This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134352e302f32342d3234203d3e203332303334.roa
File:                     3133382e33362e3134352e302f32342d3234203d3e203332303334.roa (raw, json)
Hash identifier:          SPNxVH6SO43yz6Q757K9WLG+E+XvWJ+/t5Zpc/DrXzE=
Subject key identifier:   4F:17:7E:C5:D4:8C:B3:23:E3:4D:12:50:E4:D0:97:78:A5:44:50:84
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       600A4801EE0E7D66491DDCE4B3D173340D98084C
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134352e302f32342d3234203d3e203332303334.roa
Signing time:             Tue 06 Jan 2026 19:15:41 +0000
ROA not before:           Tue 06 Jan 2026 19:10:41 +0000
ROA not after:            Tue 05 Jan 2027 19:15:41 +0000
asID:                     32034
IP address blocks:        138.36.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:48:01:ee:0e:7d:66:49:1d:dc:e4:b3:d1:73:34:0d:98:08:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Jan  6 19:10:41 2026 GMT
            Not After : Jan  5 19:15:41 2027 GMT
        Subject: CN=4F177EC5D48CB323E34D1250E4D09778A5445084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:de:b0:9e:fb:ea:c5:14:ad:a9:17:6d:c9:
                    f0:14:1d:15:3f:e5:f4:03:c4:fa:14:02:86:c5:30:
                    b5:f3:a4:69:22:3b:8c:df:82:3c:67:a5:24:51:ae:
                    e8:b3:3e:0f:e1:6a:af:88:41:7c:0f:65:cf:af:02:
                    9c:5b:41:dd:26:d7:59:47:ce:31:1f:65:84:e7:d9:
                    88:e2:55:28:da:a3:1a:0c:66:74:3e:0f:f1:56:ff:
                    bb:02:73:91:42:81:e2:e5:ea:0e:3f:33:3f:bc:1d:
                    a5:6f:32:7e:74:f3:12:58:4d:b8:04:07:b3:b7:92:
                    7f:f8:f0:3f:bd:c5:3a:cf:6d:ed:fd:a7:8f:27:56:
                    10:2f:4a:c7:a8:a2:fa:33:24:2c:47:d2:92:f5:0b:
                    48:42:3d:5c:77:c0:a0:3e:69:50:52:41:84:80:6e:
                    c4:5d:41:51:16:d5:7f:e0:53:b6:20:31:b5:4a:14:
                    be:c3:3a:96:e8:3e:06:53:b1:8e:53:ec:72:ad:08:
                    97:3e:d9:67:a6:e2:35:60:b6:b4:34:65:23:73:50:
                    1d:41:9f:ee:41:9d:7e:ee:61:8a:f8:11:c5:ac:42:
                    1b:3d:36:88:00:1a:6b:2a:6f:60:9c:2b:f7:48:aa:
                    ff:29:0b:03:fc:dd:1c:30:2b:35:31:e9:e7:c2:96:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:17:7E:C5:D4:8C:B3:23:E3:4D:12:50:E4:D0:97:78:A5:44:50:84
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134352e302f32342d3234203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:45:13:e7:1c:0f:fa:42:91:31:30:93:be:11:cc:f6:4e:2a:
         d8:36:d5:45:49:17:4e:22:a9:bb:d3:9c:e1:f1:a2:6a:35:71:
         e4:fa:67:54:d1:be:c3:7f:0a:29:63:77:35:57:f8:ec:cd:4a:
         40:e0:9e:a4:2b:09:3f:84:5a:99:c9:1d:f9:56:7e:18:21:60:
         1f:cb:95:cf:ae:84:33:57:1a:b1:cf:cf:ce:90:02:11:8f:02:
         81:ef:b0:8a:34:95:2c:61:25:ba:05:ab:cd:18:12:85:03:87:
         33:a2:99:07:df:56:d8:12:66:7a:c5:70:31:d5:11:19:1f:44:
         1f:f6:80:26:13:b1:e8:1e:81:35:13:be:b0:d2:bf:ab:e2:7d:
         10:2a:e5:4b:b0:10:c3:a5:55:b3:10:4e:c0:36:e6:f3:cf:b9:
         9c:bb:4c:45:57:c0:8b:7d:d4:f6:42:5d:a3:6c:6e:83:40:01:
         ec:af:40:e0:63:7c:1d:64:16:9f:92:5e:8b:b3:39:52:43:d8:
         7a:4e:dd:1a:9d:45:0c:c9:4a:7c:34:1e:d6:ce:a0:d3:a1:9c:
         e9:d0:d6:f9:53:43:27:24:ef:06:e9:92:8d:2a:76:a3:d0:d1:
         5e:76:79:53:a5:65:7c:c9:fb:9b:c6:18:6c:23:5d:41:59:4b:
         36:b0:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:09:28 2026 by rpki-client