This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa
File:                     3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa (raw, json)
Hash identifier:          JhjUTr39zjQisHGLfp5iuYCK4zB+1UPMv39SmqqUg/E=
Subject key identifier:   CD:2E:A0:B6:C3:38:18:D5:1D:D8:B5:47:32:49:B2:AD:3F:73:BE:CA
Certificate issuer:       /CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
Certificate serial:       3621D6E68C164706D792FA867B98A3291B043464
Authority key identifier: FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa
Signing time:             Tue 06 Jan 2026 19:18:35 +0000
ROA not before:           Tue 06 Jan 2026 19:13:35 +0000
ROA not after:            Tue 05 Jan 2027 19:18:35 +0000
asID:                     264651
IP address blocks:        138.186.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:21:d6:e6:8c:16:47:06:d7:92:fa:86:7b:98:a3:29:1b:04:34:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
        Validity
            Not Before: Jan  6 19:13:35 2026 GMT
            Not After : Jan  5 19:18:35 2027 GMT
        Subject: CN=CD2EA0B6C33818D51DD8B5473249B2AD3F73BECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:55:94:c9:ae:f9:57:0b:d7:e9:13:af:0a:
                    b3:a1:25:7d:c7:d7:44:fe:45:40:a1:f0:63:a8:30:
                    ab:b9:58:8a:f4:aa:1d:4a:b5:6c:94:cc:6f:27:5f:
                    94:05:f7:3a:13:c2:c3:1a:cb:08:5e:6b:35:71:77:
                    b8:79:b2:34:ee:7e:ad:81:3f:48:9c:7b:cb:1d:42:
                    f3:5e:65:14:f0:d8:33:bc:97:d0:67:47:9a:5f:c5:
                    1d:5f:5a:74:37:ea:2b:2c:e7:7b:fc:95:81:d1:1c:
                    8b:5c:13:a4:53:be:ee:76:32:d3:94:cb:50:20:0c:
                    4f:35:4e:ae:a3:24:23:31:75:33:8e:eb:4c:a5:50:
                    23:9d:56:e5:45:f3:8d:03:26:47:97:11:1b:33:d3:
                    0c:41:b7:74:62:85:1b:46:3e:40:04:34:1c:9d:74:
                    aa:d1:6e:1d:da:0e:31:e7:ee:84:5a:ea:05:0d:3f:
                    df:da:ff:39:93:d8:67:fc:7c:98:d3:79:56:8c:b9:
                    34:21:ec:42:86:c8:ef:8d:0d:b8:db:2b:59:6c:9d:
                    a8:dd:17:ab:fd:c1:0a:5c:d5:a7:67:ab:81:e5:54:
                    41:74:6f:7f:af:db:a2:42:20:e5:67:a4:a4:3e:ce:
                    13:0d:d5:e0:e7:59:95:2b:96:c9:b2:8d:d7:ad:55:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:A0:B6:C3:38:18:D5:1D:D8:B5:47:32:49:B2:AD:3F:73:BE:CA
            X509v3 Authority Key Identifier:
                keyid:FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/3133382e3138362e3134382e302f32322d3234203d3e20323634363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:5a:7c:37:19:a5:79:a5:00:72:c2:68:50:24:e1:9b:27:f5:
         f0:e9:10:ac:6e:07:3f:0f:43:a1:a1:63:55:31:cf:25:e4:44:
         0d:96:3e:10:c1:0b:f6:f4:bc:78:6d:fd:3b:1f:bf:2e:88:38:
         4a:54:fb:4e:65:25:60:00:27:b4:34:ae:05:3d:b5:1d:93:c9:
         10:f9:49:82:60:be:4d:1c:6c:ee:ff:15:9a:69:c1:d3:9c:3b:
         3d:95:df:32:2e:f5:fa:ef:3a:91:5c:59:11:1b:b8:49:b5:b5:
         d2:6c:83:33:c0:07:d5:a1:6f:a9:5a:67:d3:90:36:ce:3d:41:
         94:22:cc:9d:f7:c4:21:47:3b:06:1f:5b:94:be:ea:02:e7:aa:
         1a:b3:a9:02:f2:02:f7:37:78:b6:14:e5:1a:29:73:00:49:f0:
         66:ed:a0:29:a5:ac:11:15:5f:cb:4f:d6:17:ab:64:6d:5a:4d:
         c2:18:30:61:2d:1c:ff:64:68:ac:28:8b:72:92:ba:09:8c:2f:
         83:88:ee:12:39:72:db:96:9f:4f:f4:aa:50:a8:3d:d7:e9:35:
         1a:b2:6d:00:f9:49:0a:39:d8:7c:40:6e:04:ba:12:01:4f:e7:
         0b:f8:da:08:65:04:f6:f3:74:de:da:af:b7:ea:12:c5:3a:20:
         00:2e:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:18:48 2026 by rpki-client