This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e3231392e37322e302f32322d3232203d3e20323633383239.roa
File:                     3133382e3231392e37322e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          N/17PWT0aopUnGQxAxEhMvO8aC6GLz0vEzQjJIeZX64=
Subject key identifier:   51:5C:97:5A:6E:89:80:81:E9:98:E0:87:2C:CF:9D:C5:82:E9:AF:39
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       439E434D8F9A21BF335B8BEEF9FA07390FCA3264
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e3231392e37322e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 06 Jan 2026 19:34:02 +0000
ROA not before:           Tue 06 Jan 2026 19:29:02 +0000
ROA not after:            Tue 05 Jan 2027 19:34:02 +0000
asID:                     263829
IP address blocks:        138.219.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9e:43:4d:8f:9a:21:bf:33:5b:8b:ee:f9:fa:07:39:0f:ca:32:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Jan  6 19:29:02 2026 GMT
            Not After : Jan  5 19:34:02 2027 GMT
        Subject: CN=515C975A6E898081E998E0872CCF9DC582E9AF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:1c:be:89:3c:9f:97:47:5b:e1:48:42:4d:
                    88:0d:18:f7:f5:01:e4:c9:39:47:d1:f5:48:b8:db:
                    10:03:ea:fb:98:31:36:f8:0a:f4:3e:cd:77:2e:5a:
                    30:ab:60:86:bd:41:a3:a2:40:7a:62:37:75:aa:a9:
                    a5:2b:60:c7:ad:13:f4:e7:0c:85:18:8f:8d:2b:26:
                    65:5e:3b:79:9d:a0:d3:e5:be:41:51:ac:ce:d8:2b:
                    65:5e:66:14:cb:46:97:d5:d3:89:c3:87:d9:13:f3:
                    6a:0c:ae:84:b7:99:b5:4f:74:3d:6f:62:8b:c4:b5:
                    e7:12:84:64:ee:62:df:7a:46:f9:35:44:e0:45:55:
                    e4:0f:0f:f4:9f:5b:06:ae:bc:70:9a:f5:94:bb:be:
                    84:b6:0e:9c:bb:7b:80:06:63:d6:34:b4:af:56:c3:
                    72:30:da:b0:c5:59:b6:f7:56:e3:55:5e:65:9a:2c:
                    12:f1:a8:c6:1d:79:44:75:e0:aa:ac:24:ea:91:02:
                    bb:02:95:c4:61:5c:2f:35:34:4a:1e:c9:23:a1:86:
                    40:62:11:c9:19:79:e3:74:b8:7d:0c:7e:65:6a:cb:
                    6b:53:ca:b3:be:41:fa:08:99:a7:3f:bb:d5:dd:a4:
                    f8:90:84:94:a5:fa:67:62:bd:6e:b1:1a:e0:2a:4b:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:97:5A:6E:89:80:81:E9:98:E0:87:2C:CF:9D:C5:82:E9:AF:39
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e3231392e37322e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:92:52:2c:4e:d1:1f:18:c4:7a:77:f3:42:9b:75:ff:5f:1c:
         31:ee:86:d2:17:6f:cf:79:4f:3c:1f:f6:44:ef:88:a3:cc:b3:
         3e:9a:6f:7f:ed:ae:57:6b:23:c6:0a:76:4a:99:df:c0:8f:84:
         46:54:1d:8a:5c:8a:54:d7:ca:a8:a1:73:a8:a4:e3:ab:b3:53:
         26:b8:20:13:a8:f6:40:e8:f1:91:e4:19:ae:51:77:aa:42:f2:
         c1:22:56:52:df:d1:7e:cb:cb:f9:64:81:cc:6c:ba:ff:b3:a3:
         4f:42:52:e6:1d:b1:72:42:b9:6f:a4:1d:93:b7:f6:77:e5:4f:
         d3:d6:17:e2:c4:f0:47:ee:11:46:3d:b3:82:00:a7:7c:56:b1:
         6f:cd:25:43:f6:58:8d:c9:0b:69:8d:01:55:db:97:9e:09:25:
         3a:af:52:4e:7b:58:ee:a1:48:2a:b2:74:d2:ff:8a:f9:a5:35:
         85:86:9e:11:9f:8b:db:da:6f:f2:0f:64:24:b3:64:78:c2:eb:
         d1:a8:33:d9:a5:1c:5a:3d:65:28:42:5e:ae:4a:93:01:f6:68:
         16:7b:ba:5e:c2:ac:f6:02:11:75:7b:15:78:b8:17:9f:49:fa:
         c5:65:c1:b5:5c:3b:c4:ae:22:b6:88:9e:14:fb:4c:84:d8:2b:
         ec:3b:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:35:25 2026 by rpki-client