This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa
File:                     3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          pExIInF/IG+hhvE5UBC8iW1fehOPrN930fGumjneGno=
Subject key identifier:   B9:57:4A:DC:DF:2D:BA:16:83:5C:54:2C:68:84:27:2A:88:AC:69:CD
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       7C8A30D33159F6FAF1CBE7A59998D05C2D6DE044
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 06 Jan 2026 19:44:52 +0000
ROA not before:           Tue 06 Jan 2026 19:39:52 +0000
ROA not after:            Tue 05 Jan 2027 19:44:52 +0000
asID:                     395161
IP address blocks:        138.186.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Feb 2026 01:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8a:30:d3:31:59:f6:fa:f1:cb:e7:a5:99:98:d0:5c:2d:6d:e0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:52 2026 GMT
            Not After : Jan  5 19:44:52 2027 GMT
        Subject: CN=B9574ADCDF2DBA16835C542C6884272A88AC69CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:76:ef:5b:66:c9:5d:b4:03:12:a3:c1:a8:
                    a3:93:04:55:e5:b3:9d:4b:a6:10:38:44:34:47:c5:
                    d0:7d:91:e4:95:03:ae:a4:aa:00:0a:33:b5:e9:b9:
                    1a:16:da:dc:e9:f0:86:f8:df:cf:a4:a5:bb:67:48:
                    f6:21:d1:8d:e6:6d:3b:a2:92:54:85:7f:72:fa:40:
                    3a:1e:a6:77:1b:f8:a2:db:6d:ec:ce:4e:04:76:bc:
                    16:d8:57:04:a8:86:7c:08:35:d4:a8:e9:28:8f:71:
                    0d:13:c3:f7:0f:9c:d7:9e:fd:2e:a4:56:13:20:64:
                    20:9c:e0:07:df:d7:c4:ce:e4:a3:ee:24:56:8f:7b:
                    83:97:44:58:7d:96:98:73:43:fa:d9:8e:88:9c:f3:
                    4a:60:da:29:2c:91:6a:58:be:92:e9:24:c9:04:9b:
                    19:35:bd:24:18:5f:81:da:8e:c9:c3:cc:fb:5e:b5:
                    03:a0:b2:e0:79:66:c9:13:54:b6:fe:f4:8f:3c:ed:
                    54:71:e0:cb:dd:e2:42:b4:5a:ac:f4:2b:d7:16:07:
                    47:4a:da:f8:91:f7:33:d5:f5:d7:fc:50:91:90:5e:
                    6e:06:c3:af:45:c3:d0:a1:cd:64:87:1f:1f:56:ea:
                    f6:55:f0:ee:e8:33:bb:15:5b:4a:3d:10:ba:33:4d:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:57:4A:DC:DF:2D:BA:16:83:5C:54:2C:68:84:27:2A:88:AC:69:CD
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:76:a3:4f:04:00:7a:9d:a5:b3:d2:b7:d9:10:d2:29:57:5d:
         53:08:e8:59:9d:e5:9c:3d:a4:3c:c1:bd:c9:1f:11:11:de:0c:
         9b:a8:7e:43:6d:17:df:b6:49:9c:cc:94:4a:b9:86:c7:a7:b3:
         db:24:a1:2e:74:f9:db:cf:da:3a:99:90:7c:cd:d2:34:06:99:
         b8:c6:5a:01:48:29:03:f5:5e:e1:10:93:e9:38:d3:68:77:b5:
         55:d2:e3:5e:56:75:2f:d1:30:f8:cc:eb:3e:43:a7:24:69:c1:
         7b:2f:bf:56:bb:c4:02:2b:3a:b1:bb:1f:e8:cb:61:f6:8e:96:
         d8:47:a2:38:60:b9:bc:01:77:66:d3:62:63:23:1a:a1:76:bd:
         13:c6:e3:3b:eb:be:fa:26:56:ca:96:09:ce:ed:d9:57:a1:82:
         47:0c:be:1f:b4:57:46:4a:0f:05:e2:6c:a5:69:b3:01:32:d4:
         cf:3c:6d:9d:e4:3b:08:67:a0:42:22:c3:a6:15:fa:33:1c:3b:
         46:90:39:12:34:cc:50:9e:21:ea:ee:ee:94:b3:92:d9:18:47:
         6a:23:13:7c:d7:5c:84:62:0b:3e:0f:7f:40:e7:d5:6e:41:20:
         ba:74:b6:76:37:7a:48:51:18:88:97:d8:b6:93:3d:17:38:2f:
         09:d0:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 10:17:32 2026 by rpki-client