This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3135312e302f32342d3234203d3e203238333938.roa
File:                     3133382e39392e3135312e302f32342d3234203d3e203238333938.roa (raw, json)
Hash identifier:          bb+57J0XEVWZImxCcL25xdOtDYZqjn2UpcbUfLslQGk=
Subject key identifier:   30:C6:1E:EE:3A:50:1E:68:5B:F9:05:8E:AE:8F:24:A3:98:57:7F:E2
Certificate issuer:       /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial:       4E79A15DC72B214EDD87DA63C6A528324810640A
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3135312e302f32342d3234203d3e203238333938.roa
Signing time:             Tue 06 Jan 2026 19:33:25 +0000
ROA not before:           Tue 06 Jan 2026 19:28:25 +0000
ROA not after:            Tue 05 Jan 2027 19:33:25 +0000
asID:                     28398
IP address blocks:        138.99.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Feb 2026 05:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:79:a1:5d:c7:2b:21:4e:dd:87:da:63:c6:a5:28:32:48:10:64:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
        Validity
            Not Before: Jan  6 19:28:25 2026 GMT
            Not After : Jan  5 19:33:25 2027 GMT
        Subject: CN=30C61EEE3A501E685BF9058EAE8F24A398577FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:ed:7e:8b:11:c2:71:76:6e:42:d3:dc:f9:
                    f6:c0:74:5f:6c:46:1f:39:c5:d3:33:13:3a:2e:ea:
                    d7:95:7f:ff:c0:37:3f:95:33:f1:69:4e:49:3b:e7:
                    2f:cf:39:cf:66:4f:51:c9:4f:1d:ed:e6:56:cd:4d:
                    8f:b1:c6:d6:4a:c7:dd:0a:5c:07:06:cd:00:81:6e:
                    ab:d2:06:6f:3b:56:ee:a2:8b:a5:c9:3c:77:86:4a:
                    0b:cf:34:0f:a8:8a:b8:31:1f:44:eb:85:17:0b:98:
                    73:a7:d0:4f:c8:95:de:ac:f5:4e:5c:9a:a3:fc:80:
                    f2:ca:a1:21:e5:34:9a:6e:87:05:eb:9c:78:79:53:
                    7c:96:ac:24:e9:50:dd:21:0a:b6:2f:f1:2d:57:a7:
                    2d:66:6e:d4:81:ad:9b:50:7a:de:e2:ed:db:e4:e9:
                    01:de:01:a5:82:77:3c:b6:61:29:1a:25:68:01:9f:
                    b2:32:e6:51:32:c4:5c:1b:65:fd:fb:2d:2b:7a:90:
                    52:a5:8f:7a:f2:4a:82:b1:20:0f:ef:9a:61:6a:0a:
                    d3:56:34:63:67:29:81:1e:ac:7b:1f:4b:3f:5d:1b:
                    64:13:93:dd:56:bd:67:39:b2:5e:61:85:ee:0b:cd:
                    25:b4:a0:a1:f3:26:99:e4:59:ad:03:f0:51:5f:bb:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:1E:EE:3A:50:1E:68:5B:F9:05:8E:AE:8F:24:A3:98:57:7F:E2
            X509v3 Authority Key Identifier:
                keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3135312e302f32342d3234203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:2b:de:78:6a:3f:be:10:84:42:cf:64:8f:1b:e9:6b:a0:
         3c:55:c3:1d:8b:23:aa:f2:a0:fe:44:a0:a7:30:be:6a:5a:08:
         6d:2c:a1:5e:be:55:7a:a7:ea:7a:e9:1f:45:58:58:57:36:33:
         4f:86:05:76:1b:c7:86:ac:a6:c7:de:b2:18:dd:24:11:5b:3f:
         2b:ef:46:69:f4:e1:9a:81:c5:f5:ed:cb:7b:a3:08:c7:bf:9c:
         e3:b0:c5:c2:a3:f7:37:21:98:fd:9d:6a:6c:2a:78:b1:bd:e7:
         cb:28:b2:a3:5e:cf:80:c4:ff:68:cd:02:a9:1e:e0:68:70:38:
         0b:44:d7:af:19:e9:18:0b:e0:ca:15:01:5a:82:2a:80:0a:83:
         18:fa:16:e5:ba:06:cd:2d:ac:19:69:68:53:f5:dd:14:b1:d1:
         22:e3:cc:19:e5:d2:10:f0:91:21:02:be:1a:38:52:73:0e:97:
         0c:ec:c8:a7:ec:1a:58:9d:96:c4:0d:e0:c8:d3:bb:5c:8b:60:
         3b:86:21:cf:44:0a:fa:8b:69:11:58:59:53:45:60:2f:4b:e3:
         47:bc:72:38:0d:e6:5e:74:49:8e:6a:d5:d0:eb:67:78:d9:22:
         38:ea:d4:92:8f:76:0b:11:fd:02:14:d6:41:6e:bb:b5:43:09:
         7a:78:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 14:32:44 2026 by rpki-client