This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233382e302f32342d3234203d3e203237383233.roa
File:                     3133382e33362e3233382e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          GEk6qv+skfRgQYL5p+1KJX2IzFNRQMV3DCOWYCBB2rk=
Subject key identifier:   E2:40:5A:03:C9:F9:F9:2F:86:2C:53:00:EF:C6:05:73:2D:EE:36:1B
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       5199FB4DB81B8E012E540F7C66FD47A1310881C0
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233382e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:46 +0000
ROA not before:           Tue 06 Jan 2026 19:00:46 +0000
ROA not after:            Tue 05 Jan 2027 19:05:46 +0000
asID:                     27823
IP address blocks:        138.36.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:fb:4d:b8:1b:8e:01:2e:54:0f:7c:66:fd:47:a1:31:08:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:46 2026 GMT
            Not After : Jan  5 19:05:46 2027 GMT
        Subject: CN=E2405A03C9F9F92F862C5300EFC605732DEE361B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:de:ce:9d:d0:21:f1:84:44:6a:60:7d:e0:
                    cb:5b:92:1c:a1:ef:62:98:a5:07:85:dd:04:90:1c:
                    3d:cb:41:b7:83:ac:ca:ac:00:ae:6c:82:00:9a:23:
                    25:0e:8a:37:16:77:76:e7:b6:e3:33:6c:8a:c8:26:
                    ec:71:97:38:37:96:47:54:0a:ce:21:26:c8:22:0a:
                    e7:61:ec:e3:09:ec:9b:7d:35:ed:75:cb:11:30:3f:
                    ae:1c:56:9d:00:f8:fc:01:df:2a:c2:8d:26:54:10:
                    61:00:33:d7:bb:4f:c5:a8:57:d5:47:b5:70:b8:68:
                    a8:07:a8:21:ee:c9:bf:0d:58:9c:ea:ee:8d:6e:10:
                    21:9e:b8:40:58:62:73:fb:46:f6:5f:6c:6d:cb:6b:
                    28:65:fe:c2:61:a0:41:14:61:e0:01:ee:12:63:62:
                    7b:74:c3:87:85:45:f8:f3:47:af:60:43:fb:73:c3:
                    ba:f6:8f:5f:19:6e:85:a1:fc:c5:1d:a4:34:08:d9:
                    48:bc:e4:e1:cb:2a:76:07:f3:1e:3e:48:98:7a:41:
                    10:d9:23:9e:28:43:4b:81:8a:46:e7:cc:f8:19:a3:
                    29:c8:dc:38:f5:95:e2:e0:bb:22:69:77:f1:8c:14:
                    23:65:b2:8e:79:d6:69:39:2a:f7:4c:69:c2:af:da:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:5A:03:C9:F9:F9:2F:86:2C:53:00:EF:C6:05:73:2D:EE:36:1B
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233382e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2c:65:59:22:b4:c4:e3:53:a6:bd:5c:8e:02:9a:ba:e8:da:
         89:73:c4:bf:70:b9:51:0d:a1:4f:a0:0d:2d:57:3f:44:7d:38:
         8f:9d:ef:1a:e0:b7:8c:03:e1:9b:5d:9b:08:00:4c:4b:15:72:
         64:fe:a1:82:b0:97:b3:0d:f3:6c:8c:88:6f:d3:6c:f1:eb:6c:
         1e:57:8f:aa:f6:11:8c:0e:3b:35:98:e9:61:d6:c2:ea:12:c3:
         0a:03:ed:98:c6:50:95:cb:08:b3:e4:26:27:4e:f0:4e:e4:be:
         c8:6f:fc:7d:24:42:99:6b:13:12:02:62:6b:92:b2:a6:9b:22:
         20:d5:da:ef:e8:d6:f4:18:c9:84:b8:13:d9:76:6d:6d:15:9e:
         a5:88:f1:fd:60:3c:23:a4:dd:9b:df:10:20:17:25:79:f8:46:
         17:97:29:44:fd:1c:c1:0c:af:04:05:0a:26:ff:e9:61:de:43:
         94:f7:8a:17:64:60:05:74:15:7f:c7:3d:05:4a:0b:b5:e5:a6:
         dd:e0:cb:e4:1f:50:24:bf:76:1c:5b:34:84:8a:47:66:8d:dd:
         e9:65:87:c4:de:e7:9b:f0:f6:94:4c:74:3e:4f:4d:93:a4:5d:
         f9:db:8f:60:68:b2:1a:9d:ad:6c:71:b0:7f:5c:0e:69:d7:1d:
         e1:26:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:46:57 2026 by rpki-client