This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3133382e3131372e3134302e302f32332d3234203d3e20323633373631.roa
File:                     3133382e3131372e3134302e302f32332d3234203d3e20323633373631.roa (raw, json)
Hash identifier:          heNuReALbp57DphK6oFbSxmAor4KtZ+4gAeUo5mNKLc=
Subject key identifier:   B1:CA:59:7F:1B:E7:1E:AD:8E:54:93:5D:9F:F8:C5:A6:A8:A2:89:18
Certificate issuer:       /CN=F279D661C4E03FF0C843C0E122E4839565933C7C
Certificate serial:       692AAF3945C3C645C09D795AE7995E7BAD226C41
Authority key identifier: F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3133382e3131372e3134302e302f32332d3234203d3e20323633373631.roa
Signing time:             Mon 26 Jan 2026 15:27:28 +0000
ROA not before:           Mon 26 Jan 2026 15:22:28 +0000
ROA not after:            Mon 25 Jan 2027 15:27:28 +0000
asID:                     263761
IP address blocks:        138.117.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Feb 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:af:39:45:c3:c6:45:c0:9d:79:5a:e7:99:5e:7b:ad:22:6c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F279D661C4E03FF0C843C0E122E4839565933C7C
        Validity
            Not Before: Jan 26 15:22:28 2026 GMT
            Not After : Jan 25 15:27:28 2027 GMT
        Subject: CN=B1CA597F1BE71EAD8E54935D9FF8C5A6A8A28918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:74:e6:a2:dd:a5:33:a9:41:59:d1:fb:c3:
                    99:cb:60:fb:38:5a:94:ae:04:14:3a:ed:d6:16:f3:
                    4d:5e:bb:58:ee:d5:01:0e:50:a1:ca:8a:9c:48:76:
                    04:8a:4a:7c:45:5c:d1:4f:57:28:37:b9:2b:84:9f:
                    fa:ea:d2:53:dc:c3:d3:89:fa:02:5b:c0:04:38:b0:
                    c2:a1:e5:31:53:3c:7b:7f:ee:28:81:cf:6d:3c:54:
                    8c:8f:33:54:3d:d9:f0:03:09:d8:a1:6e:8e:fe:cb:
                    e6:a5:5e:47:67:f7:f3:49:c7:c6:88:d8:24:99:a6:
                    c5:a9:db:74:41:33:4d:d1:9f:86:bb:fb:e6:fc:d5:
                    c0:0b:f8:4b:5e:db:e5:0c:ed:36:a5:d3:9f:2e:1d:
                    85:4d:cc:ed:c1:ae:60:3f:8a:62:a3:a8:2f:8e:52:
                    b9:5e:60:e8:4f:4f:1f:23:7f:18:1d:0b:2c:30:af:
                    d3:3e:9c:98:3e:88:64:15:2c:dc:b1:fe:26:f3:22:
                    12:5b:03:fc:f5:1f:87:7f:55:ee:98:8d:72:19:bb:
                    7e:7d:87:f2:c1:6c:6b:23:3a:6f:2a:ee:47:b8:e3:
                    97:3f:ec:15:75:d4:91:22:ae:f0:8c:6a:67:55:0e:
                    5f:52:99:d8:25:33:43:e5:e3:53:a5:3f:2b:9c:11:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:59:7F:1B:E7:1E:AD:8E:54:93:5D:9F:F8:C5:A6:A8:A2:89:18
            X509v3 Authority Key Identifier:
                keyid:F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3133382e3131372e3134302e302f32332d3234203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:de:d0:85:8d:4f:9e:62:cf:0d:1b:f6:69:1e:03:2e:9a:
         76:8a:73:63:ac:e4:44:7d:7e:ce:46:d2:4b:e1:1e:54:f6:8e:
         c5:06:ec:21:74:ad:08:39:f6:86:7e:19:27:6c:0e:04:00:c4:
         9b:67:73:80:0f:d2:65:93:27:f6:d8:7f:46:0c:ba:f9:65:fb:
         35:ef:d0:19:ec:25:30:4e:a3:58:96:4f:d8:e2:4e:8e:23:e2:
         e4:30:b6:73:bc:65:78:89:e2:35:9c:83:df:4e:9b:89:33:b9:
         f6:d5:27:63:93:66:a9:83:13:8c:1e:d0:a8:a7:82:44:77:44:
         9b:c4:91:dd:2e:fc:54:b1:50:f0:c1:68:e9:4a:a8:05:06:e9:
         91:22:ab:02:20:68:b1:9c:29:ee:5f:cf:9f:0f:7f:45:23:52:
         fd:f0:d1:71:d1:15:81:7c:17:3e:69:fc:80:46:e0:79:fa:3c:
         8d:25:5b:48:ac:1b:aa:d1:80:07:69:04:c4:0b:b5:66:67:80:
         0e:79:bd:a7:dc:d0:47:1e:f6:66:b1:62:ed:49:27:68:d7:5c:
         d0:3b:3f:ec:0c:78:c4:d4:fd:e2:6f:df:46:1e:c6:e1:8c:30:
         cf:cc:93:95:96:24:ce:17:21:54:bb:5a:fd:af:3e:41:a9:3d:
         0b:aa:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 20:33:40 2026 by rpki-client