This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A18A71492F3E5E321DF8D5506BC3A6D41CBED52DCCB1BAF2346C85E9D654B29F/0/3133382e35392e3130382e302f32322d3234203d3e203134343230.roa
File:                     3133382e35392e3130382e302f32322d3234203d3e203134343230.roa (raw, json)
Hash identifier:          cT4JO3Luw8g//tjj7+/LWhgs//J7zptWxUPYGyP8ZDM=
Subject key identifier:   0D:83:33:EE:03:17:10:1E:99:32:F5:09:32:D3:66:B1:C2:96:63:6F
Certificate issuer:       /CN=7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249
Certificate serial:       6491BD8FD566053533A3396FE9E5427C0453AC6B
Authority key identifier: 7B:E7:CC:31:A1:15:9D:6C:3A:36:D6:F8:B8:3F:91:2F:3D:53:D2:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A18A71492F3E5E321DF8D5506BC3A6D41CBED52DCCB1BAF2346C85E9D654B29F/0/3133382e35392e3130382e302f32322d3234203d3e203134343230.roa
Signing time:             Tue 06 Jan 2026 20:56:58 +0000
ROA not before:           Tue 06 Jan 2026 20:51:58 +0000
ROA not after:            Tue 05 Jan 2027 20:56:58 +0000
asID:                     14420
IP address blocks:        138.59.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A18A71492F3E5E321DF8D5506BC3A6D41CBED52DCCB1BAF2346C85E9D654B29F/0/7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A18A71492F3E5E321DF8D5506BC3A6D41CBED52DCCB1BAF2346C85E9D654B29F/0/7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:91:bd:8f:d5:66:05:35:33:a3:39:6f:e9:e5:42:7c:04:53:ac:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249
        Validity
            Not Before: Jan  6 20:51:58 2026 GMT
            Not After : Jan  5 20:56:58 2027 GMT
        Subject: CN=0D8333EE0317101E9932F50932D366B1C296636F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:68:db:ef:2f:25:f6:26:14:9b:02:cb:2f:
                    75:15:b1:b1:0c:cd:d2:4b:1b:d9:ea:f4:45:67:f0:
                    96:8a:eb:63:51:b3:12:a1:52:6a:bd:52:b4:ce:aa:
                    16:3e:12:71:d4:a1:2a:45:06:89:02:de:50:c3:d3:
                    c3:f0:aa:64:4f:8d:07:d2:13:aa:61:e3:fe:c5:bf:
                    5b:5b:d9:32:17:d9:d0:71:15:11:23:80:89:65:7a:
                    4d:4d:40:29:0d:6b:d6:77:3b:e1:fd:f6:6e:24:d2:
                    81:10:a4:be:b7:e6:2d:37:56:6a:7d:ac:08:4e:87:
                    5a:8c:81:42:ff:40:4f:30:83:3f:2f:c2:65:51:ca:
                    da:22:52:9c:5d:19:8c:d2:2f:78:ab:d4:5f:49:d7:
                    cc:78:92:d9:f3:48:ee:03:78:68:93:6e:78:c4:20:
                    1a:ee:9a:5c:f7:79:3e:40:f0:45:f1:82:ed:42:06:
                    7a:1a:44:59:1f:00:b7:f0:ff:2d:dd:07:61:c1:6a:
                    77:ee:3b:8b:c4:30:b6:11:29:35:c8:71:68:63:5f:
                    a8:11:f1:e2:5f:35:20:35:9f:29:b4:c4:f2:55:ed:
                    d5:1b:be:30:67:89:84:0b:f5:e9:c7:0c:a0:89:73:
                    66:14:a4:20:23:89:cc:a6:de:52:a7:5e:3e:1f:59:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:33:EE:03:17:10:1E:99:32:F5:09:32:D3:66:B1:C2:96:63:6F
            X509v3 Authority Key Identifier:
