This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/3133382e35392e382e302f32322d3234203d3e20323639373838.roa
File:                     3133382e35392e382e302f32322d3234203d3e20323639373838.roa (raw, json)
Hash identifier:          zBNsRoXIFE9hHXBN417i5AScAwd8aZzquKX57wgVw3o=
Subject key identifier:   0F:2E:65:01:9E:85:20:0C:DC:9E:D1:EE:AE:16:55:0E:D4:C1:8C:EF
Certificate issuer:       /CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
Certificate serial:       647D1F0EB8AE6C6FB6B8A7173E015AD536EA6F07
Authority key identifier: 5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/3133382e35392e382e302f32322d3234203d3e20323639373838.roa
Signing time:             Tue 06 Jan 2026 19:22:39 +0000
ROA not before:           Tue 06 Jan 2026 19:17:39 +0000
ROA not after:            Tue 05 Jan 2027 19:22:39 +0000
asID:                     269788
IP address blocks:        138.59.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7d:1f:0e:b8:ae:6c:6f:b6:b8:a7:17:3e:01:5a:d5:36:ea:6f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
        Validity
            Not Before: Jan  6 19:17:39 2026 GMT
            Not After : Jan  5 19:22:39 2027 GMT
        Subject: CN=0F2E65019E85200CDC9ED1EEAE16550ED4C18CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:e9:47:00:cc:46:6a:96:f3:e9:70:bb:26:
                    a9:c2:8b:de:1d:41:de:29:45:9d:71:48:5d:0c:57:
                    1a:82:97:5d:20:48:57:ae:d0:ba:83:6a:15:df:7e:
                    b7:57:e2:72:e2:96:26:0e:83:0d:30:a3:3b:ba:ba:
                    fa:31:55:99:82:59:bd:db:95:bc:7e:01:2c:94:e1:
                    fe:82:68:05:e1:7b:bb:02:e0:58:17:cb:f3:af:0f:
                    9c:80:04:39:d0:18:c5:17:b5:d8:9e:5e:d0:b8:45:
                    15:af:1d:b5:02:4a:6c:cb:d9:3a:53:c8:6e:fb:e3:
                    61:bf:f7:10:1f:75:37:9c:ea:c5:29:c7:ff:38:45:
                    12:0d:4d:13:85:f0:aa:ec:14:72:c8:93:50:00:fb:
                    c2:64:02:2a:81:44:b1:fb:95:1f:8d:a9:25:a5:64:
                    5d:e0:84:61:2a:89:46:34:42:bb:30:cd:2c:24:b5:
                    ef:c8:ba:7c:60:ff:44:51:a9:e7:ea:2a:3c:4f:f6:
                    2a:09:31:01:6c:fa:58:11:1e:bb:25:bb:22:30:ec:
                    40:aa:e0:1a:a0:cf:21:4f:e8:af:09:52:31:fb:be:
                    5a:2c:97:1f:d5:98:2c:31:22:40:db:a5:80:c2:ea:
                    1a:bd:1b:b2:3e:ae:7a:23:3f:24:90:d5:22:bb:f4:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:65:01:9E:85:20:0C:DC:9E:D1:EE:AE:16:55:0E:D4:C1:8C:EF
            X509v3 Authority Key Identifier:
                keyid:5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/3133382e35392e382e302f32322d3234203d3e20323639373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:52:a7:45:81:55:05:3a:ad:85:b1:51:8f:b6:f3:06:7e:95:
         2a:f4:7e:25:cc:05:8a:fb:f2:91:a0:fd:61:f0:f1:fd:e2:0f:
         e6:78:b3:c2:c8:65:0a:75:b9:22:59:54:2b:71:10:33:1b:21:
         ee:14:95:24:ed:93:ee:c6:0f:b5:30:16:12:81:c7:a3:da:5f:
         e9:b0:2c:e8:f0:d4:e6:78:59:85:f2:a3:31:74:3a:5b:a8:ff:
         86:4e:b8:7a:d4:1f:48:a8:60:d2:c6:f4:89:af:92:8f:a0:73:
         0c:b4:77:4b:21:aa:9a:96:5e:a2:a8:19:30:27:28:f6:5c:ca:
         5b:3d:17:34:ce:29:55:9b:a2:34:b1:a7:5d:eb:b8:63:aa:a6:
         df:a4:35:47:09:00:6c:24:97:3f:81:d7:9e:11:37:af:0b:39:
         3b:b1:2a:98:4f:90:8a:d7:b4:76:b6:d2:29:17:4a:99:b8:9f:
         db:fb:8a:67:fe:d5:cf:2b:4a:2e:9d:8e:3a:c7:70:d4:4f:31:
         5c:77:69:02:ad:bb:c8:c0:0c:a2:0d:e0:6c:79:63:bb:39:d9:
         32:7b:26:86:ba:96:6f:51:3d:8b:cb:e5:35:24:4b:7a:ad:5d:
         0e:a0:24:2a:af:0e:fe:cf:80:3a:ae:37:af:fe:8f:5c:f3:97:
         d8:ba:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:28:30 2026 by rpki-client