This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3134382e3130322e3132382e302f31372d3234203d3e203237373539.roa
File:                     3134382e3130322e3132382e302f31372d3234203d3e203237373539.roa (raw, json)
Hash identifier:          n8rep4N20flITLH4fV0pTdSzKsdYuYbqLEfjNW8JrH4=
Subject key identifier:   CA:04:3D:C2:54:CF:AF:8E:C2:2C:8A:28:60:D5:D5:DE:14:CA:4A:C7
Certificate issuer:       /CN=B72C94D573353BE962B600097BE1E558CF9533D1
Certificate serial:       048D11FB468A9FCECB536633F25C8E9C534E6C3C
Authority key identifier: B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3134382e3130322e3132382e302f31372d3234203d3e203237373539.roa
Signing time:             Thu 18 Dec 2025 19:40:01 +0000
ROA not before:           Thu 18 Dec 2025 19:35:01 +0000
ROA not after:            Thu 17 Dec 2026 19:40:01 +0000
asID:                     27759
IP address blocks:        148.102.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 00:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8d:11:fb:46:8a:9f:ce:cb:53:66:33:f2:5c:8e:9c:53:4e:6c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72C94D573353BE962B600097BE1E558CF9533D1
        Validity
            Not Before: Dec 18 19:35:01 2025 GMT
            Not After : Dec 17 19:40:01 2026 GMT
        Subject: CN=CA043DC254CFAF8EC22C8A2860D5D5DE14CA4AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:5e:02:f2:2b:ee:2b:90:fc:69:e5:1f:9c:
                    52:89:8b:e1:f6:18:73:b7:0c:3e:59:1a:84:a9:48:
                    e5:d2:59:8a:70:d6:68:32:ab:34:e5:d3:2d:d6:91:
                    7c:79:6d:eb:76:45:64:94:96:a2:b5:3f:35:b0:5d:
                    53:53:6b:97:03:fc:56:9b:58:c1:8b:76:66:b5:2f:
                    20:75:91:ad:1e:7a:0c:fb:bf:c8:df:a8:c5:dd:81:
                    16:3c:a0:55:cb:c3:ca:ff:7b:02:68:50:ca:0d:38:
                    06:89:52:34:de:9a:b0:40:8c:2a:61:d5:f4:8f:d1:
                    e7:bd:6c:49:aa:a3:a3:4f:05:80:c1:93:31:d7:86:
                    14:42:07:84:6f:d2:4c:6d:07:01:55:7e:24:08:1f:
                    e1:ea:25:df:99:34:2b:bc:24:c3:32:9a:e8:0c:2e:
                    2f:7a:fe:d6:49:16:b9:81:48:a6:0a:9f:3e:6d:22:
                    0f:8a:e9:07:4c:a5:37:c2:dc:df:7f:3b:41:61:96:
                    7a:5f:3a:64:0e:0d:a1:12:c4:ea:0e:fe:b5:df:3f:
                    89:8e:c6:37:95:46:4f:f4:3b:5d:a1:bb:87:73:90:
                    6c:71:80:af:12:70:c5:ff:47:78:52:eb:4b:05:4e:
                    c2:21:54:66:6e:8b:c2:66:86:ef:b3:bf:cd:0b:72:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:04:3D:C2:54:CF:AF:8E:C2:2C:8A:28:60:D5:D5:DE:14:CA:4A:C7
            X509v3 Authority Key Identifier:
                keyid:B7:2C:94:D5:73:35:3B:E9:62:B6:00:09:7B:E1:E5:58:CF:95:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/B72C94D573353BE962B600097BE1E558CF9533D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B72C94D573353BE962B600097BE1E558CF9533D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10F58DC07B92212AC08351CEC8E993C346572C4D78157690E6BD25F69AC3675E/0/3134382e3130322e3132382e302f31372d3234203d3e203237373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:0c:de:19:d7:d2:9a:07:d1:7b:c3:af:98:87:ce:c4:a9:
         12:e7:55:ea:e1:c9:f9:4e:6e:e1:22:24:34:92:89:7d:38:a7:
         fc:12:fe:17:98:57:bb:e1:0c:de:26:40:bd:fd:1e:26:7a:70:
         47:bf:d6:74:f0:c4:15:c7:4d:00:cd:77:c5:53:48:08:df:81:
         0c:dd:fc:c5:e6:33:11:03:ae:50:56:9e:7d:cf:10:a0:67:b8:
         da:7d:90:93:06:fc:88:2a:f6:34:95:25:9f:f1:5b:49:d1:2a:
         f9:b5:ce:05:ff:51:b3:b9:14:0e:8f:04:1d:f9:2c:ce:ee:0f:
         de:cd:0d:33:6a:88:6f:1e:92:83:51:c1:f1:7e:29:7d:28:8c:
         c0:e5:bb:0e:bc:0e:4f:49:88:bd:f8:c9:24:bc:21:c3:0e:4d:
         88:c7:8a:10:ff:a9:42:3f:0a:ed:39:bb:21:39:ac:14:52:c8:
         f6:e7:dc:fe:56:09:03:48:b8:ce:b2:e2:6e:14:32:c7:5f:e0:
         95:e9:e3:9e:77:c8:a2:80:92:91:66:5f:38:fc:f7:56:aa:ae:
         db:76:24:3a:84:c5:d2:09:d2:38:e6:10:e5:e0:8c:ec:d0:76:
         87:f1:45:0f:5c:0f:cb:cd:c3:e3:37:54:30:7d:e6:62:8e:0e:
         6e:26:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:35 2025 by rpki-client