This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa
File:                     3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa (raw, json)
Hash identifier:          mQSpqZBAO0KbABSj9Q12cI0/lJpa5oaVYG7DEwPYLb4=
Subject key identifier:   83:D7:71:82:B9:F6:E5:AC:1A:48:8C:97:3C:71:A5:5E:80:63:67:2F
Certificate issuer:       /CN=6D1C715A5E9078E9C0184B064F0D488E81755860
Certificate serial:       516440506E48ADAE75ED671953CD89480D0D8779
Authority key identifier: 6D:1C:71:5A:5E:90:78:E9:C0:18:4B:06:4F:0D:48:8E:81:75:58:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa
Signing time:             Tue 06 Jan 2026 19:26:58 +0000
ROA not before:           Tue 06 Jan 2026 19:21:58 +0000
ROA not after:            Tue 05 Jan 2027 19:26:58 +0000
asID:                     263786
IP address blocks:        138.122.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 21:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:64:40:50:6e:48:ad:ae:75:ed:67:19:53:cd:89:48:0d:0d:87:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1C715A5E9078E9C0184B064F0D488E81755860
        Validity
            Not Before: Jan  6 19:21:58 2026 GMT
            Not After : Jan  5 19:26:58 2027 GMT
        Subject: CN=83D77182B9F6E5AC1A488C973C71A55E8063672F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:fb:9d:05:e6:b7:ee:4f:d5:be:92:b9:92:
                    b6:21:79:36:f5:8c:1e:5c:85:0b:ba:58:ec:fa:9f:
                    b4:55:6d:2d:65:b4:81:de:c7:c1:1c:2c:eb:12:00:
                    f6:ad:dd:aa:f1:8f:69:01:ce:3e:3a:a9:c7:38:dd:
                    c8:0b:e9:87:7e:72:b3:49:74:9b:4d:07:f1:19:bb:
                    79:ac:3d:a0:1f:44:38:23:9c:0c:35:58:42:12:d2:
                    fc:9e:5a:2c:85:a7:8f:ea:6d:d8:3e:e9:e9:75:d5:
                    a0:08:f6:3f:62:bf:58:75:92:91:a4:8f:e9:41:0d:
                    56:84:6b:f3:ca:6c:50:4c:ec:4d:a5:b9:07:13:77:
                    a8:6d:53:bf:25:21:1b:6e:17:7b:4d:9a:49:f3:4b:
                    78:35:23:e8:d9:b1:08:86:38:a4:d9:93:c4:a0:f2:
                    2c:3b:2f:94:01:08:ee:70:d7:34:2b:8c:93:4c:b9:
                    79:82:10:ac:07:36:b1:b4:3f:f4:f6:15:aa:a2:c0:
                    4c:c4:cd:25:83:d9:3f:69:e0:bb:fe:84:3d:7f:97:
                    73:0a:30:e6:7a:92:fa:bb:f0:8d:ec:f5:f2:b6:f6:
                    20:e3:8c:96:a8:54:79:02:44:07:75:35:23:d1:6e:
                    0a:30:1b:66:28:ca:78:e8:12:ef:a4:6c:9a:3b:57:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D7:71:82:B9:F6:E5:AC:1A:48:8C:97:3C:71:A5:5E:80:63:67:2F
            X509v3 Authority Key Identifier:
                keyid:6D:1C:71:5A:5E:90:78:E9:C0:18:4B:06:4F:0D:48:8E:81:75:58:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:29:b5:b5:45:f0:16:ec:f6:1b:f8:40:79:13:3f:91:35:ea:
         a3:d2:35:ba:12:c3:b0:08:da:7c:7f:bf:9f:63:4b:f2:50:ce:
         a6:6e:d4:e0:96:36:f8:5a:0b:69:9c:3e:5a:d5:62:17:8c:c9:
         61:c8:12:0a:e1:a4:83:61:58:45:ec:a1:1e:66:1e:a6:5a:a2:
         da:9d:0f:80:86:5b:19:77:e3:78:30:1c:b3:1f:17:1b:c2:79:
         69:07:db:0a:a0:2f:13:4e:ec:02:7d:f7:1c:a2:41:71:f6:97:
         38:f7:40:5b:c3:1a:69:4f:b4:e1:c4:aa:e6:5b:a6:5f:b4:2b:
         45:23:a6:b0:f2:05:b4:d9:a0:7b:8c:23:b9:d7:03:93:2b:5a:
         f6:22:db:26:8e:dd:bc:af:09:2d:f3:ac:b1:e4:5c:90:92:79:
         b6:7f:6c:6c:91:15:f8:00:29:f4:82:2b:c4:d7:fa:be:30:8d:
         b6:c8:df:f7:b9:80:e4:42:15:03:21:c1:5c:02:b0:b7:c7:e5:
         71:33:e8:6c:fd:a6:34:53:bb:70:63:b2:a1:1e:31:50:5e:bf:
         6b:c9:9f:8c:11:d7:f7:4f:17:90:e5:92:92:b6:47:1d:14:a4:
         ee:84:3e:d5:cc:af:b5:d1:b7:23:b4:15:38:83:07:11:cc:e0:
         37:d1:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:02:04 2026 by rpki-client