This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa
File:                     3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa (raw, json)
Hash identifier:          PHzFsGa++UEohWRcO0WVSNa07FqjYomXXVqWVXScaUY=
Subject key identifier:   24:3F:1A:23:C6:3E:8A:6D:CA:30:D5:9F:B5:F6:8F:79:E5:F0:22:21
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       193DA7661DA7F460DF479796E0694C50DB5DEB0B
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa
Signing time:             Tue 06 Jan 2026 19:29:33 +0000
ROA not before:           Tue 06 Jan 2026 19:24:33 +0000
ROA not after:            Tue 05 Jan 2027 19:29:33 +0000
asID:                     64104
IP address blocks:        138.204.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 20:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3d:a7:66:1d:a7:f4:60:df:47:97:96:e0:69:4c:50:db:5d:eb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Jan  6 19:24:33 2026 GMT
            Not After : Jan  5 19:29:33 2027 GMT
        Subject: CN=243F1A23C63E8A6DCA30D59FB5F68F79E5F02221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:d6:39:0b:8a:38:35:de:93:0c:94:f9:9c:
                    8a:25:5b:ab:62:28:86:09:be:c8:9b:93:fd:e7:c0:
                    96:7b:54:30:f1:71:1f:de:5b:10:5d:97:6b:d6:6d:
                    29:15:7e:7e:77:03:b6:fe:2a:ad:e4:72:27:a8:d4:
                    d4:6d:89:fc:4e:2a:7b:f9:15:0b:50:c8:8c:4e:27:
                    9b:ad:21:d2:ef:b8:5b:8f:e9:56:8e:11:67:82:f9:
                    25:02:75:81:3b:61:e2:b5:19:a7:20:78:94:60:e7:
                    34:0e:c1:6a:12:3c:6d:23:9a:42:57:a5:f9:eb:c6:
                    63:98:4f:8d:b9:7e:0a:f9:c8:36:4e:68:6b:c8:13:
                    09:03:52:69:35:3b:1a:7b:f9:2d:25:eb:d6:8e:2f:
                    db:92:c4:52:7e:73:63:06:58:4b:da:4b:78:4c:31:
                    93:62:8c:5a:eb:27:90:a5:19:5d:04:94:ba:3a:6d:
                    99:35:f1:d8:58:bc:21:a0:b0:a8:ec:5e:ef:33:cb:
                    2e:bd:c1:48:c9:ed:b2:63:cc:45:c9:52:a6:7d:32:
                    3f:31:ce:f9:d0:df:8a:51:ee:31:58:74:67:fa:43:
                    6c:47:d4:2f:61:81:5d:d8:c5:0c:bc:f0:8d:28:f8:
                    b0:ef:97:29:fa:0b:39:9a:4d:c2:02:f1:2b:5f:98:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:1A:23:C6:3E:8A:6D:CA:30:D5:9F:B5:F6:8F:79:E5:F0:22:21
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:d8:5b:5b:20:b3:7f:ba:eb:c5:d7:3b:75:de:28:19:31:
         ce:e6:68:b9:26:50:76:29:bb:f5:70:63:9b:d6:c2:51:65:17:
         5e:ca:3c:c1:04:d5:f1:79:90:5e:bb:23:51:e6:1d:c4:01:c4:
         be:e4:60:a1:11:f9:a4:64:1a:9e:70:ba:ac:59:d3:e5:e9:f8:
         68:4c:1c:38:42:c8:b2:6d:dc:2d:e1:8c:0d:b7:14:5b:03:c6:
         04:20:ce:16:e8:01:15:1a:5d:6c:61:10:3c:4c:5a:18:73:9a:
         b7:01:c9:79:7c:8e:2f:ab:aa:89:dc:00:6b:59:1c:7f:6d:ea:
         46:0d:a8:8e:c7:7b:48:0f:e3:67:67:7f:d7:e8:a8:13:f9:9f:
         52:08:8d:5b:33:d9:a2:23:f0:50:1c:a2:03:75:aa:d4:9f:33:
         83:a1:fb:d5:e8:cf:73:31:72:15:ce:2a:df:e1:94:47:5a:82:
         20:84:b2:2d:b1:bb:09:6e:1b:db:00:20:04:14:1c:08:8f:16:
         78:24:29:77:6e:62:60:a1:92:ba:f9:a7:58:b3:69:05:b6:b3:
         d3:e8:34:58:e7:76:38:2f:91:d4:4e:0d:3e:dd:dd:53:77:2e:
         1d:90:13:6a:99:ad:c2:e9:e5:27:47:6d:f9:e0:d5:a1:e6:87:
         dc:ca:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 22:13:33 2026 by rpki-client