This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa
File:                     3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa (raw, json)
Hash identifier:          gnu70bZ4rCVyMJ9fyCAJeqra2put3tz1DIXEwL5ERh4=
Subject key identifier:   72:5D:3D:7C:28:9E:F0:1C:0F:14:47:86:44:55:7A:4A:6B:37:24:18
Certificate issuer:       /CN=6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9
Certificate serial:       2FBD541CC5809006CE693EAF74ED11B3AAEA5B2B
Authority key identifier: 6C:7B:10:FD:81:C0:E8:D8:A6:DE:1A:27:C5:05:95:09:63:3C:6C:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa
Signing time:             Tue 06 Jan 2026 19:34:57 +0000
ROA not before:           Tue 06 Jan 2026 19:29:57 +0000
ROA not after:            Tue 05 Jan 2027 19:34:57 +0000
asID:                     264643
IP address blocks:        143.255.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bd:54:1c:c5:80:90:06:ce:69:3e:af:74:ed:11:b3:aa:ea:5b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9
        Validity
            Not Before: Jan  6 19:29:57 2026 GMT
            Not After : Jan  5 19:34:57 2027 GMT
        Subject: CN=725D3D7C289EF01C0F14478644557A4A6B372418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:89:ac:a2:5f:4d:99:6a:3c:db:ba:e1:40:
                    9c:c9:57:4c:a1:fb:73:da:f9:39:cd:20:b1:bf:0e:
                    78:0d:8d:f5:11:6c:12:d7:44:71:9c:61:0a:1e:db:
                    67:2c:fd:55:32:71:34:84:35:41:a2:76:28:33:fa:
                    4a:2b:ac:ad:77:e9:53:5f:3d:f1:b5:88:f2:69:75:
                    76:9e:fd:a3:b0:1f:8f:25:b1:c1:a0:48:24:d0:ee:
                    04:7e:83:25:71:af:73:57:a8:ce:c9:ee:c2:7b:5c:
                    f6:b9:5a:76:ad:61:33:59:cd:83:66:e6:15:41:43:
                    df:45:85:64:b9:01:59:7c:e5:f8:80:98:35:e1:34:
                    45:b2:42:fb:d0:f2:bb:f0:5a:f6:44:82:ad:f8:0a:
                    e2:61:5a:e5:4e:84:18:3a:9c:2b:fd:29:34:e2:99:
                    40:69:b0:78:1e:e5:6b:04:e1:ac:4a:a4:48:ce:ec:
                    ab:17:b8:18:11:b0:d5:bd:4d:78:6f:e2:bb:7d:cc:
                    26:9c:66:6f:f0:2e:fb:c6:f1:dc:ad:3c:c8:ab:cd:
                    6f:db:70:25:c2:a5:2c:32:d6:55:1f:86:4a:7d:dd:
                    3c:06:fe:ae:04:d9:d5:54:c6:43:9b:e0:14:7b:0e:
                    cc:6e:ea:e9:25:57:d2:b5:51:3c:c6:f4:d3:26:60:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:3D:7C:28:9E:F0:1C:0F:14:47:86:44:55:7A:4A:6B:37:24:18
            X509v3 Authority Key Identifier:
                keyid:6C:7B:10:FD:81:C0:E8:D8:A6:DE:1A:27:C5:05:95:09:63:3C:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7B10FD81C0E8D8A6DE1A27C5059509633C6CA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/480F7A21A3E896BA91950EF6C889B6613D171C555B25911D2C8431BE43B3C932/0/3134332e3235352e3135322e302f32322d3234203d3e20323634363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:08:b3:94:60:26:85:5e:a2:10:ae:fc:fb:0d:49:40:09:
