This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa
File:                     3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa (raw, json)
Hash identifier:          kEe2ZQ8wyx5tM2AjAzibEru2LcK+vmMRh2AwyCy8sMc=
Subject key identifier:   6B:25:6C:D7:9D:96:2C:A4:A6:BF:90:22:7D:F3:E3:F2:68:3A:3A:1E
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       64B643F26D727799EE77B6C67D50EE2E4E4E3C4C
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa
Signing time:             Tue 16 Dec 2025 10:55:04 +0000
ROA not before:           Tue 16 Dec 2025 10:50:04 +0000
ROA not after:            Tue 15 Dec 2026 10:55:04 +0000
asID:                     265798
IP address blocks:        138.117.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:43:f2:6d:72:77:99:ee:77:b6:c6:7d:50:ee:2e:4e:4e:3c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Dec 16 10:50:04 2025 GMT
            Not After : Dec 15 10:55:04 2026 GMT
        Subject: CN=6B256CD79D962CA4A6BF90227DF3E3F2683A3A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:bd:b0:73:67:86:3b:2f:05:7a:7f:c8:47:
                    f1:23:f7:90:18:bc:e9:42:07:b4:2a:a9:96:ec:e7:
                    67:cd:1f:ff:1e:9e:ca:38:2b:20:83:9f:7c:cd:ce:
                    22:8c:f0:2e:2c:3a:df:bc:06:f0:cc:99:4f:81:67:
                    6c:7c:c4:9e:25:14:e0:8b:4b:d0:d6:39:dd:5c:67:
                    94:dc:ad:7d:37:fa:70:92:b9:1b:da:b6:47:85:7f:
                    42:0d:d9:e6:92:36:e6:da:0e:47:45:cb:a8:3e:d8:
                    4d:de:7f:62:4b:5c:27:ec:5b:b3:ef:25:4a:9c:ec:
                    76:78:49:18:01:a5:23:26:6f:a4:1f:1f:bc:91:5b:
                    61:93:16:ea:00:35:5d:2e:2c:c9:a4:b3:fc:31:86:
                    c7:24:62:ce:c4:6d:ee:ac:89:21:a3:ef:38:7f:44:
                    30:d9:03:6c:8c:6d:7a:c3:1f:a8:a4:5a:06:58:f2:
                    48:3e:9a:cb:2f:0e:46:6c:c4:37:8f:dd:e4:bd:9e:
                    fc:79:1b:1c:5e:e6:7d:5a:05:91:b6:59:42:7a:46:
                    31:68:c7:43:c5:07:a3:e7:51:bd:6d:af:21:12:7b:
                    34:98:51:e1:86:d3:b9:8f:5d:03:be:8e:92:3d:da:
                    85:e3:9e:65:a3:24:dc:32:8b:88:f4:42:15:e0:c6:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:6C:D7:9D:96:2C:A4:A6:BF:90:22:7D:F3:E3:F2:68:3A:3A:1E
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31342e302f32342d3234203d3e20323635373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:09:eb:ac:9f:84:2b:38:ab:4a:3e:d0:e8:ae:08:d1:89:46:
         fe:34:ea:31:53:39:1b:7c:c6:32:39:a3:0e:b8:e4:e6:3b:ec:
         f4:5f:32:d0:df:37:88:30:7a:23:51:dd:d7:a4:c3:d2:04:b1:
