This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa
File:                     3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa (raw, json)
Hash identifier:          ikCJgW6NogI+RBBXby1RjSq7hgw/JryVHvTAcZztNx8=
Subject key identifier:   6A:69:E1:22:B3:CD:7E:73:72:9F:01:F1:89:47:9A:FD:0E:5A:DD:83
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       213788F8961BCAE33FEF48DDD889D2CD2B8282EF
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa
Signing time:             Tue 06 Jan 2026 19:37:33 +0000
ROA not before:           Tue 06 Jan 2026 19:32:33 +0000
ROA not after:            Tue 05 Jan 2027 19:37:33 +0000
asID:                     400040
IP address blocks:        138.99.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:37:88:f8:96:1b:ca:e3:3f:ef:48:dd:d8:89:d2:cd:2b:82:82:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: Jan  6 19:32:33 2026 GMT
            Not After : Jan  5 19:37:33 2027 GMT
        Subject: CN=6A69E122B3CD7E73729F01F189479AFD0E5ADD83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:e2:5d:ba:46:48:61:b1:08:4e:a4:53:30:
                    fe:13:b2:67:b4:60:ea:cf:2b:86:83:c5:34:e8:e4:
                    37:29:88:c0:27:fc:44:6d:91:20:fd:ae:2b:77:00:
                    7c:a5:f7:b6:75:73:0c:1c:62:f5:75:f9:15:e9:ed:
                    66:91:7e:63:15:a3:25:b2:01:8a:ae:b7:9e:1a:a8:
                    cf:ee:f9:67:3e:27:11:60:ff:be:b8:47:67:a3:53:
                    d9:1e:52:d6:89:03:e5:54:67:b7:34:d4:88:da:3d:
                    0a:43:f1:b7:94:61:b7:24:18:a6:12:a7:9d:d7:f6:
                    ed:24:01:39:0e:da:f4:cc:5d:06:da:fa:56:69:d4:
                    02:98:72:c4:81:8c:10:a8:4b:9c:33:ce:20:33:bb:
                    33:bb:b4:aa:38:d9:4e:ef:2f:5b:09:a4:94:20:f6:
                    4d:02:40:07:ad:8b:9d:b8:96:f5:3d:d9:07:a6:c5:
                    15:45:db:44:ec:f3:e0:fa:53:c1:01:c2:90:26:26:
                    b1:af:82:91:86:19:a1:37:29:88:af:69:a2:7c:43:
                    6a:4c:a9:87:0a:f6:4c:2f:8d:3b:3f:54:b4:01:d6:
                    9e:89:1b:c4:77:f5:f8:dc:05:a0:42:05:fb:1a:8a:
                    03:57:46:eb:2c:eb:4c:02:52:3e:99:ff:25:19:01:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:E1:22:B3:CD:7E:73:72:9F:01:F1:89:47:9A:FD:0E:5A:DD:83
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:64:59:1b:71:34:a4:e6:93:21:f0:da:67:62:60:99:b5:
         75:09:7d:0e:a5:a9:b7:03:91:b3:60:00:75:49:0d:61:3c:da:
         21:bd:93:c9:a6:dc:6d:13:88:39:4a:3a:43:c4:3c:4c:8e:a7:
         ca:43:1c:ef:a1:80:19:dc:f3:95:85:db:8c:94:43:25:e5:87:
