hash identifier:          YWcUyuItjBwBgTELI0ITG5eZjX8bg6tyJshR2uf1hew=
Subject key identifier:   54:F6:23:CD:0C:3F:9D:46:E3:FF:AE:A8:35:94:CA:E2:1E:60:93:41
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       65FB9D5B9F21541FBB5A17310F90D910E3118A08
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
Signing time:             Tue 06 Jan 2026 19:29:31 +0000
ROA not before:           Tue 06 Jan 2026 19:24:31 +0000
ROA not after:            Tue 05 Jan 2027 19:29:31 +0000
asID:                     61520
IP address blocks:        138.204.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fb:9d:5b:9f:21:54:1f:bb:5a:17:31:0f:90:d9:10:e3:11:8a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:31 2026 GMT
            Not After : Jan  5 19:29:31 2027 GMT
        Subject: CN=54F623CD0C3F9D46E3FFAEA83594CAE21E609341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:82:a7:89:f8:4e:ae:36:b7:5c:32:e7:53:
                    82:1f:d2:9d:ba:6e:90:5c:f6:a7:f5:8e:22:ba:13:
                    65:fd:ea:77:21:56:c8:5b:1d:a8:98:1b:6b:e8:9a:
                    59:05:dc:21:10:57:12:39:50:a2:94:2b:9d:f6:50:
                    fe:94:ed:d5:9b:d7:ab:17:e1:ac:64:e1:a6:c4:d5:
                    48:c9:49:13:f1:47:ab:80:d0:86:9c:aa:af:1e:f7:
                    83:b9:12:fb:7c:5c:87:38:b8:86:e8:c7:7c:7b:03:
                    ba:ed:28:22:39:8d:b6:3e:ae:14:2d:cc:27:89:d3:
                    ce:ad:c3:8d:67:3a:01:87:09:55:65:4c:66:50:0a:
                    67:0d:e2:d4:f7:0a:3c:24:b1:76:f9:5a:5c:08:21:
                    b6:9a:1a:25:35:ef:c6:ff:e0:f6:56:50:fc:e1:ba:
                    41:f4:79:d0:b5:c2:32:d8:e6:ad:3e:6e:60:61:1b:
                    49:5a:0d:b4:bb:8c:99:24:26:48:65:f0:56:9a:1b:
                    6e:8b:55:4b:b1:78:c7:b0:e8:97:0b:44:e1:2c:9b:
                    09:93:bd:df:e8:67:ac:34:31:f7:78:96:e7:2f:8e:
                    eb:8f:76:51:5c:8e:4a:8b:b8:9b:a8:b6:04:6d:9a:
                    e6:f5:8c:b1:ce:94:1d:89:cf:07:07:50:c7:70:80:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:23:CD:0C:3F:9D:46:E3:FF:AE:A8:35:94:CA:E2:1E:60:93:41
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:cb:63:ea:1c:dc:88:a3:04:82:d7:7f:f0:d7:15:cc:db:
         b1:35:74:13:28:e3:ea:ab:2d:54:2a:94:52:fc:53:95:68:e9:
         42:4e:bf:aa:5e:0f:f7:f5:fa:40:77:59:61:64:91:03:df:31:
         b1:1f:81:75:64:44:fe:2a:b9:56:31:4b:af:b6:2c:06:b9:8e:
         da:8e:b1:e9:64:82:95:a3:0e:c0:fa:e9:ac:41:39:a7:52:d1:
         e5:d6:a6:5f:37:c0:f0:93:1f:76:ba:e2:2d:db:8a:e4:cd:d5:
         c3:73:55:5e:85:89:ad:94:bb:ec:da:14:b9:4a:21:77:54:91:
         58:11:2c:8a:d3:61:4b:c2:02:be:ab:37:80:d3:f4:af:30:b1:
         be:89:a9:c4:e2:cb:ff:73:b2:1e:92:fd:20:13:7c:47:66:2f:
         e7:7b:35:7b:78:61:94:63:e6:a0:b2:f7:f9:6c:bc:a0:7c:8e:
         f9:52:a9:50:cc:bc:ff:55:95:28:3d:55:c7:16:77:65:8c:f4:
         ab:db:52:85:c5:00:f9:fd:4c:47:bf:4b:59:58:99:31:3a:4a:
         23:67:80:02:5f:4f:f1:54:5c:f1:27:42:80:73:29:c4:b3:a3:
         10:22:3b:45:9c:21:71:78:89:18:7f:71:3a:90:f5:bc:b7:e0:
         19:fa:89:ae
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZfudW58hVB+7WhcxD5DZEOMRiggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNjAxMDYxOTI0MzFaFw0yNzAxMDUxOTI5MzFaMDMxMTAvBgNV
BAMTKDU0RjYyM0NEMEMzRjlENDZFM0ZGQUVBODM1OTRDQUUyMUU2MDkzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37oKnifhOrja3XDLnU4If0p26
bpBc9qf1jiK6E2X96nchVshbHaiYG2vomlkF3CEQVxI5UKKUK532UP6U7dWb16sX
4axk4abE1UjJSRPxR6uA0Iacqq8e94O5Evt8XIc4uIbox3x7A7rtKCI5jbY+rhQt
zCeJ086tw41nOgGHCVVlTGZQCmcN4tT3CjwksXb5WlwIIbaaGiU178b/4PZWUPzh
ukH0edC1wjLY5q0+bmBhG0laDbS7jJkkJkhl8FaaG26LVUuxeMew6JcLROEsmwmT
vd/oZ6w0Mfd4lucvjuuPdlFcjkqLuJuotgRtmub1jLHOlB2JzwcHUMdwgCeTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVPYjzQw/nUbj/66oNZTK4h5gk0EwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMxMzMzODJlMzIzMDM0MmUzMjM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzUzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisz5
MA0GCSqGSIb3DQEBCwUAA4IBAQCb1stj6hzciKMEgtd/8NcVzNuxNXQTKOPqqy1U
KpRS/FOVaOlCTr+qXg/39fpAd1lhZJED3zGxH4F1ZET+KrlWMUuvtiwGuY7ajrHp
ZIKVow7A+umsQTmnUtHl1qZfN8Dwkx92uuIt24rkzdXDc1VehYmtlLvs2hS5SiF3
VJFYESyK02FLwgK+qzeA0/SvMLG+ianE4sv/c7Iekv0gE3xHZi/nezV7eGGUY+ag
svf5bLygfI75UqlQzLz/VZUoPVXHFndljPSr21KFxQD5/UxHv0tZWJkxOkojZ4AC
X0/xVFzxJ0KAcynEs6MQIjtFnCFxeIkYf3E6kPW8t+AZ+omu
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:20:50 2026 by rpki-client