         b0:98:60:aa:2b:93:70:bf:84:11:9f:af:ec:59:ea:78:a8:18:
         df:01:ec:69:ad:1a:a3:3e:dc:10:1f:92:e2:e5:8a:f3:92:2a:
         43:85:e0:11:21:fb:aa:3f:41:3c:d5:d7:3b:2a:e8:00:c4:16:
         12:25:56:e3:3e:56:1e:7d:e7:7e:11:aa:64:59:a2:06:3f:15:
         88:62:63:36:d5:69:40:24:84:08:76:56:96:53:19:e3:2a:dc:
         ac:41:7d:08:39:fd:c4:e3:ce:99:f0:23:1d:e8:dd:08:4f:6b:
         a8:71:fd:07:c0:30:14:d6:47:da:50:36:cc:5b:ea:97:ea:ee:
         99:07:bc:a7:87:88:bc:11:a9:c7:fe:53:e9:13:87:73:59:b0:
         05:e0:f9:83:1e:0d:7d:b5:a5:63:92:93:76:8f:42:d0:2e:54:
         bd:cb:05:b9:9c:08:7e:97:4a:ef:59:b7:58:15:6c:4b:a0:7c:
         7e:66:ab:2e:ef:30:ec:15:ec:ee:37:e9:6a:ac:26:dd:b8:d2:
         eb:b3:5e:d9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZLZD8m1yd5nud7bGfVDuLk5OPEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJFNkE4QUYzMjI2NTAxRDhDMEFFODlCMzFBNzhFMzY5
QkNEQkMwMzAeFw0yNTEyMTYxMDUwMDRaFw0yNjEyMTUxMDU1MDRaMDMxMTAvBgNV
BAMTKDZCMjU2Q0Q3OUQ5NjJDQTRBNkJGOTAyMjdERjNFM0YyNjgzQTNBMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tb2wc2eGOy8Fen/IR/Ej95AY
vOlCB7QqqZbs52fNH/8enso4KyCDn3zNziKM8C4sOt+8BvDMmU+BZ2x8xJ4lFOCL
S9DWOd1cZ5TcrX03+nCSuRvatkeFf0IN2eaSNubaDkdFy6g+2E3ef2JLXCfsW7Pv
JUqc7HZ4SRgBpSMmb6QfH7yRW2GTFuoANV0uLMmks/wxhsckYs7Ebe6siSGj7zh/
RDDZA2yMbXrDH6ikWgZY8kg+mssvDkZsxDeP3eS9nvx5Gxxe5n1aBZG2WUJ6RjFo
x0PFB6PnUb1tryESezSYUeGG07mPXQO+jpI92oXjnmWjJNwyi4j0QhXgxo8nAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUayVs152WLKSmv5AiffPj8mg6Oh4wHwYDVR0j
BBgwFoAU0uaorzImUB2MCuibMaeONpvNvAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QTlCRThCQUMwREJGMDRBMDRFNjU3RjE3NzIyMURFNUVG
QUVEMTQ3ODAzNEJERTYyNUZENDMxNTBCQ0ZCRjAyLzAvRDJFNkE4QUYzMjI2NTAx
RDhDMEFFODlCMzFBNzhFMzY5QkNEQkMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkU2QThBRjMyMjY1MDFEOEMw
QUU4OUIzMUE3OEUzNjlCQ0RCQzAzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUE5QkU4QkFDMERCRjA0QTA0RTY1N0YxNzcyMjFERTVFRkFFRDE0Nzgw
MzRCREU2MjVGRDQzMTUwQkNGQkYwMi8wLzMxMzMzODJlMzEzMTM3MmUzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinUO
MA0GCSqGSIb3DQEBCwUAA4IBAQBFCeusn4QrOKtKPtDorgjRiUb+NOoxUzkbfMYy
OaMOuOTmO+z0XzLQ3zeIMHojUd3XpMPSBLGwmGCqK5Nwv4QRn6/sWep4qBjfAexp
rRqjPtwQH5Li5YrzkipDheARIfuqP0E81dc7KugAxBYSJVbjPlYefed+EapkWaIG
PxWIYmM21WlAJIQIdlaWUxnjKtysQX0IOf3E486Z8CMd6N0IT2uocf0HwDAU1kfa
UDbMW+qX6u6ZB7ynh4i8EanH/lPpE4dzWbAF4PmDHg19taVjkpN2j0LQLlS9ywW5
nAh+l0rvWbdYFWxLoHx+Zqsu7zDsFezuN+lqrCbduNLrs17Z
-----END CERTIFICATE-----
Generated at Thu Dec 18 18:55:16 2025 by rpki-client