This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e352e302f32342d3234203d3e20323639393734.roa
File:                     3133382e3132322e352e302f32342d3234203d3e20323639393734.roa (raw, json)
Hash identifier:          tkBbOafahfkbh6UiS2RqcUltxBBvRQhmsDCsGZBQEvw=
Subject key identifier:   5D:89:03:A7:43:A0:41:70:86:18:6C:FA:AC:0B:EB:C7:7A:7A:02:E3
Certificate issuer:       /CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
Certificate serial:       597CF4645EE3669AC54DFC91EDBB467290E300B8
Authority key identifier: 27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e352e302f32342d3234203d3e20323639393734.roa
Signing time:             Tue 06 Jan 2026 19:26:28 +0000
ROA not before:           Tue 06 Jan 2026 19:21:28 +0000
ROA not after:            Tue 05 Jan 2027 19:26:28 +0000
asID:                     269974
IP address blocks:        138.122.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7c:f4:64:5e:e3:66:9a:c5:4d:fc:91:ed:bb:46:72:90:e3:00:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
        Validity
            Not Before: Jan  6 19:21:28 2026 GMT
            Not After : Jan  5 19:26:28 2027 GMT
        Subject: CN=5D8903A743A0417086186CFAAC0BEBC77A7A02E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:e4:3e:ce:5d:7f:d0:ce:61:46:4e:d7:ca:
                    21:ba:e3:89:41:c4:59:8f:b1:99:2d:5e:d7:7d:9a:
                    f7:28:f6:96:61:d7:78:02:91:01:4b:06:a9:fc:6a:
                    7e:2e:87:ea:a6:5c:f7:dd:00:ab:50:cc:3a:24:cf:
                    ec:14:77:52:2e:8a:82:c6:c6:e4:32:25:26:8d:bc:
                    3a:64:40:7b:17:e9:52:93:fe:ab:f3:9a:e1:4c:ce:
                    80:03:58:fc:d6:e3:d7:c2:59:1e:94:60:67:a7:b1:
                    e9:7b:0c:e9:42:a3:c1:e5:69:3f:21:10:82:20:5a:
                    af:78:62:34:91:3e:f5:f0:7a:18:ef:a3:e3:e9:26:
                    b1:91:6d:1b:2e:7c:05:94:ce:61:83:a8:40:0c:53:
                    ae:41:f9:68:c6:69:d6:5b:79:6b:7e:a9:b0:9a:7f:
                    5b:e0:53:39:2b:37:ac:18:69:60:70:75:90:f2:80:
                    78:03:a6:54:43:38:09:5b:c6:3b:48:16:19:71:3a:
                    fd:20:88:88:77:47:fb:e6:d8:67:6e:b8:73:0c:b5:
                    12:85:f2:8a:7f:b6:47:01:ef:b3:46:77:f0:a3:8e:
                    ea:fa:db:d1:77:68:b9:83:25:2b:7d:36:b1:68:2a:
                    69:a3:95:d6:45:66:89:d6:a3:09:c1:58:01:e2:66:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:03:A7:43:A0:41:70:86:18:6C:FA:AC:0B:EB:C7:7A:7A:02:E3
            X509v3 Authority Key Identifier:
                keyid:27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e352e302f32342d3234203d3e20323639393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:67:d5:2e:95:9f:0b:17:c4:3b:24:d3:3d:34:9b:8d:41:
