This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233302e302f32342d3234203d3e20323633373235.roa
File:                     3133382e302e3233302e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          gu8ljlPh0lLKj47UftPv1H/vbwavV5mhec8PQptjMew=
Subject key identifier:   BF:B0:08:09:84:9D:54:8D:8C:FB:D4:0F:D5:5A:6D:43:12:B7:6A:E8
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       120079810DCD0EEDF8EA3DA0A38BE73003557116
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233302e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 06 Jan 2026 19:42:31 +0000
ROA not before:           Tue 06 Jan 2026 19:37:31 +0000
ROA not after:            Tue 05 Jan 2027 19:42:31 +0000
asID:                     263725
IP address blocks:        138.0.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:00:79:81:0d:cd:0e:ed:f8:ea:3d:a0:a3:8b:e7:30:03:55:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Jan  6 19:37:31 2026 GMT
            Not After : Jan  5 19:42:31 2027 GMT
        Subject: CN=BFB00809849D548D8CFBD40FD55A6D4312B76AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:ad:8f:e5:98:4d:78:1e:ef:5e:09:93:c1:
                    1a:03:93:1d:73:92:fd:7a:4f:10:22:a6:bf:b8:37:
                    c0:77:bf:5d:5b:85:4c:ad:fc:e7:03:dc:91:b2:8b:
                    43:2a:e8:b3:01:52:c1:80:ca:3e:11:47:bd:a7:f0:
                    ac:b7:d5:4f:68:d4:7f:76:ad:b5:d3:12:15:8b:92:
                    c7:fd:77:7e:30:fc:d6:55:f5:91:c7:a6:55:43:f7:
                    c5:86:4b:08:4e:ca:df:8a:80:61:a8:04:b8:6b:1f:
                    65:76:ed:62:91:d9:4a:a8:55:af:a0:67:49:e9:9a:
                    8a:22:3a:ea:e4:03:18:17:b1:5b:60:23:3a:7e:a8:
                    2d:82:65:53:98:e4:7c:f6:0a:52:aa:a2:b6:4f:bb:
                    28:3f:ba:18:76:d2:c8:65:8c:b9:dd:c7:ca:1e:7e:
                    a0:52:81:a2:41:89:de:97:4b:09:77:ec:13:e4:d5:
                    72:98:6d:e9:9f:aa:87:94:f1:e4:64:07:da:f0:e3:
                    83:2c:6c:90:de:93:37:40:61:46:4e:b8:c0:c5:68:
                    c8:36:d6:99:24:04:1f:d7:08:3d:d5:66:37:6a:eb:
                    f0:59:27:e5:c4:0a:ab:82:41:74:39:d2:f5:15:b8:
                    6d:b2:b7:bd:04:85:e9:c5:44:9f:03:6e:61:d4:84:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:08:09:84:9D:54:8D:8C:FB:D4:0F:D5:5A:6D:43:12:B7:6A:E8
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233302e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e2:78:fe:08:50:60:5e:5e:e3:f5:e9:52:20:37:77:62:9d:
         db:b4:cc:ab:9f:5a:06:3e:5a:18:c3:a5:ea:a3:17:8f:ad:43:
