This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/3133382e3131372e3134382e302f32322d3234203d3e20323635383331.roa
File:                     3133382e3131372e3134382e302f32322d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          f3+cMvyliV6LpfSyq3JNUPTFk533ZgwyPvXKaWVJ0NY=
Subject key identifier:   F3:C3:80:9C:3B:FD:9B:56:70:F7:5C:78:24:D8:0D:90:0D:42:A0:63
Certificate issuer:       /CN=B3A46BC24267EDFAF47C68E3B569F05EF63B4B14
Certificate serial:       704E3C1A706740639A38B3E35F932DE42A197C9B
Authority key identifier: B3:A4:6B:C2:42:67:ED:FA:F4:7C:68:E3:B5:69:F0:5E:F6:3B:4B:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/3133382e3131372e3134382e302f32322d3234203d3e20323635383331.roa
Signing time:             Tue 06 Jan 2026 19:30:46 +0000
ROA not before:           Tue 06 Jan 2026 19:25:46 +0000
ROA not after:            Tue 05 Jan 2027 19:30:46 +0000
asID:                     265831
IP address blocks:        138.117.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 14:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4e:3c:1a:70:67:40:63:9a:38:b3:e3:5f:93:2d:e4:2a:19:7c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A46BC24267EDFAF47C68E3B569F05EF63B4B14
        Validity
            Not Before: Jan  6 19:25:46 2026 GMT
            Not After : Jan  5 19:30:46 2027 GMT
        Subject: CN=F3C3809C3BFD9B5670F75C7824D80D900D42A063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:e7:f7:8f:21:c4:4d:73:48:3b:46:c0:77:
                    33:0f:d1:58:a1:87:34:16:c6:37:82:81:11:e2:be:
                    05:02:3f:d2:cb:e0:c6:7b:c3:5f:b8:a4:eb:68:84:
                    11:d8:30:64:86:02:2c:06:89:63:15:68:d0:3b:65:
                    8f:47:ca:2a:43:82:60:1b:b3:f6:7b:35:ac:0a:38:
                    3d:44:57:26:7d:4a:b9:2c:db:9e:d4:8f:82:ba:58:
                    b8:36:e2:29:dc:33:44:98:d2:47:47:10:12:21:18:
                    92:14:bf:3f:be:ba:6c:4d:04:8a:c6:49:46:5f:f1:
                    ca:83:d4:cb:1b:c9:52:aa:60:ab:8f:a7:f5:74:a7:
                    63:1a:76:9f:f9:ba:b2:36:6b:1d:ee:bc:6d:d0:27:
                    b0:21:f4:85:8c:81:ee:be:8f:82:8e:76:c1:4e:5a:
                    21:29:d7:8b:ea:dc:be:c6:44:18:91:bf:91:bd:a8:
                    27:67:75:22:49:ec:55:03:d8:62:e1:83:fc:37:11:
                    b7:7e:77:9c:f4:6f:6f:de:2b:9c:1a:73:5c:57:47:
                    ed:0e:2f:01:a6:6c:17:3b:70:f1:c3:6f:91:85:e3:
                    c5:48:b6:e0:a4:42:f7:4b:8f:00:a0:47:de:d9:ab:
                    0e:7c:be:db:4b:e3:36:ae:1c:08:4c:4f:73:2d:31:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C3:80:9C:3B:FD:9B:56:70:F7:5C:78:24:D8:0D:90:0D:42:A0:63
            X509v3 Authority Key Identifier:
                keyid:B3:A4:6B:C2:42:67:ED:FA:F4:7C:68:E3:B5:69:F0:5E:F6:3B:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3A46BC24267EDFAF47C68E3B569F05EF63B4B14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A7EB4B8D2C47FB9BE1F84A6A6B982B4D97011B86E46F5690C2AF1AE6B112DB/0/3133382e3131372e3134382e302f32322d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:89:77:76:e0:01:61:57:1c:80:ad:56:eb:fc:25:e3:33:c3:
         03:cd:57:19:6a:64:ac:bf:71:c5:7e:3c:39:0f:2e:da:ec:1e:
         bf:7a:d3:73:b1:ab:90:6a:34:42:31:c5:ae:d8:36:f0:1d:a9:
         b1:4d:b8:6d:97:66:8c:48:d0:82:c0:35:24:6e:62:a4:c0:d2:
         b1:0b:28:c6:5e:be:ee:90:85:f9:59:58:dd:cd:ad:51:c6:de:
         c5:95:21:cc:46:ec:58:93:ae:94:93:2a:34:92:72:0b:0c:33:
         64:9d:a9:1d:c4:c4:f9:63:72:d7:61:de:b7:6e:ae:49:c4:cd:
         bb:35:11:e4:61:78:b0:ac:6e:71:1a:c4:2b:41:e3:4c:54:56:
         6b:f7:84:3a:95:ee:0e:4a:a8:3d:4d:8e:84:38:45:3c:c0:bc:
         8f:4a:a3:87:e9:30:12:a4:f6:11:07:f7:20:58:02:17:da:3f:
         a6:6d:6b:34:39:78:fa:a9:3f:e0:a1:6b:85:bb:15:d8:08:4f:
         3b:b2:31:5d:8a:74:b7:39:91:c2:c9:3d:b9:80:1a:6d:69:19:
         03:b3:34:3c:aa:21:4e:97:93:db:84:55:0a:01:8a:e7:a2:b6:
         0d:28:25:f3:fe:0f:4d:42:96:ad:e0:1e:86:aa:a9:96:39:91:
         23:40:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:35:32 2026 by rpki-client