         95:d1:6d:16:4f:5c:51:33:d3:43:37:3c:a7:9f:1f:7f:46:37:
         bc:c1:b9:ef:c8:51:93:ce:f9:2d:dd:ea:94:8a:a8:0c:81:7d:
         98:5b:1e:bd:08:fd:63:e1:6d:23:e6:78:7a:4b:71:4c:ba:c8:
         21:34:e6:48:45:99:9a:63:76:5d:b2:84:4c:4c:51:e6:41:97:
         74:5e:c6:91:d6:29:07:31:84:ee:de:57:92:d0:0c:5e:ac:40:
         ea:bc:1a:bc:53:25:17:e7:70:4a:44:8f:86:c8:7b:db:e9:83:
         d8:e4:3c:9e:b8:1c:46:36:b3:a3:89:77:85:b5:22:30:61:db:
         0a:d0:f8:58:14:63:86:73:ad:d7:fe:e4:c2:47:2e:07:a8:af:
         06:93:a0:c2:00:af:dd:42:a9:8a:5b:33:f6:6b:1c:f7:78:58:
         b8:69:2c:85:c7:ac:67:6b:f2:4b:65:dc:cd:fc:06:74:3b:3f:
         25:fd:37:9e:54:19:dd:05:20:42:58:6c:b6:1d:ae:2f:27:a3:
         3d:23:de:79:84:56:72:3c:2e:6e:64:1d:01:42:23:17:a6:38:
         39:0d:7e:8d:7a:66:ac:cd:07:26:c6:02:f3:cf:c2:d7:dc:e5:
         77:09:89:59
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWXz0ZF7jZprFTfyR7btGcpDjALgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCMkMyMEI3RjNCODlBQ0Y4RUVGOTg0M0ZGNURFRDRE
MDU4MzcwRjAeFw0yNjAxMDYxOTIxMjhaFw0yNzAxMDUxOTI2MjhaMDMxMTAvBgNV
BAMTKDVEODkwM0E3NDNBMDQxNzA4NjE4NkNGQUFDMEJFQkM3N0E3QTAyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuOQ+zl1/0M5hRk7XyiG644lB
xFmPsZktXtd9mvco9pZh13gCkQFLBqn8an4uh+qmXPfdAKtQzDokz+wUd1IuioLG
xuQyJSaNvDpkQHsX6VKT/qvzmuFMzoADWPzW49fCWR6UYGensel7DOlCo8HlaT8h
EIIgWq94YjSRPvXwehjvo+PpJrGRbRsufAWUzmGDqEAMU65B+WjGadZbeWt+qbCa
f1vgUzkrN6wYaWBwdZDygHgDplRDOAlbxjtIFhlxOv0giIh3R/vm2GduuHMMtRKF
8op/tkcB77NGd/Cjjur629F3aLmDJSt9NrFoKmmjldZFZonWownBWAHiZm3lAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXYkDp0OgQXCGGGz6rAvrx3p6AuMwHwYDVR0j
BBgwFoAUJ7LCC387iaz47vmEP/Xe1NBYNw8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0MyMUVCMTA5REYwRkZGRTdCN0NGNTVENDA2M0VEOTY0
Q0ZFMUQ1QTE5Rjg2OUUzOUI2ODFFRjNDOEUyNDdDLzAvMjdCMkMyMEI3RjNCODlB
Q0Y4RUVGOTg0M0ZGNURFRDREMDU4MzcwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0IyQzIwQjdGM0I4OUFDRjhF
RUY5ODQzRkY1REVENEQwNTgzNzBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNDMjFFQjEwOURGMEZGRkU3QjdDRjU1RDQwNjNFRDk2NENGRTFENUEx
OUY4NjlFMzlCNjgxRUYzQzhFMjQ3Qy8wLzMxMzMzODJlMzEzMjMyMmUzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6BTAN
BgkqhkiG9w0BAQsFAAOCAQEAHxBn1S6VnwsXxDsk0z00m41BldFtFk9cUTPTQzc8
p58ff0Y3vMG578hRk875Ld3qlIqoDIF9mFsevQj9Y+FtI+Z4ektxTLrIITTmSEWZ
mmN2XbKETExR5kGXdF7GkdYpBzGE7t5XktAMXqxA6rwavFMlF+dwSkSPhsh72+mD
2OQ8nrgcRjazo4l3hbUiMGHbCtD4WBRjhnOt1/7kwkcuB6ivBpOgwgCv3UKpilsz
9msc93hYuGkshcesZ2vyS2XczfwGdDs/Jf03nlQZ3QUgQlhsth2uLyejPSPeeYRW
cjwubmQdAUIjF6Y4OQ1+jXpmrM0HJsYC88/C19zldwmJWQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 00:21:21 2026 by rpki-client