This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203237363935.roa
File:                     3133382e39372e35362e302f32322d3232203d3e203237363935.roa (raw, json)
Hash identifier:          JeqYriOWJ6oYjLT3ZfZ6gCVbqFN90/637jkEaloJEkM=
Subject key identifier:   B2:E9:33:7C:CC:73:9B:5E:01:AE:31:96:09:77:D9:E5:20:73:BD:25
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       587E62838DCEE1FE65DD52CD32EAFCA684BE9C9B
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203237363935.roa
Signing time:             Mon 17 Nov 2025 19:52:55 +0000
ROA not before:           Mon 17 Nov 2025 19:47:55 +0000
ROA not after:            Mon 16 Nov 2026 19:52:55 +0000
asID:                     27695
IP address blocks:        138.97.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7e:62:83:8d:ce:e1:fe:65:dd:52:cd:32:ea:fc:a6:84:be:9c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Nov 17 19:47:55 2025 GMT
            Not After : Nov 16 19:52:55 2026 GMT
        Subject: CN=B2E9337CCC739B5E01AE31960977D9E52073BD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:42:f4:5a:40:c0:e3:b9:03:40:dd:6b:8b:
                    fb:c3:76:58:c1:aa:14:ff:2d:0a:e6:a6:63:e9:29:
                    6e:79:55:6e:0e:0e:b0:e8:c4:af:3f:8a:6e:14:33:
                    02:1b:46:97:e5:1f:dd:1f:46:4a:6e:4f:52:aa:fb:
                    5b:38:17:a3:d8:1c:4f:51:05:18:81:07:fb:1d:48:
                    33:1a:26:d0:20:c4:9f:de:f6:0e:92:b0:e3:4a:20:
                    eb:66:a8:f6:2a:da:71:55:4b:a6:1f:d2:0b:6a:b3:
                    9a:2b:8f:21:4d:cb:72:c2:43:3a:cd:f4:7d:34:20:
                    fc:6f:d9:f6:4c:27:93:dd:ec:78:e3:9b:17:93:14:
                    9f:33:25:0c:e0:08:e9:b2:b7:7b:25:cb:e6:df:5c:
                    96:86:2c:34:cb:14:eb:b5:38:2e:0a:f4:14:ab:d8:
                    71:77:bb:5a:4b:20:9a:ea:b8:ac:19:ac:94:1f:6c:
                    71:87:01:de:36:73:89:6c:1f:ca:fe:7b:95:99:b8:
                    9f:9c:15:6e:7e:a5:6c:e7:f4:5c:1c:73:38:3a:71:
                    ff:af:28:8e:ee:0d:d9:fe:56:2f:57:97:38:90:da:
                    08:7f:18:ca:32:fa:06:1e:92:58:53:9b:c6:eb:31:
                    f5:88:af:72:6e:57:fe:e1:3e:e1:66:2d:a8:87:af:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:33:7C:CC:73:9B:5E:01:AE:31:96:09:77:D9:E5:20:73:BD:25
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3232203d3e203237363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:8d:ca:34:16:cb:70:90:2b:bf:c5:77:9c:77:51:b6:dd:
         58:ad:b4:fa:5f:56:31:5d:95:1e:15:ad:6c:a9:c3:8e:b7:f4:
         c8:9e:59:a6:bf:f3:d1:16:d9:f1:5d:f6:38:dd:20:cc:42:9e:
         9b:b8:29:9e:bb:4e:ba:22:fc:5e:10:81:1c:e1:1b:7d:de:64:
         85:ff:fc:51:c4:1f:12:0c:23:e4:36:c9:1a:2b:08:b7:59:34:
         23:1e:ce:95:15:25:bf:00:00:52:dd:7c:1b:90:52:47:b8:46:
         c4:ba:13:81:96:67:80:be:f9:56:e6:b7:c4:a6:1f:2d:1e:e4:
         e0:cc:94:45:70:59:90:0f:bf:d5:77:55:64:00:4d:ab:ec:7d:
         62:f3:7c:61:85:b7:59:ce:46:56:3e:ae:fa:26:26:fa:ca:cb:
         ef:8f:b2:76:20:a9:d5:7f:e7:be:f5:c9:a6:ab:26:a9:0e:f2:
         69:da:92:62:a9:8c:6e:41:8e:9f:21:40:03:ee:f1:61:6e:c9:
         1c:65:ac:10:85:c2:7f:60:a3:75:06:b2:34:37:be:21:a9:36:
         d8:41:28:27:6e:44:0f:81:23:28:82:62:4b:6d:4d:8a:1d:3e:
         fb:58:8b:71:4f:61:a0:27:7a:a1:c4:59:04:b9:9a:15:53:e3:
         0a:96:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:06:44 2025 by rpki-client