This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32342d3234203d3e203238333137.roa
File:                     3133382e3132322e3234342e302f32342d3234203d3e203238333137.roa (raw, json)
Hash identifier:          y1pwJFaOhd4EhegeNdJgyjaJpjs1vidSq6VZ1D40IE4=
Subject key identifier:   1A:7D:5B:97:A3:0C:03:09:51:E7:45:02:79:DA:38:B2:ED:09:EF:8C
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       197344C3F575CE8311812A51B3851B6EE291540A
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32342d3234203d3e203238333137.roa
Signing time:             Thu 20 Nov 2025 20:53:18 +0000
ROA not before:           Thu 20 Nov 2025 20:48:18 +0000
ROA not after:            Thu 19 Nov 2026 20:53:18 +0000
asID:                     28317
IP address blocks:        138.122.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 21:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:73:44:c3:f5:75:ce:83:11:81:2a:51:b3:85:1b:6e:e2:91:54:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Nov 20 20:48:18 2025 GMT
            Not After : Nov 19 20:53:18 2026 GMT
        Subject: CN=1A7D5B97A30C030951E7450279DA38B2ED09EF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:43:7e:43:83:9c:30:91:6a:73:e0:a8:f8:
                    3c:bd:49:e4:5c:e1:fa:ab:16:cb:97:69:e6:a8:9c:
                    dd:72:21:43:db:a2:a2:ce:c7:12:5e:d2:d4:0b:72:
                    ea:b0:2d:bb:9a:82:c8:d4:07:f5:17:b1:70:e8:60:
                    e6:6d:3c:c8:1f:fd:2d:2f:b9:bb:32:73:77:b1:69:
                    80:83:87:20:2b:4b:05:0c:ac:b7:b5:01:3f:dd:f2:
                    05:09:cb:89:78:e2:ee:32:b4:c4:54:44:6c:51:e8:
                    eb:c7:29:d4:68:4a:ab:24:60:22:63:b4:85:47:bb:
                    d1:80:05:85:48:83:c2:74:80:8c:0c:60:68:28:2b:
                    2a:f5:35:4b:72:bd:be:46:bb:7b:7b:4e:41:3f:e3:
                    99:e8:59:61:a3:6e:c6:53:95:66:bf:d0:bd:fd:81:
                    68:f6:ba:51:a3:8d:04:db:66:61:13:7b:c9:cd:45:
                    ea:9e:c2:f0:98:47:cc:01:d4:29:55:b7:c3:81:e0:
                    55:ac:7a:ec:bf:2e:b9:35:f5:07:a1:4d:bb:57:57:
                    c1:06:55:24:04:bf:9e:b1:ae:6d:4c:a1:00:4f:12:
                    58:cb:5a:7d:c6:d8:06:4d:ed:f3:0e:ba:9c:25:44:
                    a7:40:05:ba:ba:2c:fc:29:3b:3c:49:19:4c:e2:68:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:5B:97:A3:0C:03:09:51:E7:45:02:79:DA:38:B2:ED:09:EF:8C
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32342d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a2:7b:f1:05:9a:9d:c6:b6:8a:86:d7:8a:43:24:94:ea:04:
         b3:5b:2d:81:9b:5e:a0:c0:f4:8b:de:86:b1:72:62:85:f0:d7:
         64:14:15:6c:6d:a7:35:72:43:3d:9c:55:11:cd:58:18:3a:f1:
         bd:93:ef:cc:f9:b4:2d:10:a5:a2:83:4b:45:67:12:c2:10:24:
         47:b5:36:c2:aa:f4:69:93:2e:d8:55:d9:16:4d:9c:72:1f:e0:
         22:8c:12:4a:e1:a4:5e:3b:12:65:60:f8:26:da:52:3a:a0:70:
         dc:9a:0c:80:5f:71:b0:14:5f:8a:23:a2:7e:ad:6c:d7:ae:a4:
         45:f8:c4:00:a0:57:c1:90:e2:64:24:a2:e7:a0:38:17:b8:52:
         44:27:52:06:42:83:81:88:43:77:37:02:80:98:d0:ad:f1:ef:
         82:bc:50:96:c7:7e:8b:44:a5:f8:72:f1:ba:8a:26:d1:17:9b:
         00:49:4d:64:ca:6c:2b:36:5a:36:d7:d0:92:e0:23:f9:b8:3c:
         b4:ef:15:6d:65:0c:1e:c5:85:1e:3c:f0:22:3b:ef:25:f4:f8:
         93:cd:b4:0a:70:f7:32:fa:15:0a:3f:46:70:5e:09:fa:cb:06:
         e1:5f:fe:cd:55:46:12:46:0a:30:13:a9:c6:20:5a:0b:8d:c9:
         81:69:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 21:10:50 2025 by rpki-client