This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3133382e35392e36342e302f32322d3234203d3e203232343131.roa
File:                     3133382e35392e36342e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          e+HB91n7NFXFpT1dL+dVlCEMqj5DSh96O6JS1Kf7XwY=
Subject key identifier:   EE:30:AA:81:D2:30:6D:E0:6C:51:27:E8:35:15:BF:CB:1B:D6:7E:C3
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       739A4D6A9E5FB76C10BEAA538E47A144641332A9
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3133382e35392e36342e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 06 Jan 2026 18:59:11 +0000
ROA not before:           Tue 06 Jan 2026 18:54:11 +0000
ROA not after:            Tue 05 Jan 2027 18:59:11 +0000
asID:                     22411
IP address blocks:        138.59.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9a:4d:6a:9e:5f:b7:6c:10:be:aa:53:8e:47:a1:44:64:13:32:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Jan  6 18:54:11 2026 GMT
            Not After : Jan  5 18:59:11 2027 GMT
        Subject: CN=EE30AA81D2306DE06C5127E83515BFCB1BD67EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:cc:7a:d4:41:fd:43:f1:f8:38:f1:9d:5c:
                    7d:ff:24:ba:05:50:b8:3c:35:ac:02:ff:36:5f:fc:
                    4b:7f:c4:e7:db:71:be:3c:88:83:50:4a:a6:64:64:
                    e3:2c:a5:18:2e:08:7d:f6:df:ca:9c:5e:7e:0c:a3:
                    33:c7:cb:67:22:e5:f6:64:9e:54:b6:47:82:b8:63:
                    4b:a4:96:ab:de:48:4e:23:39:fa:83:a0:23:75:a6:
                    ea:da:c1:13:54:47:0e:e7:63:e3:96:91:df:71:18:
                    62:0e:12:fd:51:96:6f:a0:c4:c9:c9:7e:f5:a3:ed:
                    fb:4a:6c:03:75:36:d3:fc:e3:ac:b2:98:9b:a4:00:
                    d1:9c:d8:b6:d9:a4:2a:77:9f:1e:3b:76:45:f7:83:
                    a2:e0:d1:16:a0:2b:0b:80:88:ef:bf:bd:91:37:03:
                    a7:bb:dc:ed:e7:01:1e:f2:fd:df:0c:d7:dc:4d:a3:
                    6d:b7:9b:43:2a:07:28:7f:02:ad:57:b7:2a:9c:c1:
                    60:77:d4:d4:12:63:e8:cc:24:ce:c5:c7:ae:ad:05:
                    fd:44:a4:a3:a6:e3:fd:e0:ff:f1:b8:b8:2a:81:04:
                    e5:64:44:a5:23:18:0c:8c:f7:b4:db:a2:00:85:21:
                    fe:3b:83:75:20:64:e2:3a:00:d8:d7:3c:b8:a4:22:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:30:AA:81:D2:30:6D:E0:6C:51:27:E8:35:15:BF:CB:1B:D6:7E:C3
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3133382e35392e36342e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:8a:3b:11:50:a1:8e:70:bc:f0:c1:7d:54:15:d0:f1:5b:
         54:ee:54:e7:3d:be:32:ce:80:1b:9d:92:d4:5c:d2:12:d2:26:
         90:03:05:6e:a5:5c:01:50:e4:aa:63:4e:a3:42:cc:ec:d0:cf:
         4c:d4:19:fc:69:72:13:e7:2e:66:ed:1b:f0:da:7a:56:ea:54:
         45:b1:b3:30:d1:04:ef:1d:fa:1f:f1:c1:3f:14:5f:05:35:5e:
         50:09:aa:2b:13:dc:75:c4:36:ba:cf:09:3d:07:7d:39:15:9b:
         cf:0b:d0:5d:b1:09:62:f7:36:4b:05:21:f4:4f:aa:3d:d0:64:
         43:4f:a0:e1:34:b0:c9:57:57:82:06:9a:2f:b3:01:18:20:05:
         ea:50:ba:e7:a5:47:cc:2c:58:ad:0a:1f:33:64:c6:9f:f6:17:
         72:26:48:0b:1a:33:d1:04:d5:1e:86:54:cb:e2:a5:96:13:98:
         4c:4b:2c:cc:47:77:da:ee:bb:c0:5d:80:14:cb:2b:fc:d3:e0:
         69:75:d9:db:d3:92:bc:9c:98:77:69:32:96:fd:d4:32:f3:71:
         b7:e7:ed:b8:e7:d4:77:77:4e:99:9e:f6:0f:dd:36:2d:58:54:
         75:6c:ad:3f:ef:43:87:07:15:d6:44:94:5e:a5:3e:60:ee:46:
         b1:4b:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:31:16 2026 by rpki-client