This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3133382e35392e3131362e302f32322d3234203d3e203131353632.roa
File:                     3133382e35392e3131362e302f32322d3234203d3e203131353632.roa (raw, json)
Hash identifier:          Fa7QzSW5KTydIVTyl2sU8oYUms4yo/iBKeXjAcLf77g=
Subject key identifier:   1A:26:21:4B:FD:95:D9:D0:45:98:EF:45:83:9F:00:5F:AA:8C:42:A1
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       521CFD548BC354EE5606F82C9462BC05774D0015
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3133382e35392e3131362e302f32322d3234203d3e203131353632.roa
Signing time:             Tue 06 Jan 2026 18:59:16 +0000
ROA not before:           Tue 06 Jan 2026 18:54:16 +0000
ROA not after:            Tue 05 Jan 2027 18:59:16 +0000
asID:                     11562
IP address blocks:        138.59.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 03:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:fd:54:8b:c3:54:ee:56:06:f8:2c:94:62:bc:05:77:4d:00:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Jan  6 18:54:16 2026 GMT
            Not After : Jan  5 18:59:16 2027 GMT
        Subject: CN=1A26214BFD95D9D04598EF45839F005FAA8C42A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:bf:d3:90:40:1a:71:3d:e6:d5:c1:f1:52:
                    96:68:d0:3d:f3:05:96:5b:31:f5:e3:70:32:c0:f2:
                    4d:ad:2d:f4:a9:58:31:9a:70:79:88:82:e4:3c:6a:
                    b5:23:b9:d9:a7:1a:cb:4b:dc:7e:a3:c4:77:78:56:
                    a6:0c:06:1d:12:59:2c:66:e9:a3:59:3e:77:78:4a:
                    1f:8a:53:7c:fd:ac:2e:a5:cf:17:dd:07:9a:0f:2e:
                    de:23:db:d5:f2:1f:0d:2d:1a:bf:86:75:0b:a2:7b:
                    52:9a:f7:55:06:84:18:66:17:ea:7b:5d:47:27:cc:
                    95:57:a4:2e:92:fe:2c:79:88:9f:36:1b:af:57:58:
                    13:0d:77:9b:c1:31:07:8c:c1:e4:d3:07:34:d5:32:
                    46:5f:d9:1a:e6:ec:a9:1a:cb:26:bb:1f:2e:8c:9b:
                    7e:f1:4d:29:c5:94:a8:5e:5c:f7:85:50:b6:68:88:
                    de:f3:66:48:93:79:4f:95:1c:a2:bd:b0:f0:f9:a8:
                    6b:8b:aa:d5:94:29:42:20:08:ee:2f:f8:aa:2b:6c:
                    ea:bf:5f:0b:15:9c:71:59:e1:6e:e0:4b:07:8e:13:
                    be:37:1a:f0:3a:a0:eb:81:20:b6:3c:31:d2:f5:a5:
                    11:fb:26:2a:7a:a5:f9:a9:b5:72:4b:8a:42:e9:97:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:26:21:4B:FD:95:D9:D0:45:98:EF:45:83:9F:00:5F:AA:8C:42:A1
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3133382e35392e3131362e302f32322d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c4:bb:9c:79:23:43:25:c4:e5:dc:13:1a:1a:de:65:1c:aa:
         02:43:62:23:52:84:20:d4:3b:86:a3:03:c2:da:1e:46:36:71:
