This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa
File:                     3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa (raw, json)
Hash identifier:          w4FSbDPhAg5KEby2IeLIc1AG0KAGfQrLlpLv+vXLD8Q=
Subject key identifier:   D2:9D:F7:FF:B1:7E:5A:B6:B8:01:3B:A7:90:A3:74:2E:06:0E:8D:EC
Certificate issuer:       /CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
Certificate serial:       74B4E9339EFA0107952C4430D2448B22D21CB4DB
Authority key identifier: BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa
Signing time:             Tue 06 Jan 2026 19:42:59 +0000
ROA not before:           Tue 06 Jan 2026 19:37:59 +0000
ROA not after:            Tue 05 Jan 2027 19:42:59 +0000
asID:                     265693
IP address blocks:        143.137.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b4:e9:33:9e:fa:01:07:95:2c:44:30:d2:44:8b:22:d2:1c:b4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4
        Validity
            Not Before: Jan  6 19:37:59 2026 GMT
            Not After : Jan  5 19:42:59 2027 GMT
        Subject: CN=D29DF7FFB17E5AB6B8013BA790A3742E060E8DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:e3:e4:8c:03:b2:26:40:31:a3:91:b2:c4:
                    a7:ad:99:41:3f:47:f4:c5:6c:ec:5b:26:3c:bc:d3:
                    fb:7e:1a:d5:96:7f:2c:69:7c:85:f2:c9:71:57:16:
                    9a:22:f7:84:db:d0:40:5a:9c:29:da:d1:1c:53:5a:
                    e9:75:9f:d2:14:31:a2:fe:3d:b8:f4:f2:bb:15:a0:
                    27:ec:bf:c2:5a:3e:32:74:d6:0b:80:bb:95:76:54:
                    39:5c:52:41:82:55:81:39:0a:bc:61:c5:8f:55:37:
                    30:f9:2c:d4:60:84:09:ed:db:b1:03:d5:fb:fb:7d:
                    a8:7d:5c:ee:16:a7:51:f1:59:b5:c2:90:d9:4a:0f:
                    88:20:3b:de:eb:93:71:ce:90:14:67:4c:37:be:a8:
                    90:8e:80:19:e8:65:31:d6:8c:08:5e:2b:14:2d:62:
                    d4:64:ce:52:f3:b4:4c:4b:2c:a8:ac:78:70:b6:0d:
                    44:9d:f8:31:b7:86:22:fc:23:43:c0:6f:c5:59:f0:
                    ff:58:25:f0:f4:5d:02:f8:2c:6b:79:fa:5f:15:61:
                    43:6a:47:51:6f:6e:c4:34:91:2f:e9:46:87:66:97:
                    3f:a5:07:f2:62:a5:a0:b5:42:aa:44:31:57:28:49:
                    e1:27:4c:20:a8:72:ec:ce:44:7c:a2:d5:0a:f4:31:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9D:F7:FF:B1:7E:5A:B6:B8:01:3B:A7:90:A3:74:2E:06:0E:8D:EC
            X509v3 Authority Key Identifier:
                keyid:BC:8F:94:CC:F6:EF:DE:44:04:33:A6:CA:0A:4F:42:5A:3C:74:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC8F94CCF6EFDE440433A6CA0A4F425A3C74A1A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44B3E9C72B5775BB66C8C167C44595DC9E6EE9ADDA24E6B9E8E9855A26A2C59F/0/3134332e3133372e39362e302f32322d3234203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:f6:c4:12:fd:69:b5:35:c0:13:41:56:28:65:a3:ed:ee:
         1a:2a:2d:eb:ec:1b:01:ce:1c:db:f7:20:b9:9d:7a:3a:a0:9a:
         0a:86:a4:1a:05:e2:e2:5d:5e:55:e0:0b:31:d3:72:06:81:dc:
         36:0b:33:24:5e:ef:3f:62:3a:01:db:fd:6d:1d:bc:ad:e7:6b:
         0c:be:c3:f4:49:59:19:bc:31:a7:c5:db:33:f1:b7:33:4c:e6:
         24:1d:47:12:43:12:91:48:5e:91:27:8f:be:8b:cf:aa:8f:fc:
         19:8a:84:f5:f4:eb:e5:6d:07:ad:90:7b:75:45:dc:05:09:2b:
         f3:0b:c0:79:56:f5:16:31:a4:f2:fe:ab:ea:c9:60:fd:38:89:
         95:17:48:b3:c4:d2:15:bb:72:8c:4b:98:2d:e0:68:9a:88:59:
         bc:7f:b7:1e:48:b6:39:cb:5d:29:69:2a:a5:33:09:38:22:43:
         f8:e9:21:75:0e:e8:d7:0d:85:1e:cd:d4:c6:98:8e:13:be:e1:
         8a:53:dc:60:db:73:04:35:76:0b:a7:db:ea:66:31:92:67:be:
         ad:08:13:4b:c8:31:7a:15:cb:0f:7e:a8:a6:72:c5:7a:be:39:
         26:4e:7c:b4:79:3e:0e:0a:59:ca:7e:6b:2f:ed:a6:37:c5:ae:
         16:ca:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:22:26 2026 by rpki-client