This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
File:                     3133382e39342e3134342e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier:          5lBquffczTm6MRMGoYFDAijIBL08S1BP91pJ8M0Tbgg=
Subject key identifier:   A2:3C:D3:1D:F1:EA:1B:40:AD:B9:68:E5:5B:C0:78:B2:DF:65:75:6C
Certificate issuer:       /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial:       028B406A389B76EDFBE30380E1E5880C0EA5D3E4
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
Signing time:             Tue 06 Jan 2026 19:19:29 +0000
ROA not before:           Tue 06 Jan 2026 19:14:29 +0000
ROA not after:            Tue 05 Jan 2027 19:19:29 +0000
asID:                     22869
IP address blocks:        138.94.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8b:40:6a:38:9b:76:ed:fb:e3:03:80:e1:e5:88:0c:0e:a5:d3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231411337300474BC5489725C8707684F70A876D
        Validity
            Not Before: Jan  6 19:14:29 2026 GMT
            Not After : Jan  5 19:19:29 2027 GMT
        Subject: CN=A23CD31DF1EA1B40ADB968E55BC078B2DF65756C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:78:bc:d8:e6:b6:46:64:9d:11:38:36:53:
                    f1:17:6b:d0:e8:ec:af:83:ed:66:06:39:c4:a8:13:
                    09:1b:4d:89:9d:be:f7:07:39:8d:32:01:20:f1:9d:
                    fe:e2:63:31:7a:d9:eb:71:ef:03:be:0d:e8:6a:a3:
                    2c:50:00:11:e7:07:1e:d8:bf:05:e5:ec:66:b7:5f:
                    43:28:92:5f:a6:02:3f:ec:a9:4b:14:6e:a1:42:a3:
                    8e:85:4f:d3:ee:7a:ab:8e:ea:d9:43:90:7e:fe:3d:
                    13:48:aa:77:cb:c7:8a:2f:b3:c3:6e:e9:af:b0:48:
                    3f:74:70:e9:78:80:50:92:27:ce:e7:0a:4d:5c:f4:
                    d5:25:ca:ae:2a:6f:bf:fd:5a:01:ef:fc:4e:c6:62:
                    91:0f:1d:67:e1:24:d3:7f:2a:d6:a0:54:c7:c9:19:
                    3e:ca:f5:11:17:fe:5e:88:c2:80:0a:28:98:42:ae:
                    b0:7a:2c:88:7c:7c:34:de:24:47:bb:2c:b1:68:b1:
                    8e:46:a3:2f:3b:b0:13:56:4e:be:94:74:96:8f:6b:
                    9c:98:fd:90:fc:e7:f6:df:a2:d6:44:6f:a3:10:24:
                    19:9b:63:b2:b9:f4:e9:d5:ce:a4:23:9d:34:a6:9d:
                    d2:90:90:ad:8b:24:61:54:c7:5e:1c:b0:75:6c:e5:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:D3:1D:F1:EA:1B:40:AD:B9:68:E5:5B:C0:78:B2:DF:65:75:6C
            X509v3 Authority Key Identifier:
                keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:49:eb:57:6d:71:a5:7b:d6:63:83:01:2a:2f:3d:83:56:fe:
         0f:99:c6:e2:5d:8b:1c:6d:1d:59:12:17:4a:46:40:a9:57:d5:
         d3:7f:f6:ee:86:64:5c:66:08:83:a1:09:2a:39:95:95:7a:a2:
         c1:43:05:b5:7d:12:3d:a8:f2:29:eb:e1:c4:bc:87:1e:82:48:
         2f:6f:8d:a3:70:bf:3f:a8:f2:b2:da:b9:2b:6d:10:b1:c3:52:
         94:8a:77:c7:58:82:75:32:ec:42:9d:b0:11:db:a4:d5:ee:44:
         23:9b:89:63:65:e4:bd:09:52:26:ee:b1:ce:60:bc:37:bb:c4:
         0a:57:6b:eb:36:10:c7:91:6f:47:80:f9:d6:4a:c7:81:21:3a:
         6a:42:c8:d2:84:95:09:c0:26:d2:fb:f8:d9:ca:ec:fc:71:fd:
         1f:f5:97:95:e4:f2:70:45:13:bb:e8:80:31:26:8a:9e:a3:d8:
         c3:ee:8a:3a:4d:e9:00:ea:cd:fa:d9:d8:2a:b1:24:c4:bf:30:
         16:2d:31:01:cd:d4:20:f3:c2:7a:22:25:83:fc:eb:67:3d:38:
         3d:a6:f0:d7:c8:a1:29:10:01:df:1c:7d:2d:a7:6d:ba:6e:89:
         7a:34:03:bf:dc:93:83:2f:c7:1c:3e:95:ef:aa:9c:d6:8f:d5:
         7f:dd:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:46:24 2026 by rpki-client