This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133382e39372e3137362e302f32322d3234203d3e203532343336.roa
File:                     3133382e39372e3137362e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          Ftu5h0Q6NYcV3US46l/FIAjVildA7ItHTUOTtfR/lLk=
Subject key identifier:   66:94:97:70:A9:71:FE:98:7C:0D:D0:02:D0:7C:2E:50:E5:38:38:98
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       0408261A90BFADBB56BB87C887AB2EEE7E64A811
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133382e39372e3137362e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 06 Jan 2026 19:28:47 +0000
ROA not before:           Tue 06 Jan 2026 19:23:47 +0000
ROA not after:            Tue 05 Jan 2027 19:28:47 +0000
asID:                     52436
IP address blocks:        138.97.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 09:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:08:26:1a:90:bf:ad:bb:56:bb:87:c8:87:ab:2e:ee:7e:64:a8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Jan  6 19:23:47 2026 GMT
            Not After : Jan  5 19:28:47 2027 GMT
        Subject: CN=66949770A971FE987C0DD002D07C2E50E5383898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:27:47:4a:04:b4:50:10:8a:e7:7e:92:70:
                    db:6b:6c:10:0a:2a:52:12:67:6e:10:58:7d:c5:6b:
                    66:be:eb:e7:70:90:d1:7c:95:de:37:aa:bd:5f:69:
                    63:74:60:89:7b:32:85:11:d8:33:4f:22:c3:30:df:
                    e5:72:63:38:20:73:f4:51:08:2b:d6:49:a6:b4:24:
                    f9:ae:72:5a:cb:2c:fa:b7:24:aa:a2:06:57:1a:f7:
                    fc:16:7b:91:f5:16:02:dd:18:5b:4e:8a:14:3d:94:
                    b5:45:e9:69:df:c4:b3:8d:4d:44:ae:14:38:ab:d2:
                    6d:32:71:b0:09:e5:fa:99:3d:8c:dd:29:3f:d5:35:
                    d8:a3:1c:97:3f:8b:b9:de:7d:f4:53:ea:a5:1e:28:
                    a8:8c:cc:11:14:66:bc:5c:a2:66:d2:b8:3a:61:d9:
                    28:04:f7:3c:5b:46:9b:87:c7:c2:5b:aa:3e:c8:7e:
                    bc:79:04:62:ac:71:f9:dd:f0:6d:62:28:da:2b:ea:
                    ae:34:ee:6f:cf:72:20:69:96:bd:27:bc:c1:61:ff:
                    5c:7b:e5:1d:68:c9:e3:a7:b2:b9:4a:c3:f8:88:89:
                    05:73:8e:c0:ca:a5:69:86:95:26:49:05:80:87:08:
                    3c:e8:78:6b:b4:cb:63:68:48:f0:77:48:88:a9:76:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:97:70:A9:71:FE:98:7C:0D:D0:02:D0:7C:2E:50:E5:38:38:98
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133382e39372e3137362e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:c4:6e:c3:b9:b9:34:71:bf:54:14:17:da:c0:53:b4:e8:
         14:be:58:6a:78:ad:87:fa:6c:4c:02:44:3c:0b:45:14:94:a6:
         59:3c:14:35:04:9a:87:55:19:3a:c7:ed:5d:fb:cf:fe:52:a7:
         6b:61:b5:53:e7:b2:39:96:86:a3:4d:80:60:4a:3b:70:05:9f:
         b9:2a:08:e3:6f:b0:fc:da:4f:44:01:84:9f:c2:d1:49:f7:a8:
         b5:93:d8:e2:2c:02:7b:98:df:41:e9:ee:b8:3d:3c:b5:8d:3a:
         9e:44:bc:6d:19:d1:9a:ae:ec:07:e7:c9:7f:a9:75:62:07:0a:
         3e:06:a3:37:6b:b9:34:18:4e:77:dc:0b:3d:3e:35:b7:39:e7:
         cd:a0:5a:64:1e:1c:40:70:37:9d:d4:49:4d:6b:54:3d:91:50:
         b1:ff:98:7b:23:70:f5:47:a0:c2:5f:e5:81:37:b0:95:b2:4e:
         c6:79:0d:9d:54:c4:31:16:c9:8a:f9:9a:a2:29:aa:69:2a:fd:
         6c:a4:5a:37:d3:f5:5c:05:63:2c:d2:1d:3c:b8:f7:a1:40:88:
         f1:7f:27:c1:b1:4b:bf:64:9b:bc:ae:2b:32:7b:16:b2:03:f2:
         a4:36:6f:b5:83:67:cf:08:6c:73:b1:cd:f6:1a:a7:49:3a:17:
         cc:c9:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:55:14 2026 by rpki-client