This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3135302e302f32342d3234203d3e203238333938.roa
File:                     3133382e39392e3135302e302f32342d3234203d3e203238333938.roa (raw, json)
Hash identifier:          D9YFTx1f/NQqeQLUcMnwYD7ujnRfKfbOwoCqJPapYVE=
Subject key identifier:   CC:61:E1:B4:69:D8:FB:59:5B:F8:2D:BE:72:12:EB:39:B6:D4:DC:BC
Certificate issuer:       /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial:       4C315B264E2F53D84B950B8287A0E2661D84F3D7
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3135302e302f32342d3234203d3e203238333938.roa
Signing time:             Tue 06 Jan 2026 19:33:24 +0000
ROA not before:           Tue 06 Jan 2026 19:28:24 +0000
ROA not after:            Tue 05 Jan 2027 19:33:24 +0000
asID:                     28398
IP address blocks:        138.99.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:31:5b:26:4e:2f:53:d8:4b:95:0b:82:87:a0:e2:66:1d:84:f3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
        Validity
            Not Before: Jan  6 19:28:24 2026 GMT
            Not After : Jan  5 19:33:24 2027 GMT
        Subject: CN=CC61E1B469D8FB595BF82DBE7212EB39B6D4DCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:59:7f:51:c6:89:04:69:4e:c5:9c:b5:4c:
                    5d:18:d1:c9:c6:18:0f:c2:fe:a9:77:e0:a8:02:44:
                    ad:2c:8c:30:ef:5e:02:ae:3f:0f:be:28:46:03:3c:
                    7c:b9:d2:62:af:ce:aa:5b:81:5b:0a:72:05:4c:2e:
                    25:c7:28:54:2c:58:5e:37:51:9f:f1:05:5e:cd:48:
                    cc:b6:66:72:06:03:a9:e4:17:4b:76:ae:64:a3:71:
                    e9:26:be:b1:4a:ac:e5:76:ef:90:63:62:cf:00:de:
                    e2:db:e0:d2:b4:ba:1a:c6:37:94:aa:e9:cc:c5:6a:
                    1f:1a:9b:41:30:1d:ec:92:85:70:cf:a9:6b:fa:c1:
                    c0:cb:34:ee:d6:99:1f:3b:7d:83:b1:73:cb:09:e9:
                    83:63:e7:de:b7:93:9a:c5:7c:7c:7f:ae:37:e2:6f:
                    ee:86:e0:a1:76:66:6d:3d:17:27:a2:5f:87:3c:49:
                    7b:91:48:43:1f:66:96:3d:53:bf:c5:de:da:eb:9e:
                    99:d5:56:75:21:56:80:27:b4:47:19:57:4c:87:78:
                    b0:2b:b5:4f:42:97:ad:c6:19:f7:ad:2a:74:93:97:
                    aa:87:ed:78:a7:6b:a1:2d:1e:35:6f:b0:6f:fd:2b:
                    83:7f:10:b2:c9:64:49:bc:ac:b4:1b:4b:f6:ca:73:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:E1:B4:69:D8:FB:59:5B:F8:2D:BE:72:12:EB:39:B6:D4:DC:BC
            X509v3 Authority Key Identifier:
                keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3135302e302f32342d3234203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:06:97:8a:36:f6:cf:5c:b9:34:74:09:14:1e:8d:e7:8e:2e:
         19:46:60:75:cb:8b:a5:cc:7c:87:c0:1d:92:b3:21:7a:27:63:
         aa:cb:8e:c8:97:04:f6:f5:76:19:bb:2d:57:e0:72:e5:c1:b1:
         95:0e:5d:52:ed:c3:1d:d8:84:8a:91:04:4d:0d:53:28:03:83:
         69:27:28:40:30:9a:3d:8e:88:5e:cb:4e:39:54:f2:3a:5d:82:
         a9:71:7d:ce:a9:2d:1b:21:1b:ab:e1:9f:58:0f:f8:44:dd:c2:
         5b:e0:1d:1b:75:c0:b2:33:41:88:2e:4a:5d:c4:0b:68:48:cb:
         d3:62:88:f4:ca:be:06:6c:ec:da:00:01:d7:d3:9a:d4:6b:fd:
         96:8d:3b:34:cd:17:9a:f0:c0:51:30:92:8d:9f:ee:16:4c:2d:
         38:9d:bd:cb:8e:32:28:84:2c:16:35:00:92:4c:cf:79:03:0a:
         82:75:88:13:80:fd:7a:8d:c3:98:1c:e5:99:d9:7e:c5:a2:0a:
         2a:2d:a9:4f:1b:a0:41:4b:36:af:d2:53:0c:51:d0:a6:01:00:
         fc:dd:78:6d:ac:58:a8:81:1c:7b:79:2d:07:6b:14:f3:27:07:
         cf:6b:bb:64:c5:db:64:99:1e:49:79:70:27:74:34:24:44:8f:
         81:02:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:35 2026 by rpki-client