                keyid:7B:E7:CC:31:A1:15:9D:6C:3A:36:D6:F8:B8:3F:91:2F:3D:53:D2:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A18A71492F3E5E321DF8D5506BC3A6D41CBED52DCCB1BAF2346C85E9D654B29F/0/7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7BE7CC31A1159D6C3A36D6F8B83F912F3D53D249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A18A71492F3E5E321DF8D5506BC3A6D41CBED52DCCB1BAF2346C85E9D654B29F/0/3133382e35392e3130382e302f32322d3234203d3e203134343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:2e:70:60:7b:60:40:51:14:76:c8:83:b8:f9:43:6f:ed:
         be:45:6b:5c:04:24:7b:b0:01:0d:37:70:75:ab:13:fe:15:35:
         44:10:79:f3:a7:be:17:1e:eb:af:24:21:7e:5a:81:9e:21:97:
         ab:6f:4b:8c:d8:0a:d8:63:78:ce:4c:11:d8:60:0a:0c:69:6e:
         a9:ac:77:83:01:57:7c:6b:fc:bb:52:ee:87:15:3a:b0:fd:7f:
         1f:18:aa:bf:d7:d5:9d:2d:84:54:f3:d8:90:f7:e1:55:9a:8a:
         a9:ab:27:58:cd:4b:85:8a:ea:19:5a:5c:3d:ee:b5:66:4b:06:
         dd:3c:77:4f:cb:e8:c6:b1:3b:7c:1c:03:fb:af:10:71:1c:12:
         31:f3:bc:ad:a7:42:41:e1:0b:65:26:2c:32:1b:b2:f9:73:79:
         be:5a:0e:4c:09:d6:85:09:d6:4f:86:1c:26:fd:4e:bb:04:b5:
         33:c3:a5:84:95:e7:6f:24:ea:95:64:5c:71:25:f0:c6:80:03:
         59:40:05:4a:01:c2:ae:e1:7b:4d:66:94:af:6e:cf:72:32:8b:
         77:de:27:6f:54:3f:21:16:82:80:cf:36:a0:d2:6c:39:d6:4f:
         12:b8:53:e1:67:3f:10:18:3c:a6:20:17:0d:2c:ea:a5:d0:f0:
         1d:36:6f:4d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZJG9j9VmBTUzozlv6eVCfARTrGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JFN0NDMzFBMTE1OUQ2QzNBMzZENkY4QjgzRjkxMkYz
RDUzRDI0OTAeFw0yNjAxMDYyMDUxNThaFw0yNzAxMDUyMDU2NThaMDMxMTAvBgNV
BAMTKDBEODMzM0VFMDMxNzEwMUU5OTMyRjUwOTMyRDM2NkIxQzI5NjYzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNnmjb7y8l9iYUmwLLL3UVsbEM
zdJLG9nq9EVn8JaK62NRsxKhUmq9UrTOqhY+EnHUoSpFBokC3lDD08PwqmRPjQfS
E6ph4/7Fv1tb2TIX2dBxFREjgIllek1NQCkNa9Z3O+H99m4k0oEQpL635i03Vmp9
rAhOh1qMgUL/QE8wgz8vwmVRytoiUpxdGYzSL3ir1F9J18x4ktnzSO4DeGiTbnjE
IBrumlz3eT5A8EXxgu1CBnoaRFkfALfw/y3dB2HBanfuO4vEMLYRKTXIcWhjX6gR
8eJfNSA1nym0xPJV7dUbvjBniYQL9enHDKCJc2YUpCAjicym3lKnXj4fWddpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDYMz7gMXEB6ZMvUJMtNmscKWY28wHwYDVR0j
BBgwFoAUe+fMMaEVnWw6Ntb4uD+RLz1T0kkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMThBNzE0OTJGM0U1RTMyMURGOEQ1NTA2QkMzQTZENDFD
QkVENTJEQ0NCMUJBRjIzNDZDODVFOUQ2NTRCMjlGLzAvN0JFN0NDMzFBMTE1OUQ2
QzNBMzZENkY4QjgzRjkxMkYzRDUzRDI0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QkU3Q0MzMUExMTU5RDZDM0Ez
NkQ2RjhCODNGOTEyRjNENTNEMjQ5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE4QTcxNDkyRjNFNUUzMjFERjhENTUwNkJDM0E2RDQxQ0JFRDUyREND
QjFCQUYyMzQ2Qzg1RTlENjU0QjI5Ri8wLzMxMzMzODJlMzUzOTJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNDM0MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoo7bDAN
BgkqhkiG9w0BAQsFAAOCAQEAFW8ucGB7YEBRFHbIg7j5Q2/tvkVrXAQke7ABDTdw
dasT/hU1RBB586e+Fx7rryQhflqBniGXq29LjNgK2GN4zkwR2GAKDGluqax3gwFX
fGv8u1LuhxU6sP1/Hxiqv9fVnS2EVPPYkPfhVZqKqasnWM1LhYrqGVpcPe61ZksG
3Tx3T8voxrE7fBwD+68QcRwSMfO8radCQeELZSYsMhuy+XN5vloOTAnWhQnWT4Yc
Jv1OuwS1M8OlhJXnbyTqlWRccSXwxoADWUAFSgHCruF7TWaUr27PcjKLd94nb1Q/
IRaCgM82oNJsOdZPErhT4Wc/EBg8piAXDSzqpdDwHTZvTQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 04:10:48 2026 by rpki-client