This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EF5B9D2D5F730519FB1AB376287B6147AD4DC1850FC2CD820D486FD7C1CA430/0/3135322e37342e302e302f31362d3234203d3e203131333430.roa
File:                     3135322e37342e302e302f31362d3234203d3e203131333430.roa (raw, json)
Hash identifier:          nnCggeYHxZsXUfc9kjJxLoJab4DzbWpmufHbihDCkFE=
Subject key identifier:   DE:A1:CD:2F:38:BC:9E:95:0F:C5:19:BF:E9:D9:B4:20:04:B8:91:19
Certificate issuer:       /CN=737732D59CEA38F44E475FD63469662731708CC7
Certificate serial:       21CEE313EE92D2EB3E2F05EF994DFA54510CF247
Authority key identifier: 73:77:32:D5:9C:EA:38:F4:4E:47:5F:D6:34:69:66:27:31:70:8C:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/737732D59CEA38F44E475FD63469662731708CC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EF5B9D2D5F730519FB1AB376287B6147AD4DC1850FC2CD820D486FD7C1CA430/0/3135322e37342e302e302f31362d3234203d3e203131333430.roa
Signing time:             Tue 06 Jan 2026 20:51:39 +0000
ROA not before:           Tue 06 Jan 2026 20:46:39 +0000
ROA not after:            Tue 05 Jan 2027 20:51:39 +0000
asID:                     11340
IP address blocks:        152.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EF5B9D2D5F730519FB1AB376287B6147AD4DC1850FC2CD820D486FD7C1CA430/0/737732D59CEA38F44E475FD63469662731708CC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EF5B9D2D5F730519FB1AB376287B6147AD4DC1850FC2CD820D486FD7C1CA430/0/737732D59CEA38F44E475FD63469662731708CC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/737732D59CEA38F44E475FD63469662731708CC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 07:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ce:e3:13:ee:92:d2:eb:3e:2f:05:ef:99:4d:fa:54:51:0c:f2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737732D59CEA38F44E475FD63469662731708CC7
        Validity
            Not Before: Jan  6 20:46:39 2026 GMT
            Not After : Jan  5 20:51:39 2027 GMT
        Subject: CN=DEA1CD2F38BC9E950FC519BFE9D9B42004B89119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:0e:27:c0:aa:14:e2:8e:0c:71:44:bf:d6:
                    a4:b1:bf:53:15:30:e6:47:42:c8:49:96:91:cf:9b:
                    f5:bd:36:98:59:61:a9:46:f7:67:b8:91:2f:45:2a:
                    dc:da:82:70:ea:f2:ad:45:e9:11:6e:b9:0f:24:2f:
                    70:1c:26:bd:cc:39:66:74:57:7e:3f:a6:a8:f9:0f:
                    1c:eb:4b:e2:db:48:55:41:c7:17:88:82:91:d2:d7:
                    1e:fe:c8:db:88:2b:b9:54:ad:82:e9:a1:b9:c0:81:
                    73:e9:cb:33:02:9f:11:e0:36:29:ac:bc:e6:52:a9:
                    ed:b5:94:86:06:70:78:af:3b:bb:5e:33:c6:12:7b:
                    e6:df:16:69:e3:50:8f:d5:36:a6:ce:39:dd:9a:e3:
                    71:65:40:ff:1d:d9:3b:be:76:8a:56:82:18:5d:1a:
                    52:fa:92:4a:1e:b9:56:7e:ab:a1:ea:c0:fa:87:3b:
                    13:66:a0:1a:4e:3a:72:90:ae:4a:66:8c:1a:45:1b:
                    4e:11:7e:ee:94:32:ae:d2:6b:fe:b5:89:98:e4:6c:
                    e9:a0:4d:7a:79:03:cc:6c:c9:4f:12:b5:fe:0b:5c:
                    d1:c5:6e:38:d3:58:ef:f4:e1:0c:e8:4a:93:89:f2:
                    d1:38:d2:5e:55:64:ca:ea:69:1e:08:74:c3:c7:04:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:CD:2F:38:BC:9E:95:0F:C5:19:BF:E9:D9:B4:20:04:B8:91:19
            X509v3 Authority Key Identifier:
                keyid:73:77:32:D5:9C:EA:38:F4:4E:47:5F:D6:34:69:66:27:31:70:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EF5B9D2D5F730519FB1AB376287B6147AD4DC1850FC2CD820D486FD7C1CA430/0/737732D59CEA38F44E475FD63469662731708CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/737732D59CEA38F44E475FD63469662731708CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EF5B9D2D5F730519FB1AB376287B6147AD4DC1850FC2CD820D486FD7C1CA430/0/3135322e37342e302e302f31362d3234203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:e3:fa:94:e2:c8:ec:eb:8e:e9:11:9f:b5:a0:37:be:9a:
         24:56:a2:2a:f5:43:13:a9:7e:89:ee:98:8e:e0:9b:b9:c9:32:
         e6:88:5e:b7:c6:e8:f1:11:0d:ce:1b:c1:6b:c6:cb:66:fb:e6:
         7d:08:fb:2a:7f:eb:be:b0:c6:80:c4:c6:54:69:14:05:72:2a:
         c1:a6:6a:ac:a8:1a:7e:3a:cf:94:42:58:7d:d7:f6:f7:55:17:
         9b:a0:a2:c5:48:45:7c:fa:b3:1c:1a:49:5d:be:2f:db:b5:cd:
         36:1e:69:b0:61:d6:33:8a:2c:1c:cf:7b:cf:62:1d:02:69:7c:
         fd:31:e1:7d:eb:68:26:8b:2e:78:c9:a2:47:c7:4e:fd:fd:c7:
         2e:a7:11:25:81:79:6d:47:33:5c:64:e5:19:03:33:fe:ee:28:
         af:29:90:39:bf:be:6d:93:06:cb:46:7c:07:e8:f6:9e:78:53:
         74:76:32:8b:c1:19:e9:49:87:95:86:0e:01:9d:30:b9:d9:5d:
         93:ce:a0:00:58:d3:fb:e0:38:69:f4:d2:7f:34:33:d6:dd:f7:
         bf:96:b7:a1:cb:72:9c:9c:96:49:2d:ff:06:51:bd:cd:a7:94:
         fd:ad:ad:24:6f:c9:eb:77:07:f0:a3:b9:74:12:3c:55:bf:ba:
         ca:a0:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:03:27 2026 by rpki-client