         57:f6:84:cf:99:7f:00:4d:71:ad:65:c3:c0:cf:dd:bc:f1:c6:
         4c:3b:e8:f3:0a:42:45:38:ce:dd:1b:9c:0e:1b:3e:16:f8:a3:
         28:ad:92:41:a9:34:c3:5c:7f:65:c8:bd:69:83:a3:42:59:ee:
         10:d5:41:b0:e2:9b:3e:5a:49:41:0b:4b:5d:dc:01:70:be:ff:
         d0:f3:64:a7:a1:31:3a:02:c2:b9:65:77:c0:58:8d:5f:06:4e:
         14:67:c4:67:c7:86:0d:3f:1b:8b:a6:bd:16:91:6c:0b:37:59:
         34:fc:45:ba:68:f2:c1:c4:5a:b0:0d:cd:c2:06:e9:05:31:0f:
         5f:d2:c3:68:2f:c0:bf:04:11:8c:cd:55:fc:57:86:3c:7b:02:
         6c:23:15:ee:4d:7d:b1:e6:6b:f8:b4:e6:99:73:91:5e:33:bb:
         ad:1f:cf:19:b8:6c:9b:71:08:be:b7:f4:41:ec:98:8b:d1:38:
         64:06:5d:4f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUITeI+JYbyuM/70jd2InSzSuCgu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDNzcwMTg1ODhEN0MzQzg3QzNFMTNENzEyOTMxNzc0
NTVFRTU3RDAeFw0yNjAxMDYxOTMyMzNaFw0yNzAxMDUxOTM3MzNaMDMxMTAvBgNV
BAMTKDZBNjlFMTIyQjNDRDdFNzM3MjlGMDFGMTg5NDc5QUZEMEU1QUREODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXP+JdukZIYbEITqRTMP4Tsme0
YOrPK4aDxTTo5DcpiMAn/ERtkSD9rit3AHyl97Z1cwwcYvV1+RXp7WaRfmMVoyWy
AYqut54aqM/u+Wc+JxFg/764R2ejU9keUtaJA+VUZ7c01IjaPQpD8beUYbckGKYS
p53X9u0kATkO2vTMXQba+lZp1AKYcsSBjBCoS5wzziAzuzO7tKo42U7vL1sJpJQg
9k0CQAeti524lvU92QemxRVF20Ts8+D6U8EBwpAmJrGvgpGGGaE3KYivaaJ8Q2pM
qYcK9kwvjTs/VLQB1p6JG8R39fjcBaBCBfsaigNXRuss60wCUj6Z/yUZAT23AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUamnhIrPNfnNynwHxiUea/Q5a3YMwHwYDVR0j
BBgwFoAU68dwGFiNfDyHw+E9cSkxd0Ve5X0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0ExQUI0NzFDMDlDNzM1NjhCRUY5QTMwNjE5MjZEQjkz
QUQ1RUMyRTBDNjk0ODM0QzA0NzRDRkM1NjE3NDZBLzAvRUJDNzcwMTg1ODhEN0Mz
Qzg3QzNFMTNENzEyOTMxNzc0NTVFRTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkM3NzAxODU4OEQ3QzNDODdD
M0UxM0Q3MTI5MzE3NzQ1NUVFNTdELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzNBMUFCNDcxQzA5QzczNTY4QkVGOUEzMDYxOTI2REI5M0FENUVDMkUw
QzY5NDgzNEMwNDc0Q0ZDNTYxNzQ2QS8wLzMxMzMzODJlMzkzOTJlMzEzNDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzAzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAimOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB40GRZG3E0pOaTIfDaZ2JgmbV1CX0Opam3A5Gz
YAB1SQ1hPNohvZPJptxtE4g5SjpDxDxMjqfKQxzvoYAZ3POVhduMlEMl5YdX9oTP
mX8ATXGtZcPAz9288cZMO+jzCkJFOM7dG5wOGz4W+KMorZJBqTTDXH9lyL1pg6NC
We4Q1UGw4ps+WklBC0td3AFwvv/Q82SnoTE6AsK5ZXfAWI1fBk4UZ8Rnx4YNPxuL
pr0WkWwLN1k0/EW6aPLBxFqwDc3CBukFMQ9f0sNoL8C/BBGMzVX8V4Y8ewJsIxXu
TX2x5mv4tOaZc5FeM7utH88ZuGybcQi+t/RB7JiL0ThkBl1P
-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:40 2026 by rpki-client