This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
File:                     3133382e302e3132332e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          T/1K1HqJBNTPvzAHFLZHCFCj1sRFpy45xEJy4PavdcE=
Subject key identifier:   48:32:F4:22:DC:70:10:0B:F5:3B:76:AD:C5:75:82:57:96:44:DB:84
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       46ED676B2785C9EB874B261180008FD76BDDCCC6
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 06 Jan 2026 19:46:15 +0000
ROA not before:           Tue 06 Jan 2026 19:41:15 +0000
ROA not after:            Tue 05 Jan 2027 19:46:15 +0000
asID:                     64139
IP address blocks:        138.0.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ed:67:6b:27:85:c9:eb:87:4b:26:11:80:00:8f:d7:6b:dd:cc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Jan  6 19:41:15 2026 GMT
            Not After : Jan  5 19:46:15 2027 GMT
        Subject: CN=4832F422DC70100BF53B76ADC57582579644DB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:c4:72:fd:c5:82:8e:f4:5b:04:7c:d5:42:
                    34:cf:d3:46:45:0a:f7:67:de:ad:a2:a8:15:43:07:
                    35:40:8d:4e:00:5e:92:6a:d9:73:8b:06:a6:74:4f:
                    22:b9:1c:87:05:5b:d7:9a:2f:f9:3f:84:ef:7a:90:
                    f3:c6:c4:32:f6:76:cd:66:4c:d6:54:47:01:b6:5d:
                    d1:38:a3:e4:38:29:64:3a:01:ae:ac:e1:41:b6:70:
                    47:07:cb:62:7c:5f:8b:b7:6d:93:4e:48:c9:f5:a3:
                    33:56:fa:e3:72:b3:44:43:85:00:de:c8:a5:69:f3:
                    6c:69:47:3d:ac:5e:e1:94:24:cb:0a:9f:1e:70:02:
                    8c:db:b7:a3:70:e6:53:90:a4:8a:8d:76:89:90:6c:
                    9d:40:00:0a:b0:2a:d7:69:1f:8c:a8:09:d1:dd:47:
                    41:fa:6a:03:78:1d:a1:b2:f5:ff:d3:64:f3:54:55:
                    e5:c2:fc:77:3f:a5:b0:ad:cf:51:be:b6:6a:30:9a:
                    e5:04:80:e1:98:d8:f0:97:1e:6e:e6:a3:4a:6b:3e:
                    97:0b:92:e5:fc:2a:44:40:42:41:5f:a8:68:c1:de:
                    f1:f0:c3:26:14:89:b1:f3:62:c0:be:b6:31:9b:57:
                    3a:5c:54:73:56:cc:96:ee:b9:1a:15:ca:05:9c:a3:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:F4:22:DC:70:10:0B:F5:3B:76:AD:C5:75:82:57:96:44:DB:84
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:10:ce:07:e1:25:d7:83:91:96:fc:9c:0e:d2:94:cd:65:5a:
         53:0f:99:e8:79:2e:0b:32:fc:0d:ad:be:34:a9:12:a4:c0:1c:
         b6:e9:07:cf:be:38:c6:92:3b:ae:b2:a5:49:47:38:6f:b8:94:
         72:a2:13:a1:47:b8:96:a7:b0:8d:e9:29:c9:90:f7:98:26:f4:
         b4:2b:31:57:60:45:e9:4c:e9:d7:38:25:e1:13:94:07:10:76:
         e9:c6:36:37:a9:3e:44:97:0c:9a:38:ad:d4:d1:17:e2:a8:cb:
         7b:7b:d9:06:f1:ef:54:26:6f:1d:eb:41:8d:6d:ea:71:e0:a9:
         de:72:d9:68:8f:4a:8f:b5:b3:ac:4a:0a:4a:9b:bc:c9:39:76:
         ce:41:cf:9b:7c:23:9e:86:c4:28:21:86:51:c6:7d:67:ca:a8:
         aa:44:18:b2:7b:77:4e:49:39:b4:75:0f:48:1c:e4:d8:88:85:
         21:50:46:54:d2:66:55:1e:09:15:aa:d1:28:47:ec:db:58:5b:
         8c:e2:f1:53:37:ff:5e:3d:2e:6f:da:cf:80:67:87:89:22:a3:
         53:42:7b:53:28:20:ed:24:b5:e1:33:23:ac:23:a1:de:c3:52:
         c1:02:93:9a:b0:eb:af:3b:5f:c2:cb:b7:eb:0e:21:6f:ed:13:
         69:74:3f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:23:01 2026 by rpki-client