This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa
File:                     3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          ZdefnAJUEv0yyfv3HL/1Nw71BOurG2PDP7qime9R4Wo=
Subject key identifier:   9F:3D:87:F4:9D:55:25:CD:06:C1:B6:D5:8D:17:F7:43:A2:4B:5A:F6
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       2D8EF29844FC3D4B19E88290C0DE84D5ACDC8488
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa
Signing time:             Tue 06 Jan 2026 20:51:34 +0000
ROA not before:           Tue 06 Jan 2026 20:46:34 +0000
ROA not after:            Tue 05 Jan 2027 20:51:34 +0000
asID:                     262186
IP address blocks:        192.144.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:f2:98:44:fc:3d:4b:19:e8:82:90:c0:de:84:d5:ac:dc:84:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Jan  6 20:46:34 2026 GMT
            Not After : Jan  5 20:51:34 2027 GMT
        Subject: CN=9F3D87F49D5525CD06C1B6D58D17F743A24B5AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:c8:bc:5e:31:97:ef:3f:3d:10:94:04:85:
                    53:ce:5f:66:87:6d:3d:5f:f8:f9:74:cf:7a:90:04:
                    52:8d:78:aa:e7:1f:9a:33:85:57:9f:af:15:ea:df:
                    8a:bd:dd:a9:f2:db:e5:93:87:ea:f9:ac:a2:b8:80:
                    79:9a:46:48:a8:d9:0e:8d:b7:f1:48:56:51:93:2c:
                    f7:93:ac:60:42:83:0d:89:27:9c:3a:8d:02:36:9f:
                    11:5e:3b:74:32:94:e0:85:05:9f:f1:f9:be:a1:30:
                    3a:5c:65:ef:88:1c:b8:1a:0c:4f:b8:7e:cd:60:24:
                    b4:3e:0d:eb:cc:96:d1:1b:e0:4b:e0:db:99:b5:e9:
                    9d:33:5b:4f:c6:47:fc:8c:d7:11:31:83:d8:d9:c9:
                    69:04:4d:d2:52:7e:bb:63:5c:3a:5c:fd:83:73:a2:
                    de:2e:da:18:6e:3e:cc:bf:2b:ec:14:9f:ff:80:a9:
                    f2:6c:39:bf:5f:c6:a5:15:18:0e:ea:19:d6:47:82:
                    c1:34:5a:03:a5:d0:a3:84:53:51:f8:d5:07:80:9f:
                    4c:f6:dc:0b:9c:70:e6:8e:e4:6a:1e:7b:60:18:a1:
                    4d:0d:d4:fe:bf:89:ac:8b:b1:6b:db:10:46:7e:f4:
                    70:86:a4:ab:fa:00:af:e0:53:0a:8f:da:39:f1:5d:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3D:87:F4:9D:55:25:CD:06:C1:B6:D5:8D:17:F7:43:A2:4B:5A:F6
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:d4:2f:29:d5:17:b2:f0:2a:0b:be:a2:e1:50:79:24:17:
         90:f1:4b:b0:a2:ff:16:1e:df:a9:b9:ed:7c:8c:12:cd:6b:9b:
         da:03:b4:b4:6a:00:d4:34:b8:02:a9:68:a0:0f:7b:70:7c:07:
         d9:db:00:40:fb:38:74:93:b0:73:b4:b3:8d:02:f8:65:8f:85:
         24:5b:af:8f:47:2b:af:87:d9:b2:90:31:d8:7c:bc:52:4d:6e:
         31:4d:cd:f5:98:fc:c7:86:51:23:99:9b:f4:67:5a:29:db:d2:
         aa:21:4c:e0:56:b4:d0:65:29:11:7b:79:01:1f:15:f3:a2:98:
         03:04:e2:d2:a4:bb:ba:01:9f:38:0e:9c:09:0b:06:22:c8:e3:
         64:8f:55:b1:8b:9e:3b:bb:8c:e7:d5:c0:80:5d:1f:03:44:47:
         68:13:5d:d0:29:42:bc:96:78:80:79:1c:6f:de:2f:8e:7f:44:
         e7:80:65:4d:ef:26:45:1e:dc:46:9b:f0:9a:5a:e5:74:78:09:
         f8:e2:0c:4a:6b:d9:cd:e7:96:59:5a:bd:57:73:38:29:40:0c:
         32:1f:7f:5f:48:ac:98:b9:ea:e9:4c:b8:c4:85:53:82:47:9f:
         0e:6f:8c:42:8b:0c:2b:24:d0:35:ed:55:86:d8:d6:cf:6e:89:
         1b:33:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 14:11:12 2026 by rpki-client