This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa
File:                     3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          FNj3rLv8GaiUlko9fBD2z8Wq5z5A76m2Lddb4RVLE24=
Subject key identifier:   54:60:1D:24:72:18:97:ED:84:F4:5C:BF:B8:90:C4:96:26:F5:08:35
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       1D189AA0B2C6E1ABE751418C64E7EEE9917870FC
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa
Signing time:             Tue 06 Jan 2026 19:33:38 +0000
ROA not before:           Tue 06 Jan 2026 19:28:38 +0000
ROA not after:            Tue 05 Jan 2027 19:33:38 +0000
asID:                     262199
IP address blocks:        138.99.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 22:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:9a:a0:b2:c6:e1:ab:e7:51:41:8c:64:e7:ee:e9:91:78:70:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Jan  6 19:28:38 2026 GMT
            Not After : Jan  5 19:33:38 2027 GMT
        Subject: CN=54601D24721897ED84F45CBFB890C49626F50835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:5f:d3:76:e1:96:a3:68:47:42:08:2d:da:
                    c8:0b:7c:0f:33:6b:1a:0c:62:a5:b9:39:30:b4:10:
                    6b:46:de:68:4d:99:d3:e1:09:7f:7a:94:3b:0b:d8:
                    35:80:8f:46:35:6e:03:dd:f7:cc:40:5b:5b:a4:82:
                    7e:07:38:1a:81:48:2f:13:77:8c:ae:e3:5d:e4:aa:
                    3e:d4:21:78:ac:d3:a3:52:ea:a2:6e:79:02:49:3b:
                    16:e3:37:ca:cc:ab:2f:f8:c2:44:50:c6:52:67:7e:
                    0a:ec:5d:ad:44:60:e9:c3:4a:2a:b9:8b:4c:17:ce:
                    82:e8:cf:22:9d:3c:df:9e:b2:59:15:e1:2a:a2:01:
                    43:d6:03:5a:24:68:02:93:00:60:fe:bd:c8:d3:71:
                    37:f3:db:e6:33:42:cc:4c:dc:22:92:60:c0:b8:0b:
                    a4:90:af:77:b6:b5:c9:a2:bb:c5:f6:4f:9f:79:f7:
                    a7:b6:13:20:29:45:53:23:de:ba:ea:f0:50:0c:40:
                    68:e3:92:70:6c:0c:fd:72:4e:f0:d0:e0:db:ff:76:
                    ed:76:14:64:0f:37:f4:58:4f:36:ac:bf:c7:a8:4d:
                    64:7b:9c:e2:cc:ce:ea:06:a2:3e:e6:5e:65:57:d7:
                    bb:af:0e:de:be:00:e7:30:06:20:5d:da:f9:a8:ed:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:60:1D:24:72:18:97:ED:84:F4:5C:BF:B8:90:C4:96:26:F5:08:35
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:11:5e:f3:89:14:ab:19:8a:b9:6a:8e:00:99:5b:22:2d:
         17:70:53:d5:6c:4d:97:ff:e6:c4:f9:eb:5e:86:bd:83:76:c1:
         b6:60:31:89:32:cb:88:43:36:1a:4b:f2:50:6a:c0:6c:47:19:
         82:56:ae:2e:27:bd:aa:8e:0a:bf:5e:53:d7:b8:a6:53:f6:d3:
         fc:89:6f:95:9c:be:5b:48:2c:ad:cc:0d:fb:45:d4:b2:95:e9:
         80:a2:41:32:f3:e8:d2:b3:93:d8:bb:d2:28:93:c9:22:c3:25:
         f9:dd:0a:19:f1:b7:0a:d4:04:0a:b1:2b:bb:25:be:74:29:ab:
         8c:32:2d:a7:b2:15:cc:76:d0:74:1a:9b:ca:ac:35:d4:3c:18:
         24:e4:d7:04:c5:f9:ba:4a:92:fa:e8:83:fd:f2:f3:41:27:19:
         ba:21:e1:cd:79:91:71:c2:3d:ef:8e:88:0c:65:1e:34:f3:38:
         cf:7c:0f:c1:87:07:86:e1:ef:9a:06:23:ea:52:14:09:4d:41:
         76:f3:49:e1:37:fe:e8:10:80:b9:aa:7d:e7:6b:f1:0b:fb:25:
         ed:fe:84:ae:51:34:f0:b9:92:69:ba:6b:36:3b:2b:90:cb:61:
         d8:8a:1c:95:74:63:ad:02:08:1d:06:5a:b5:3d:78:d7:d5:be:
         38:c8:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:28:17 2026 by rpki-client