This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa
File:                     3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          WHEUwpDN0i+y2eUhfoD/SSq9Tc90NBo5gWtXGYk1tRw=
Subject key identifier:   EB:A2:DC:90:65:E7:6C:A1:AB:E4:7B:5A:59:59:31:91:D5:7A:FC:DF
Certificate issuer:       /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial:       3725667FCE88E67528E34E9FDA177490CC7F90D1
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 06 Jan 2026 19:20:29 +0000
ROA not before:           Tue 06 Jan 2026 19:15:29 +0000
ROA not after:            Tue 05 Jan 2027 19:20:29 +0000
asID:                     61466
IP address blocks:        201.148.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:25:66:7f:ce:88:e6:75:28:e3:4e:9f:da:17:74:90:cc:7f:90:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
        Validity
            Not Before: Jan  6 19:15:29 2026 GMT
            Not After : Jan  5 19:20:29 2027 GMT
        Subject: CN=EBA2DC9065E76CA1ABE47B5A59593191D57AFCDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:70:0e:9c:32:33:b5:29:38:84:94:dd:40:
                    56:7e:15:14:99:01:1a:bf:00:c3:d3:77:b2:92:58:
                    41:bd:ab:1b:49:47:44:3e:71:27:d3:c0:4d:fa:58:
                    94:3f:a9:bc:3f:1b:5d:67:1a:1f:85:0d:26:63:23:
                    bf:78:ce:89:06:3b:33:61:b1:87:9d:11:ac:24:11:
                    cb:6c:94:d8:8f:09:bf:93:12:49:fb:9d:2a:06:19:
                    67:af:4d:99:9e:65:3d:4d:91:c9:36:10:73:b0:44:
                    2c:ac:7d:0e:08:37:24:20:15:02:0f:47:93:4d:62:
                    08:3e:2c:0f:e2:ba:5c:84:9a:de:c8:24:f7:65:6d:
                    30:e3:c4:34:0b:9a:bf:fc:74:7c:81:8b:9f:4e:26:
                    08:2d:c0:b5:41:7b:fc:ab:f9:6e:1d:03:7b:eb:ca:
                    c0:50:a3:16:52:b4:cb:e8:5b:2e:17:d8:ec:8d:7f:
                    fe:34:d6:d9:29:2e:ca:f2:b1:4f:1c:9a:92:45:06:
                    5f:7d:e9:1a:06:c1:ba:91:b5:3a:4a:53:bc:f2:90:
                    a1:76:42:88:c6:5c:c8:d3:05:34:85:b0:46:1e:e5:
                    20:22:4e:d7:1a:5a:77:ea:ac:b6:1c:e8:e7:9c:3f:
                    03:ae:a2:a7:a9:ad:3f:11:8b:4d:02:e8:9c:6f:ac:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A2:DC:90:65:E7:6C:A1:AB:E4:7B:5A:59:59:31:91:D5:7A:FC:DF
            X509v3 Authority Key Identifier:
                keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:3a:32:95:98:e0:c8:e4:29:6e:e9:b6:6f:ea:8e:24:1b:
         78:8f:c3:1f:6f:91:aa:25:fc:22:17:4c:58:14:4e:46:94:e6:
         06:e6:b9:05:89:70:cc:44:29:9e:49:46:7f:d2:fa:04:f7:23:
         e1:e9:4b:60:e5:29:e6:a7:86:a7:79:d9:c3:72:ac:20:9a:47:
         6e:c0:0e:25:77:94:ef:7e:99:54:f5:99:8f:15:97:ae:6b:6f:
         7f:78:c0:d2:be:fb:e0:67:14:53:12:9e:4e:c8:e3:67:fd:42:
         68:31:4e:45:9f:c8:2a:a2:55:fe:66:a7:7f:83:d7:15:42:73:
         85:58:21:07:d2:d5:4e:a3:dc:e4:68:70:f4:9c:8b:64:27:95:
         2f:67:38:19:86:46:c8:19:6a:3b:ff:10:32:54:b5:f0:6a:d0:
         92:71:a2:83:62:3c:97:47:d2:98:f0:46:8f:d7:44:e0:97:ee:
         9f:4f:bb:5f:a7:2c:da:3e:cb:15:c5:29:40:e3:91:30:99:f9:
         91:16:05:0e:ac:b0:5f:f2:af:db:55:7f:cd:68:fc:62:a4:4e:
         1d:e0:6e:a6:fa:51:98:31:f5:c7:dc:78:9a:cd:dd:98:6d:a3:
         fa:e0:c5:be:da:e8:a7:d1:9c:ef:98:9e:51:2e:a5:e1:14:95:
         c5:d4:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:32:08 2026 by rpki-client