This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233392e302f32342d3234203d3e203237383233.roa
File:                     3133382e33362e3233392e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          ZMWyBHkNWlvk2+MSljF7Iag0BaAnSMXsds6V9690n+w=
Subject key identifier:   40:DF:95:C4:DC:9E:BC:B4:B6:8B:E8:F0:87:A3:0D:70:E7:45:D4:8D
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       6149DD91B0ED70D557F04E58AD7AD828E970C56A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233392e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 06 Jan 2026 19:05:49 +0000
ROA not before:           Tue 06 Jan 2026 19:00:49 +0000
ROA not after:            Tue 05 Jan 2027 19:05:49 +0000
asID:                     27823
IP address blocks:        138.36.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Jan 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:dd:91:b0:ed:70:d5:57:f0:4e:58:ad:7a:d8:28:e9:70:c5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Jan  6 19:00:49 2026 GMT
            Not After : Jan  5 19:05:49 2027 GMT
        Subject: CN=40DF95C4DC9EBCB4B68BE8F087A30D70E745D48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:66:a7:a8:8e:12:0a:63:b4:a1:36:b6:71:
                    b6:6b:33:0e:f9:59:e7:b9:7e:01:fa:54:8f:d1:bb:
                    0e:63:5b:37:9a:e2:c2:2f:f3:d9:e4:5f:3e:a7:61:
                    89:4a:a3:e2:8c:8d:89:f2:7f:e1:9a:63:9c:70:6d:
                    3c:ec:13:8c:c7:a2:aa:1a:1e:95:2c:a9:be:af:16:
                    99:9b:aa:32:62:9b:b4:d1:fc:48:99:47:50:45:7e:
                    93:bc:ce:4f:d5:d2:08:3b:b9:af:3a:64:29:6c:d0:
                    9b:d5:5c:f1:03:3e:2a:9a:78:e4:d8:06:a7:0a:a8:
                    ff:60:b4:5f:32:3a:18:5b:92:f9:06:5b:65:85:3a:
                    51:51:50:4b:e2:a5:55:d0:5b:f5:4e:01:00:88:a0:
                    45:48:89:d5:33:b3:d6:88:da:d1:f9:c9:57:d4:93:
                    67:42:d5:4e:0b:d9:38:40:f4:66:29:e7:44:c0:3c:
                    c1:55:95:5a:ad:a8:05:46:1f:f5:a6:2e:52:b4:93:
                    42:a5:0f:5e:a8:87:e0:db:6f:d3:fa:bc:65:22:74:
                    8b:dd:68:0f:54:47:ea:a3:b1:2f:02:3d:d9:fa:df:
                    5d:40:5e:ae:31:25:c3:3f:51:2d:10:cb:5e:61:67:
                    71:52:08:e9:25:e0:02:26:88:d9:ad:8b:7f:9c:3b:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:95:C4:DC:9E:BC:B4:B6:8B:E8:F0:87:A3:0D:70:E7:45:D4:8D
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e33362e3233392e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:0f:17:82:3e:b5:95:67:d7:19:80:d4:3b:33:14:cc:08:27:
         10:de:5b:08:5f:b4:39:1f:c2:8f:2c:46:eb:c1:43:f2:24:29:
         84:fb:be:3a:42:78:44:0d:92:b3:ff:83:a1:6d:27:d5:14:69:
         75:5c:08:6d:70:4a:0e:98:a9:01:c0:01:01:6c:1a:87:ed:ac:
         ed:75:a3:66:65:cb:98:57:11:3b:b4:9c:eb:9b:e2:35:3b:e6:
         51:44:4f:79:3e:76:82:0f:2d:80:e5:41:9e:d9:ec:10:8c:49:
         9f:e6:16:d8:2a:e5:7b:04:de:28:48:75:17:8c:2b:b3:d1:69:
         89:6f:5c:07:39:83:b8:bc:6c:56:8a:21:bf:f5:a0:c3:6e:aa:
         70:4a:e6:0b:7e:d8:55:b4:d2:67:33:1b:b0:44:3b:7a:85:19:
         10:b9:4f:56:8c:47:e3:e6:16:ad:62:55:e3:f0:b6:c3:6f:90:
         b9:43:7e:5a:dd:ec:27:de:0e:02:5f:b1:fa:ca:89:29:ad:69:
         a4:95:3d:1a:fa:0c:9f:97:d3:4b:7b:2b:03:60:c7:73:c2:c6:
         0f:9a:b1:f1:4e:09:98:1f:58:f9:77:cf:c9:03:7f:a2:67:cc:
         74:25:74:91:fc:58:4e:37:1c:1f:92:1a:9f:3f:87:9e:f5:6c:
         d5:d5:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:46:57 2026 by rpki-client