This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/3133382e3132312e38342e302f32322d3234203d3e20323633373839.roa
File:                     3133382e3132312e38342e302f32322d3234203d3e20323633373839.roa (raw, json)
Hash identifier:          K6QkuSZt9Cwauptp5ONIUnf/DqQnE164HEhNKbyDnMs=
Subject key identifier:   3B:56:21:97:AF:05:0C:07:B5:02:8C:49:F4:A1:B2:3D:F1:09:BF:6B
Certificate issuer:       /CN=DA177D3E573B23B5A1C25781D96D90D3EA02130C
Certificate serial:       1266411847470525163EC77ABDA322BD9546A23F
Authority key identifier: DA:17:7D:3E:57:3B:23:B5:A1:C2:57:81:D9:6D:90:D3:EA:02:13:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/3133382e3132312e38342e302f32322d3234203d3e20323633373839.roa
Signing time:             Tue 06 Jan 2026 19:06:04 +0000
ROA not before:           Tue 06 Jan 2026 19:01:04 +0000
ROA not after:            Tue 05 Jan 2027 19:06:04 +0000
asID:                     263789
IP address blocks:        138.121.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:66:41:18:47:47:05:25:16:3e:c7:7a:bd:a3:22:bd:95:46:a2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA177D3E573B23B5A1C25781D96D90D3EA02130C
        Validity
            Not Before: Jan  6 19:01:04 2026 GMT
            Not After : Jan  5 19:06:04 2027 GMT
        Subject: CN=3B562197AF050C07B5028C49F4A1B23DF109BF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:41:09:4f:c1:d6:bb:47:72:92:9b:44:86:
                    15:c1:30:86:b1:ac:94:bf:16:40:de:b1:b5:89:60:
                    13:67:b7:e5:e1:ea:0e:0e:dc:b5:35:d8:2d:ae:cb:
                    d9:6b:7a:16:a6:a1:17:65:54:5b:79:af:03:5c:04:
                    c0:21:bb:89:26:88:b3:1f:4a:e4:d9:5f:16:f1:0d:
                    51:3c:27:b0:71:ec:b0:43:b2:0e:7c:1c:05:ca:5c:
                    72:f9:65:51:21:db:8b:68:be:01:8a:37:c3:49:53:
                    46:2e:ce:81:59:f6:61:da:dd:55:9b:1f:db:33:95:
                    d6:ed:04:46:ac:6f:d7:2b:1f:73:ec:54:27:b8:d9:
                    87:c3:34:15:84:a1:e1:fd:e4:11:8b:e4:25:fe:b4:
                    a0:15:47:3d:0e:32:84:62:8c:b7:a0:b8:03:99:2b:
                    4a:0f:2c:40:6c:16:4e:67:1d:d6:47:b2:ef:67:89:
                    ba:17:75:fb:d9:3f:c1:1e:ba:12:37:ac:8f:93:f5:
                    51:b8:86:c1:28:f4:b0:30:90:51:3f:d6:4a:55:82:
                    7b:73:91:fd:87:a1:3b:fe:9b:8b:4a:49:9d:61:ed:
                    6a:b1:c3:35:31:a6:21:0e:6c:bc:99:23:92:51:f5:
                    d3:bf:72:d3:9c:d3:f4:39:c8:73:80:6c:52:b1:0c:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:56:21:97:AF:05:0C:07:B5:02:8C:49:F4:A1:B2:3D:F1:09:BF:6B
            X509v3 Authority Key Identifier:
                keyid:DA:17:7D:3E:57:3B:23:B5:A1:C2:57:81:D9:6D:90:D3:EA:02:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/3133382e3132312e38342e302f32322d3234203d3e20323633373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:11:77:62:13:8c:31:d3:20:57:bd:55:f0:24:82:58:1a:4c:
         35:4a:34:bb:b0:dd:c0:ea:14:72:86:7f:4b:b5:0c:04:e9:a0:
         ef:90:21:02:de:f8:7a:ae:44:f9:75:53:12:25:ec:17:c8:88:
         35:66:53:07:c3:c8:ec:4d:b7:be:5d:7d:52:ea:d9:1e:ab:d0:
         e5:e3:e6:57:c7:6e:18:3e:61:20:33:29:ea:aa:bc:27:5f:5a:
         21:75:08:3c:17:4d:98:d5:73:33:c8:0d:b3:cf:96:b9:71:d5:
         96:63:10:00:50:24:2d:93:2e:aa:ae:b6:b8:f7:81:b8:88:27:
         97:24:3b:a6:e4:6b:bf:46:1a:25:ea:6f:72:67:2c:6e:6f:2b:
         0b:52:5a:da:cc:6f:4f:ba:39:87:57:6f:95:b9:7a:4b:c9:99:
         96:01:9c:5c:ad:53:9a:41:37:50:44:c7:28:2e:12:52:69:47:
         8a:d8:20:df:e7:43:80:41:e0:0c:53:ab:94:3f:04:6c:5e:8c:
         f4:bb:fa:3e:6f:72:a3:98:77:e3:b9:c0:ad:90:bf:b2:43:6a:
         01:3a:d3:eb:d1:ea:c0:43:fb:11:b5:dc:55:5b:48:bf:e7:0d:
         4c:ef:e5:69:2e:a7:89:99:da:eb:28:7e:43:57:f3:06:7b:29:
         74:31:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:42:06 2026 by rpki-client