This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa
File:                     3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa (raw, json)
Hash identifier:          HSEjFB7Sk/FJC5LMFMZxvMrhcFGBb8/1/z4KECz/M5Q=
Subject key identifier:   3F:67:93:96:55:50:82:3A:9F:BD:E0:D1:D6:13:C7:AC:B9:62:E3:61
Certificate issuer:       /CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
Certificate serial:       253FBB88A921F1E47C7D023DEF234B3F56E756FB
Authority key identifier: 0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa
Signing time:             Thu 08 Jan 2026 20:59:32 +0000
ROA not before:           Thu 08 Jan 2026 20:54:32 +0000
ROA not after:            Thu 07 Jan 2027 20:59:32 +0000
asID:                     270008
IP address blocks:        189.127.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3f:bb:88:a9:21:f1:e4:7c:7d:02:3d:ef:23:4b:3f:56:e7:56:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78
        Validity
            Not Before: Jan  8 20:54:32 2026 GMT
            Not After : Jan  7 20:59:32 2027 GMT
        Subject: CN=3F6793965550823A9FBDE0D1D613C7ACB962E361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:7a:63:ef:d4:56:b5:b2:84:c5:d7:58:63:
                    a6:05:be:c1:33:b4:7f:4f:ce:5f:92:f3:53:dc:a6:
                    e6:4e:2a:e8:78:ca:0d:3f:71:25:a7:6c:4e:fc:c6:
                    b0:51:96:df:b0:8f:98:61:42:94:85:fc:08:12:ee:
                    6b:cf:4d:7b:79:33:98:f3:98:c6:f9:63:31:9c:33:
                    ff:cd:2d:43:09:67:da:87:dc:d5:0d:00:a1:02:7d:
                    e6:d8:e2:e1:33:99:d2:ca:c1:16:db:1b:31:70:ac:
                    b5:27:c1:ce:cc:b7:f6:21:a7:20:51:e4:74:18:1d:
                    1e:a8:80:fd:08:0d:a4:57:b3:e2:e2:88:c5:2a:6d:
                    ce:d8:27:ba:d4:9a:c7:6c:18:12:8c:ea:26:86:bf:
                    46:fc:14:67:34:11:78:26:ef:a9:09:1b:68:52:21:
                    cc:46:3c:42:44:ce:8e:2d:d2:8c:1d:c1:01:72:4f:
                    e7:c3:ea:e7:f5:7d:66:f9:8a:c0:2b:ed:db:1b:1f:
                    b2:9b:e2:48:79:e7:d7:19:2a:c1:e7:0b:4f:8d:9a:
                    78:a5:4b:2b:26:4e:79:f9:41:44:69:f9:15:86:0c:
                    31:c5:3c:cc:58:46:ff:c6:31:b0:d0:9c:fc:5c:74:
                    b0:b3:6d:c5:9d:38:04:e5:aa:b7:e7:7a:e9:0a:86:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:67:93:96:55:50:82:3A:9F:BD:E0:D1:D6:13:C7:AC:B9:62:E3:61
            X509v3 Authority Key Identifier:
                keyid:0D:00:66:D8:BE:01:65:01:2A:67:FD:4F:AE:BB:C4:B9:F0:CE:9A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D0066D8BE0165012A67FD4FAEBBC4B9F0CE9A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D9FA7F90454EB5F4C1D880F29145513AB1A55114346EAA203E39C1F0142811/0/3138392e3132372e3133372e302f32342d3234203d3e20323730303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:12:d1:4f:1b:e5:15:f6:83:99:20:be:94:a5:82:30:2b:8e:
         34:50:cb:f5:f6:9d:20:db:32:b2:3b:4e:5d:15:50:05:14:b2:
         59:d0:f8:9b:34:1c:03:4f:c0:b4:bd:16:f1:3d:ad:38:3a:bd:
         3a:5d:11:d2:06:89:0b:de:6c:53:90:11:bb:0d:b2:29:bd:41:
         22:a8:da:8c:e8:13:49:61:e1:20:e7:53:f4:e9:86:aa:22:89:
         0c:90:c1:76:43:4b:ef:68:7a:96:95:65:71:21:3f:0e:3d:fb:
         38:a9:8d:46:ca:c4:8e:5e:ae:11:5d:ac:0c:81:41:10:a1:5b:
         40:36:b8:81:65:54:ae:7e:f2:74:92:82:f3:98:af:16:67:a5:
         6f:a4:ba:4c:93:e0:c9:ec:0c:33:22:5a:e8:58:bf:2c:64:75:
         49:cc:f8:c2:d0:64:04:ae:d6:38:25:ec:cd:cf:dd:9d:38:0a:
         15:93:eb:9f:a6:b7:5e:cf:15:8f:ec:7f:5e:e7:b2:2b:3e:71:
         96:12:94:36:bc:3d:eb:35:b7:cc:a1:61:63:34:90:13:a2:a0:
         37:90:17:5d:de:d8:55:5e:ee:14:91:e5:73:a6:77:9b:66:ca:
         78:f1:74:ef:30:de:f9:82:f2:b6:ee:d6:f9:a4:c4:d9:20:9a:
         97:11:0e:7f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJT+7iKkh8eR8fQI97yNLP1bnVvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMDY2RDhCRTAxNjUwMTJBNjdGRDRGQUVCQkM0QjlG
MENFOUE3ODAeFw0yNjAxMDgyMDU0MzJaFw0yNzAxMDcyMDU5MzJaMDMxMTAvBgNV
BAMTKDNGNjc5Mzk2NTU1MDgyM0E5RkJERTBEMUQ2MTNDN0FDQjk2MkUzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzHpj79RWtbKExddYY6YFvsEz
tH9Pzl+S81PcpuZOKuh4yg0/cSWnbE78xrBRlt+wj5hhQpSF/AgS7mvPTXt5M5jz
mMb5YzGcM//NLUMJZ9qH3NUNAKECfebY4uEzmdLKwRbbGzFwrLUnwc7Mt/YhpyBR
5HQYHR6ogP0IDaRXs+LiiMUqbc7YJ7rUmsdsGBKM6iaGv0b8FGc0EXgm76kJG2hS
IcxGPEJEzo4t0owdwQFyT+fD6uf1fWb5isAr7dsbH7Kb4kh559cZKsHnC0+Nmnil
SysmTnn5QURp+RWGDDHFPMxYRv/GMbDQnPxcdLCzbcWdOATlqrfneukKhu//AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUP2eTllVQgjqfveDR1hPHrLli42EwHwYDVR0j
BBgwFoAUDQBm2L4BZQEqZ/1PrrvEufDOmngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOUQ5RkE3RjkwNDU0RUI1RjRDMUQ4ODBGMjkxNDU1MTNB
QjFBNTUxMTQzNDZFQUEyMDNFMzlDMUYwMTQyODExLzAvMEQwMDY2RDhCRTAxNjUw
MTJBNjdGRDRGQUVCQkM0QjlGMENFOUE3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAwNjZEOEJFMDE2NTAxMkE2
N0ZENEZBRUJCQzRCOUYwQ0U5QTc4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTlEOUZBN0Y5MDQ1NEVCNUY0QzFEODgwRjI5MTQ1NTEzQUIxQTU1MTE0
MzQ2RUFBMjAzRTM5QzFGMDE0MjgxMS8wLzMxMzgzOTJlMzEzMjM3MmUzMTMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMwMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC9
f4kwDQYJKoZIhvcNAQELBQADggEBACES0U8b5RX2g5kgvpSlgjArjjRQy/X2nSDb
MrI7Tl0VUAUUslnQ+Js0HANPwLS9FvE9rTg6vTpdEdIGiQvebFOQEbsNsim9QSKo
2ozoE0lh4SDnU/TphqoiiQyQwXZDS+9oepaVZXEhPw49+zipjUbKxI5erhFdrAyB
QRChW0A2uIFlVK5+8nSSgvOYrxZnpW+kukyT4MnsDDMiWuhYvyxkdUnM+MLQZASu
1jgl7M3P3Z04ChWT65+mt17PFY/sf17nsis+cZYSlDa8Pes1t8yhYWM0kBOioDeQ
F13e2FVe7hSR5XOmd5tmynjxdO8w3vmC8rbu1vmkxNkgmpcRDn8=
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:08 2026 by rpki-client