         58:cc:c5:ef:2c:be:bc:4c:65:21:db:4e:10:6c:85:af:b1:df:
         b0:bd:3a:4c:ec:30:0b:0f:41:ed:4e:7a:c9:7d:3b:11:d0:bf:
         3a:79:5f:fe:99:6b:8b:2d:aa:93:bd:fc:c1:a2:dd:40:b1:11:
         70:6c:cf:10:1e:ac:92:4c:45:46:f2:19:0a:39:b5:ac:cd:89:
         2f:67:f1:d3:6e:9c:f3:74:78:ed:f5:45:05:db:11:03:62:cc:
         43:76:5e:84:c2:c1:19:11:d6:61:38:51:6e:1a:6e:2a:2c:75:
         dc:aa:b8:f3:78:b0:f4:bb:dd:c0:98:79:11:19:b0:1e:8a:24:
         31:cf:db:2c:14:60:c2:a9:d2:db:cd:b6:a0:71:6c:20:64:11:
         aa:f4:49:a4:d4:88:af:81:46:d3:aa:98:86:15:28:1f:2d:9d:
         9c:1f:97:24:8d:37:03:a7:29:ba:90:ea:8f:be:d3:8f:e1:b1:
         17:0f:dd:f5:0a:9c:fa:61:69:72:a3:63:97:5e:8f:85:42:53:
         64:52:2e:0e:e2:94:fe:da:6a:26:87:61:a8:f8:da:8c:7c:13:
         54:59:b1:ff
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUhz9VIvDVO5WBvgslGK8BXdNABUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2QTdBNjEwNjdDQURENjU5MjkxOTFGMzU1NjAyMkJE
MUQyRTA5QTAeFw0yNjAxMDYxODU0MTZaFw0yNzAxMDUxODU5MTZaMDMxMTAvBgNV
BAMTKDFBMjYyMTRCRkQ5NUQ5RDA0NTk4RUY0NTgzOUYwMDVGQUE4QzQyQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkr/TkEAacT3m1cHxUpZo0D3z
BZZbMfXjcDLA8k2tLfSpWDGacHmIguQ8arUjudmnGstL3H6jxHd4VqYMBh0SWSxm
6aNZPnd4Sh+KU3z9rC6lzxfdB5oPLt4j29XyHw0tGr+GdQuie1Ka91UGhBhmF+p7
XUcnzJVXpC6S/ix5iJ82G69XWBMNd5vBMQeMweTTBzTVMkZf2Rrm7Kkayya7Hy6M
m37xTSnFlKheXPeFULZoiN7zZkiTeU+VHKK9sPD5qGuLqtWUKUIgCO4v+KorbOq/
XwsVnHFZ4W7gSweOE743GvA6oOuBILY8MdL1pRH7Jip6pfmptXJLikLpl+wPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGiYhS/2V2dBFmO9Fg58AX6qMQqEwHwYDVR0j
BBgwFoAUjWp6YQZ8rdZZKRkfNVYCK9HS4JowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjEzQkVBQzhDMjVCMEFERDRCQzI0MUJCNkE1REJDOTA3
MzgzQTQ1OEQxM0UxMjdFRTUxMzcwNDRCQUI1ODJBLzAvOEQ2QTdBNjEwNjdDQURE
NjU5MjkxOTFGMzU1NjAyMkJEMUQyRTA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDZBN0E2MTA2N0NBREQ2NTky
OTE5MUYzNTU2MDIyQkQxRDJFMDlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTIxM0JFQUM4QzI1QjBBREQ0QkMyNDFCQjZBNURCQzkwNzM4M0E0NThE
MTNFMTI3RUU1MTM3MDQ0QkFCNTgyQS8wLzMxMzMzODJlMzUzOTJlMzEzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMTM1MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoo7dDAN
BgkqhkiG9w0BAQsFAAOCAQEAlMS7nHkjQyXE5dwTGhreZRyqAkNiI1KEINQ7hqMD
wtoeRjZxWMzF7yy+vExlIdtOEGyFr7HfsL06TOwwCw9B7U56yX07EdC/Onlf/plr
iy2qk738waLdQLERcGzPEB6skkxFRvIZCjm1rM2JL2fx026c83R47fVFBdsRA2LM
Q3ZehMLBGRHWYThRbhpuKix13Kq483iw9LvdwJh5ERmwHookMc/bLBRgwqnS2822
oHFsIGQRqvRJpNSIr4FG06qYhhUoHy2dnB+XJI03A6cpupDqj77Tj+GxFw/d9Qqc
+mFpcqNjl16PhUJTZFIuDuKU/tpqJodhqPjajHwTVFmx/w==
-----END CERTIFICATE-----
Generated at Wed Jan 28 17:11:01 2026 by rpki-client