         57:73:14:48:91:d0:24:4e:96:8a:df:85:48:e0:03:97:16:7e:
         37:d5:1b:2a:09:0d:a6:42:87:9e:e6:b6:c4:e0:5d:75:d0:5e:
         09:04:86:a9:fb:7a:4a:ab:3d:db:e4:81:c2:4a:75:13:3f:41:
         fb:e5:b5:02:e9:82:b9:3c:f4:9c:3b:40:40:c4:d5:83:d0:f1:
         af:6a:2d:18:c0:0d:2a:e3:2a:b1:75:44:a6:7e:57:6f:c4:4c:
         9e:cf:7b:46:9b:d8:17:d1:ba:a8:13:bf:73:97:66:20:09:cf:
         bd:0b:81:9d:0e:8a:7c:d7:7c:2d:ff:ad:f3:89:82:40:58:5a:
         9f:ed:c1:09:22:d3:cb:60:5c:c2:3a:e2:ac:10:02:dd:24:5c:
         b3:9a:c6:a1:28:a2:82:cd:43:23:19:3d:b6:b5:19:5f:c2:ad:
         21:0d:28:f0:e5:47:e5:d7:2b:a2:8f:93:f2:e6:a9:11:e0:ea:
         23:b7:2e:69:c0:44:18:c9:fc:12:1f:3a:ff:68:07:93:0c:0c:
         36:11:cd:0c:95:38:bf:2e:87:cb:7f:04:ac:29:b6:49:5d:e6:
         f1:6c:29:6f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEgB5gQ3NDu346j2go4vnMANVcRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ2Mzg5RUI5MzQ1MDcxRjMwQjIzOTM4QkFBRERFMzZB
REQ3QUUzNDAeFw0yNjAxMDYxOTM3MzFaFw0yNzAxMDUxOTQyMzFaMDMxMTAvBgNV
BAMTKEJGQjAwODA5ODQ5RDU0OEQ4Q0ZCRDQwRkQ1NUE2RDQzMTJCNzZBRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3a2P5ZhNeB7vXgmTwRoDkx1z
kv16TxAipr+4N8B3v11bhUyt/OcD3JGyi0Mq6LMBUsGAyj4RR72n8Ky31U9o1H92
rbXTEhWLksf9d34w/NZV9ZHHplVD98WGSwhOyt+KgGGoBLhrH2V27WKR2UqoVa+g
Z0npmooiOurkAxgXsVtgIzp+qC2CZVOY5Hz2ClKqorZPuyg/uhh20shljLndx8oe
fqBSgaJBid6XSwl37BPk1XKYbemfqoeU8eRkB9rw44MsbJDekzdAYUZOuMDFaMg2
1pkkBB/XCD3VZjdq6/BZJ+XECquCQXQ50vUVuG2yt70EhenFRJ8DbmHUhOf7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUv7AICYSdVI2M+9QP1VptQxK3augwHwYDVR0j
BBgwFoAUvWOJ65NFBx8wsjk4uq3eNq3XrjQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQjk0QkM3NDA2REVCQUU5QzdBNTI3N0Q0RjBFRTc5M0Q0
RDMxREQxMDUxMzFFREFCNDc0NDA4N0MwNDc2QzdELzAvQkQ2Mzg5RUI5MzQ1MDcx
RjMwQjIzOTM4QkFBRERFMzZBREQ3QUUzNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDYzODlFQjkzNDUwNzFGMzBC
MjM5MzhCQUFEREUzNkFERDdBRTM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUI5NEJDNzQwNkRFQkFFOUM3QTUyNzdENEYwRUU3OTNENEQzMUREMTA1
MTMxRURBQjQ3NDQwODdDMDQ3NkM3RC8wLzMxMzMzODJlMzAyZTMyMzMzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIoA5jAN
BgkqhkiG9w0BAQsFAAOCAQEAL+J4/ghQYF5e4/XpUiA3d2Kd27TMq59aBj5aGMOl
6qMXj61DV3MUSJHQJE6Wit+FSOADlxZ+N9UbKgkNpkKHnua2xOBdddBeCQSGqft6
Sqs92+SBwkp1Ez9B++W1AumCuTz0nDtAQMTVg9Dxr2otGMANKuMqsXVEpn5Xb8RM
ns97RpvYF9G6qBO/c5dmIAnPvQuBnQ6KfNd8Lf+t84mCQFhan+3BCSLTy2Bcwjri
rBAC3SRcs5rGoSiigs1DIxk9trUZX8KtIQ0o8OVH5dcroo+T8uapEeDqI7cuacBE
GMn8Eh86/2gHkwwMNhHNDJU4vy6Hy38ErCm2SV3m8Wwpbw==
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:36:33 2026 by rpki-client