         0b:dd:89:3d:ee:8c:aa:f3:30:51:7e:d2:6c:b0:1b:61:1d:6d:
         f2:51:d0:96:72:46:49:52:ff:f0:f5:5e:3d:e6:6f:5e:c5:67:
         62:f8:a9:1d:15:99:6a:84:51:5a:cf:91:a9:0e:7b:5b:68:b8:
         e7:e0:dc:62:44:7b:e9:d3:1b:90:68:4a:48:8d:54:aa:28:b1:
         5d:8b:7b:71:3d:48:46:45:ec:82:25:9e:9d:12:8c:c6:84:08:
         4c:c9:07:a2:38:7e:b4:8e:2b:2e:67:05:1a:79:5b:93:7a:6a:
         90:6b:57:63:de:dd:37:ec:14:75:7b:8c:59:b7:50:93:3f:00:
         d5:53:45:3e:24:92:a0:e4:7e:53:78:1d:a9:a6:a4:9b:06:0c:
         10:36:91:26:f7:24:76:64:f9:6d:93:03:ec:16:ee:61:d7:60:
         e7:92:e4:5d:31:e1:af:46:a7:cb:31:93:da:74:f5:ab:08:39:
         06:28:c3:75:9c:43:56:4d:ae:82:2d:1d:7a:fd:95:5c:77:1f:
         b3:6e:43:da:54:21:3c:1f:c7:1b:76:25:8d:7c:d0:bf:1a:61:
         00:66:01:a4:66:4a:07:44:c7:f1:ea:08:87:ef:7a:06:ac:4f:
         14:4d:ca:78
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUL71UHMWAkAbOaT6vdO0Rs6rqWyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3QjEwRkQ4MUMwRThEOEE2REUxQTI3QzUwNTk1MDk2
MzNDNkNBOTAeFw0yNjAxMDYxOTI5NTdaFw0yNzAxMDUxOTM0NTdaMDMxMTAvBgNV
BAMTKDcyNUQzRDdDMjg5RUYwMUMwRjE0NDc4NjQ0NTU3QTRBNkIzNzI0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLEomsol9NmWo827rhQJzJV0yh
+3Pa+TnNILG/DngNjfURbBLXRHGcYQoe22cs/VUycTSENUGidigz+korrK136VNf
PfG1iPJpdXae/aOwH48lscGgSCTQ7gR+gyVxr3NXqM7J7sJ7XPa5WnatYTNZzYNm
5hVBQ99FhWS5AVl85fiAmDXhNEWyQvvQ8rvwWvZEgq34CuJhWuVOhBg6nCv9KTTi
mUBpsHge5WsE4axKpEjO7KsXuBgRsNW9TXhv4rt9zCacZm/wLvvG8dytPMirzW/b
cCXCpSwy1lUfhkp93TwG/q4E2dVUxkOb4BR7Dsxu6uklV9K1UTzG9NMmYFONAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcl09fCie8BwPFEeGRFV6Sms3JBgwHwYDVR0j
BBgwFoAUbHsQ/YHA6Nim3honxQWVCWM8bKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80ODBGN0EyMUEzRTg5NkJBOTE5NTBFRjZDODg5QjY2MTNE
MTcxQzU1NUIyNTkxMUQyQzg0MzFCRTQzQjNDOTMyLzAvNkM3QjEwRkQ4MUMwRThE
OEE2REUxQTI3QzUwNTk1MDk2MzNDNkNBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82QzdCMTBGRDgxQzBFOEQ4QTZE
RTFBMjdDNTA1OTUwOTYzM0M2Q0E5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDgwRjdBMjFBM0U4OTZCQTkxOTUwRUY2Qzg4OUI2NjEzRDE3MUM1NTVC
MjU5MTFEMkM4NDMxQkU0M0IzQzkzMi8wLzMxMzQzMzJlMzIzNTM1MmUzMTM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM0MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
/5gwDQYJKoZIhvcNAQELBQADggEBAFaxCLOUYCaFXqIQrvz7DUlACQvdiT3ujKrz
MFF+0mywG2EdbfJR0JZyRklS//D1Xj3mb17FZ2L4qR0VmWqEUVrPkakOe1touOfg
3GJEe+nTG5BoSkiNVKoosV2Le3E9SEZF7IIlnp0SjMaECEzJB6I4frSOKy5nBRp5
W5N6apBrV2Pe3TfsFHV7jFm3UJM/ANVTRT4kkqDkflN4HammpJsGDBA2kSb3JHZk
+W2TA+wW7mHXYOeS5F0x4a9Gp8sxk9p09asIOQYow3WcQ1ZNroItHXr9lVx3H7Nu
Q9pUITwfxxt2JY180L8aYQBmAaRmSgdEx/HqCIfvegasTxRNyng=
-----END CERTIFICATE-----
Generated at Tue Jan 13 10:06:46 2026 by rpki-client