This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          IcOZ+zoH0gEbWwnZ7w1e6o0FxgFtbKW556Y7NH9wPus=
Subject key identifier:   A4:A8:AB:01:5A:4E:44:88:D6:A0:BC:15:78:41:73:39:27:E3:80:5D
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       3E4B3E398708FF3F7B8A276D3CCEA86DF11BE5AC
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 06 Jan 2026 19:32:41 +0000
ROA not before:           Tue 06 Jan 2026 19:27:41 +0000
ROA not after:            Tue 05 Jan 2027 19:32:41 +0000
asID:                     22122
IP address blocks:        148.209.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:3e:39:87:08:ff:3f:7b:8a:27:6d:3c:ce:a8:6d:f1:1b:e5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Jan  6 19:27:41 2026 GMT
            Not After : Jan  5 19:32:41 2027 GMT
        Subject: CN=A4A8AB015A4E4488D6A0BC157841733927E3805D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:b1:09:c9:35:07:ce:2c:85:64:f3:91:32:
                    62:1c:35:8d:db:56:62:e6:a8:ed:7d:0a:d4:f1:d0:
                    c8:c4:0b:57:99:4c:a4:41:0f:74:60:2a:d0:6e:2c:
                    44:69:86:ca:6b:e3:bb:07:56:15:34:57:50:00:f3:
                    a1:66:b3:10:43:78:87:89:40:29:ad:4e:02:5a:b3:
                    31:e8:e1:0d:f7:be:47:55:d6:e4:3f:cb:a7:0f:2f:
                    21:f2:ea:ef:39:16:1e:86:37:58:a1:2e:e8:af:a7:
                    2f:04:e7:1a:ae:df:e8:1c:6b:01:0d:3b:e2:24:df:
                    e9:3a:2e:a7:a5:55:32:bd:ae:23:e7:82:f3:8c:88:
                    e5:08:36:ee:f1:14:0b:eb:19:f0:3a:f4:38:92:25:
                    70:df:71:6e:e4:d9:d0:cb:be:d0:05:65:6e:d4:bc:
                    8c:3f:00:af:4d:c3:ad:60:db:cd:c6:6c:fd:69:87:
                    18:13:0e:17:78:52:74:64:70:e6:de:96:5b:51:88:
                    cb:45:02:5a:2b:97:95:bd:bf:cd:b7:d1:8e:88:ae:
                    1c:02:05:07:66:da:98:2a:e4:74:3c:5d:9f:4a:8c:
                    88:53:ff:d1:b5:a9:96:0b:89:81:31:8e:53:46:34:
                    a6:ab:ca:7a:0b:e0:f5:c9:29:96:55:dc:f9:23:31:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A8:AB:01:5A:4E:44:88:D6:A0:BC:15:78:41:73:39:27:E3:80:5D
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234362e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:93:52:26:31:f1:4f:c7:38:d2:78:20:4d:c2:65:00:7a:2a:
         4e:38:d0:68:83:c1:04:da:ec:a4:51:29:cc:07:48:9b:04:ec:
         9d:35:35:df:20:e1:3e:05:cc:06:bf:c0:e8:c1:81:c8:11:6f:
         8b:ec:2a:c0:fd:27:88:36:38:35:b8:55:db:cb:b2:21:42:41:
         23:12:57:e6:86:58:fd:37:16:4a:77:01:54:ee:d9:0f:5f:53:
         8d:63:84:41:53:2d:86:0c:df:42:9a:2f:ec:ca:0e:e1:c4:93:
         2f:9a:cd:b2:39:84:71:db:99:b6:be:a3:82:bf:ec:ff:5c:60:
         64:2f:dc:18:70:d4:32:4d:94:26:55:7f:a3:ce:81:f8:f3:a2:
         da:60:56:39:f7:67:8d:66:70:10:ba:07:13:c6:13:3b:06:b5:
         d2:71:bb:78:71:52:6c:8c:77:06:6e:e7:3e:a2:be:cd:e3:dd:
         ad:be:24:a8:24:cd:07:7f:75:5b:b9:4e:29:e9:0c:57:a9:61:
         18:9d:b0:c2:13:14:ef:8c:c1:75:4f:23:77:bd:eb:61:da:8f:
         b6:3d:6e:4d:ca:ec:cf:d2:b5:37:91:f4:7e:bb:d2:6b:a7:f2:
         40:79:8c:23:9e:66:2d:39:d4:28:96:7f:e5:9c:8a:85:86:33:
         61:8e:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 23:17:12 2026 by rpki-client