This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa
File:                     3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          42pMR1biBe8bMndEjzBJJ5ANIgyNDVv47w32RvwkGUc=
Subject key identifier:   D8:B6:AE:28:4C:0A:1C:5E:F6:90:82:DA:37:15:BE:A7:0C:FC:BE:98
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       359C1D7C4159AAB5C29A1BDC74C808AF8C385F5A
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa
Signing time:             Tue 06 Jan 2026 19:44:51 +0000
ROA not before:           Tue 06 Jan 2026 19:39:51 +0000
ROA not after:            Tue 05 Jan 2027 19:44:51 +0000
asID:                     263812
IP address blocks:        138.186.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9c:1d:7c:41:59:aa:b5:c2:9a:1b:dc:74:c8:08:af:8c:38:5f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:51 2026 GMT
            Not After : Jan  5 19:44:51 2027 GMT
        Subject: CN=D8B6AE284C0A1C5EF69082DA3715BEA70CFCBE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:9b:5f:81:47:36:c7:73:86:2c:7e:f1:01:
                    19:ea:57:24:cf:b6:a4:1b:63:de:85:44:95:63:f3:
                    92:1f:47:55:32:04:cb:0c:bc:bf:3f:f9:b6:ab:3b:
                    15:d8:08:d7:ad:2d:6c:71:b9:ac:f2:e0:82:d7:24:
                    50:09:da:ff:2a:90:cd:8a:4f:17:df:c1:21:57:14:
                    ea:a6:64:c1:ec:34:a2:78:c5:11:d4:4d:94:04:f7:
                    84:22:19:74:0b:b1:6d:30:f0:e8:e5:6a:fc:c5:8c:
                    05:e1:e8:53:45:1d:6a:e4:ce:7b:3a:1a:2b:1d:42:
                    14:da:fe:ec:36:7c:88:b0:71:07:8d:93:2a:35:15:
                    63:8d:38:3b:24:1a:50:50:f1:3a:14:f1:28:73:6f:
                    96:57:73:3d:4a:7b:49:b8:43:51:b8:62:d7:7c:a3:
                    0f:6a:98:fa:5e:f5:8b:0e:1f:e9:f4:8f:36:b9:7b:
                    aa:ff:af:65:1f:44:f1:b3:b7:87:a5:f7:18:57:84:
                    de:ae:16:4b:f6:8f:54:8c:e8:eb:a8:4a:f5:e4:39:
                    0a:27:12:0a:3a:e3:fe:bd:12:f3:49:11:4a:14:f5:
                    14:ee:c8:b3:d0:61:5f:26:e7:39:c6:9f:ba:7b:17:
                    10:1b:6a:f9:5a:61:d0:bd:22:74:74:5c:d5:67:e5:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B6:AE:28:4C:0A:1C:5E:F6:90:82:DA:37:15:BE:A7:0C:FC:BE:98
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:db:5b:d7:d8:38:e9:59:e3:a4:6b:c9:9f:b6:fd:fb:66:d3:
         12:28:d0:ea:72:8c:78:35:07:6c:a4:62:0c:f6:b5:e4:c8:ef:
         02:f4:92:4a:36:47:4f:46:81:10:a9:0c:7c:49:31:a6:a5:ce:
         6f:fc:a0:26:70:4f:ad:ea:6d:69:75:7d:49:b9:00:d8:86:76:
         2c:aa:ff:1a:4a:95:e8:54:6c:07:d2:fb:a4:32:3f:d4:5a:88:
         2a:17:06:85:06:2d:20:40:80:97:a6:71:df:16:c3:8a:6d:4e:
         96:92:17:ff:02:82:2d:ba:8b:92:cd:2e:3a:10:52:57:85:1a:
         1d:78:fc:d0:65:d3:27:b4:a3:a0:4e:ea:df:71:11:45:ed:0b:
         62:86:9d:ec:f3:72:c1:b5:a7:70:ae:91:27:34:37:cc:f9:ca:
         7d:69:94:9d:23:0d:cf:08:35:93:75:73:16:70:ff:a8:6c:a8:
         4f:50:ea:d5:c0:45:f5:e4:c5:b2:50:5a:7b:d3:d2:0f:f9:0c:
         69:d4:e1:5c:c0:12:bd:30:42:a5:c8:33:b9:4d:93:2e:6f:c4:
         03:09:4d:94:2c:6b:f2:22:ef:7f:9b:2b:77:ab:ea:d4:e5:2f:
         30:34:79:f2:cc:0a:aa:59:35:d2:98:16:e4:d1:eb:b8:51:6e:
         05:36:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:44:15 2026 by rpki-client