This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e31362e302f32302d3230203d3e203233313430.roa
File:                     3134362e38332e31362e302f32302d3230203d3e203233313430.roa (raw, json)
Hash identifier:          L9/MPf6zjgPlzETp1kptJN5uJZO2fbzyn+3VfQXJu/0=
Subject key identifier:   3A:5E:0D:66:0F:47:B9:99:C7:59:66:13:D2:AF:E5:D6:B9:16:BF:7C
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       02B84800EB18165B50B42039B310BBCA0F91202E
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e31362e302f32302d3230203d3e203233313430.roa
Signing time:             Tue 06 Jan 2026 19:07:12 +0000
ROA not before:           Tue 06 Jan 2026 19:02:12 +0000
ROA not after:            Tue 05 Jan 2027 19:07:12 +0000
asID:                     23140
IP address blocks:        146.83.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 05:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b8:48:00:eb:18:16:5b:50:b4:20:39:b3:10:bb:ca:0f:91:20:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Jan  6 19:02:12 2026 GMT
            Not After : Jan  5 19:07:12 2027 GMT
        Subject: CN=3A5E0D660F47B999C7596613D2AFE5D6B916BF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:83:32:4e:7c:e7:67:d1:17:23:7b:a7:65:
                    e0:65:ef:ef:48:97:10:c6:cd:e7:0b:a8:da:96:c7:
                    c1:91:57:9e:f1:87:c3:9e:66:29:e2:ef:1e:8a:f2:
                    14:2b:84:68:57:1e:55:b6:6b:95:24:2d:b3:3e:f0:
                    bc:4e:aa:93:17:9c:3c:78:99:92:27:e9:b1:07:de:
                    9a:27:03:90:36:c2:5e:fd:49:46:84:7c:f2:4f:a3:
                    60:79:3f:4e:98:1d:25:b7:96:f7:0a:aa:26:f7:c9:
                    3c:ca:f6:e5:8d:a8:9c:10:82:0b:f9:bc:98:5d:94:
                    32:92:ce:b7:47:f8:e7:02:12:7a:7e:fc:6f:e3:fd:
                    c2:e5:7e:f5:3a:21:94:a1:8d:5f:19:36:51:9a:56:
                    c2:b1:62:b0:a3:e0:2c:91:36:f5:19:ee:95:47:4a:
                    e7:70:ab:2f:7d:3a:bf:04:ca:67:a1:e9:84:43:f8:
                    e5:ae:22:42:30:61:8e:c2:bd:25:e9:6f:72:4d:ba:
                    63:35:0d:4b:d5:b8:45:82:e2:9f:6d:dd:cb:0c:5c:
                    c3:0b:6a:46:5f:4b:a8:7c:ad:e4:32:7e:24:46:c3:
                    de:ae:ae:69:51:39:07:d0:c7:23:cb:18:80:a1:77:
                    8b:91:5c:a2:f5:a4:60:af:c4:9f:a8:96:f5:53:b7:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5E:0D:66:0F:47:B9:99:C7:59:66:13:D2:AF:E5:D6:B9:16:BF:7C
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e31362e302f32302d3230203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:25:ed:dd:e3:27:46:34:11:17:b6:d9:de:c8:b9:ad:b5:
         15:81:e2:50:cd:e1:6e:41:8d:1b:dd:2e:f5:52:98:6e:a4:23:
         05:1f:e3:e5:44:ea:af:9b:fb:e5:87:47:b3:34:1d:0e:4f:8a:
         91:ec:31:55:29:ec:22:07:c0:d3:8d:db:4c:be:86:09:80:88:
         68:70:1f:25:00:6b:b8:f9:12:a8:19:aa:03:23:01:f4:5d:77:
         0a:a5:43:94:e6:75:32:38:61:69:60:13:12:aa:21:ae:da:5c:
         b1:ea:77:76:81:bc:b0:e2:35:d8:65:01:b6:a4:59:06:f9:af:
         9d:da:e9:de:13:a2:33:19:b9:9a:27:cc:ef:98:22:4b:d1:3b:
         7f:f6:41:fd:d7:7e:d5:b3:66:dc:95:61:7c:e8:6d:bd:86:f2:
         f6:c5:84:82:75:b2:1e:2f:a8:03:0a:8a:d7:84:b8:e0:60:f6:
         a3:44:b7:44:fd:e5:c7:f4:c9:09:12:4c:0a:b1:bc:4d:57:83:
         96:1f:0d:1f:4f:5a:5b:84:66:d6:01:58:2d:58:67:9b:37:44:
         71:88:23:b0:f1:b0:e1:7d:2b:7d:35:4b:c6:a2:17:a2:09:24:
         8d:b8:5c:8d:b4:81:5f:e0:fd:5b:e3:ec:80:aa:2b:5b:1d:49:
         f7:28:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:32:53 2026 by rpki-client