This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3133382e3132312e31322e302f32322d3234203d3e20323632313931.roa
File:                     3133382e3132312e31322e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          MCZE51geKwEVDD61u/Gtw0sbZw0xRozOG1XqEdfyNFY=
Subject key identifier:   94:65:13:D7:D5:04:C1:D7:79:DD:05:A0:BB:23:7E:2C:9E:B0:62:6D
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       404B57B18ACC08559B7A115A54F968AA4CC2D828
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3133382e3132312e31322e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 06 Jan 2026 20:55:24 +0000
ROA not before:           Tue 06 Jan 2026 20:50:24 +0000
ROA not after:            Tue 05 Jan 2027 20:55:24 +0000
asID:                     262191
IP address blocks:        138.121.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 10:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:57:b1:8a:cc:08:55:9b:7a:11:5a:54:f9:68:aa:4c:c2:d8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Jan  6 20:50:24 2026 GMT
            Not After : Jan  5 20:55:24 2027 GMT
        Subject: CN=946513D7D504C1D779DD05A0BB237E2C9EB0626D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:b4:de:7e:98:00:b5:91:97:2b:f0:29:7d:
                    ef:5b:17:14:d6:f8:ed:ff:3e:a9:7f:58:ee:3d:43:
                    8b:fe:38:b8:98:bd:1e:cd:c8:48:f0:cc:eb:ff:44:
                    42:d3:50:34:2b:d0:b0:3a:a4:bd:ed:88:9d:19:16:
                    eb:4e:2d:a4:bd:bd:65:2f:1a:c9:08:47:93:f0:83:
                    5e:9f:b4:61:60:76:2e:41:0c:76:82:99:6c:0f:47:
                    a1:2d:30:0e:cb:a8:87:ee:aa:ba:c9:45:73:9c:d9:
                    c9:fb:29:3b:58:44:f8:b8:c6:a8:ca:63:89:3b:70:
                    3c:86:2e:28:ed:e0:9a:8f:77:9a:5d:c4:c4:ff:14:
                    4b:d9:0b:e9:6e:8c:1d:f1:68:8c:7a:6e:2a:a3:b4:
                    e8:63:27:88:6c:7e:2b:a4:b4:9b:d7:9f:de:4b:8b:
                    63:c1:78:12:ec:b1:ec:40:89:95:e3:9c:f4:e0:d7:
                    75:0a:58:ae:8f:f2:84:fc:92:d4:e4:f7:66:ea:e3:
                    39:f5:35:ec:33:c9:cd:7c:50:2d:b3:90:66:3b:4a:
                    c6:75:74:3f:81:a2:6a:32:fd:62:75:6a:d4:8e:80:
                    8b:90:b1:3a:f1:da:8e:d0:27:a6:55:0d:cb:82:df:
                    10:59:50:fb:b5:81:05:66:4f:7f:58:d5:66:d6:e5:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:13:D7:D5:04:C1:D7:79:DD:05:A0:BB:23:7E:2C:9E:B0:62:6D
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3133382e3132312e31322e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ca:e8:b8:60:9e:62:55:c7:a3:0d:b3:32:68:69:39:65:eb:
         75:16:fa:da:38:fa:91:c1:29:7a:92:51:cd:f6:11:68:d0:b7:
         0e:f6:bf:19:42:52:c5:e1:29:9e:6c:f5:27:78:3c:ac:df:d1:
         ac:0e:29:1c:eb:3c:b4:58:14:5c:d7:53:19:12:2f:a1:a3:f4:
         5d:50:de:90:84:fb:89:29:00:3f:4a:25:6c:83:3c:d7:1e:b8:
         e3:77:a8:b8:07:ac:58:82:4f:48:f6:7b:4f:27:1f:67:ec:90:
         4c:2d:01:5d:84:ba:cd:61:d7:5b:a2:d2:a3:9a:eb:eb:13:1f:
         99:85:7a:f1:f7:ac:89:c1:2d:48:50:ed:b0:0f:ae:86:3d:65:
         bd:07:d7:13:da:21:3f:86:c3:a3:fc:b9:87:94:98:79:7c:b3:
         24:64:c9:da:49:83:24:e1:b5:80:4c:3e:03:19:a6:7e:70:fd:
         d0:c2:23:3d:37:f0:2a:e9:80:55:76:43:0a:68:81:ba:36:7b:
         8a:60:38:ac:c8:b7:44:1a:05:cd:9d:7b:ff:56:53:cc:f4:63:
         b1:8b:6c:9b:3e:95:c2:70:38:53:78:69:19:87:3d:29:25:94:
         c6:17:af:53:cf:ea:2b:31:08:c8:07:cf:01:a8:2f:87:7e:ff:
         14:22:66:bb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQEtXsYrMCFWbehFaVPloqkzC2CgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNjAxMDYyMDUwMjRaFw0yNzAxMDUyMDU1MjRaMDMxMTAvBgNV
BAMTKDk0NjUxM0Q3RDUwNEMxRDc3OUREMDVBMEJCMjM3RTJDOUVCMDYyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05LTefpgAtZGXK/Apfe9bFxTW
+O3/Pql/WO49Q4v+OLiYvR7NyEjwzOv/RELTUDQr0LA6pL3tiJ0ZFutOLaS9vWUv
GskIR5Pwg16ftGFgdi5BDHaCmWwPR6EtMA7LqIfuqrrJRXOc2cn7KTtYRPi4xqjK
Y4k7cDyGLijt4JqPd5pdxMT/FEvZC+lujB3xaIx6biqjtOhjJ4hsfiuktJvXn95L
i2PBeBLssexAiZXjnPTg13UKWK6P8oT8ktTk92bq4zn1Newzyc18UC2zkGY7SsZ1
dD+Bomoy/WJ1atSOgIuQsTrx2o7QJ6ZVDcuC3xBZUPu1gQVmT39Y1WbW5cUvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlGUT19UEwdd53QWguyN+LJ6wYm0wHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMxMzMzODJlMzEzMjMxMmUzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinkM
MA0GCSqGSIb3DQEBCwUAA4IBAQCiyui4YJ5iVcejDbMyaGk5Zet1FvraOPqRwSl6
klHN9hFo0LcO9r8ZQlLF4SmebPUneDys39GsDikc6zy0WBRc11MZEi+ho/RdUN6Q
hPuJKQA/SiVsgzzXHrjjd6i4B6xYgk9I9ntPJx9n7JBMLQFdhLrNYddbotKjmuvr
Ex+ZhXrx96yJwS1IUO2wD66GPWW9B9cT2iE/hsOj/LmHlJh5fLMkZMnaSYMk4bWA
TD4DGaZ+cP3QwiM9N/Aq6YBVdkMKaIG6NnuKYDisyLdEGgXNnXv/VlPM9GOxi2yb
PpXCcDhTeGkZhz0pJZTGF69Tz+orMQjIB88BqC+Hfv8UIma7
-----END CERTIFICATE-----
Generated at Fri Jan 23 02:23:03 2026 by rpki-client