This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
File:                     3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          BtNoqNuE9gqXBM+heUW14CcdPDD7AqfIMus1DCgSH6g=
Subject key identifier:   F7:2B:9E:9A:2E:3C:5C:E0:9F:46:BE:52:8A:E6:92:23:01:BC:7C:62
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       40ED22EBB75818FBAB92724A82887CD4B343608E
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 06 Jan 2026 18:59:10 +0000
ROA not before:           Tue 06 Jan 2026 18:54:10 +0000
ROA not after:            Tue 05 Jan 2027 18:59:10 +0000
asID:                     22411
IP address blocks:        143.137.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 17:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:22:eb:b7:58:18:fb:ab:92:72:4a:82:88:7c:d4:b3:43:60:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Jan  6 18:54:10 2026 GMT
            Not After : Jan  5 18:59:10 2027 GMT
        Subject: CN=F72B9E9A2E3C5CE09F46BE528AE6922301BC7C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:81:ae:30:d5:85:a6:59:b2:bf:01:49:c7:
                    70:ad:33:a6:9c:0b:e8:f6:71:d3:66:3c:de:9b:45:
                    86:3a:06:71:aa:a7:c2:da:97:6a:8c:47:e3:da:62:
                    63:9f:f7:cb:02:bd:cb:c4:66:07:b8:b6:6a:0a:51:
                    df:8b:48:fd:36:5d:83:8c:60:4e:a3:65:da:47:6e:
                    65:ed:22:a0:8e:31:69:52:5b:13:af:7c:a8:42:6d:
                    48:e6:06:ae:52:4e:b9:80:60:6b:38:a0:80:19:f8:
                    d0:bc:2a:93:fd:6b:c6:89:38:c4:f6:82:88:a2:03:
                    af:a6:69:72:bb:38:ae:5a:ae:35:c8:27:70:78:4c:
                    de:03:92:03:aa:a1:5b:17:a6:c8:2c:73:1a:ab:f3:
                    94:d2:11:7d:d2:70:f6:9c:2b:6a:23:53:58:31:01:
                    3f:71:96:47:ed:02:b7:0b:b4:9a:bb:e2:8d:f1:36:
                    a7:21:a7:90:23:0a:80:5d:bb:ee:37:59:6f:b5:84:
                    d7:97:f9:e4:fc:9d:46:dd:05:4d:35:da:92:5e:0e:
                    60:ad:af:0d:90:f2:3f:c1:27:b6:44:2a:98:8b:81:
                    4f:54:f5:2a:9f:9c:e6:27:8e:1a:f1:18:95:2f:c3:
                    2c:f1:8d:90:80:a9:1c:12:79:e2:0e:f2:a2:33:55:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2B:9E:9A:2E:3C:5C:E0:9F:46:BE:52:8A:E6:92:23:01:BC:7C:62
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:74:71:95:bd:b2:4b:ae:f1:f8:96:7d:73:65:91:ca:8c:ed:
         3f:2e:5c:c0:be:b3:19:3b:3d:ea:ce:ee:f1:19:d4:55:43:0b:
         dd:c0:88:b9:c5:42:1f:9d:22:b5:e6:19:c5:e1:0e:4c:5d:2e:
         56:c8:35:3b:7e:7e:c0:e9:ad:c1:75:74:35:4e:da:e0:53:b6:
         06:85:1c:b8:23:68:1d:c8:e7:53:74:ba:49:dd:cf:07:f1:94:
         08:c6:2f:24:80:4c:86:80:e4:93:37:2f:4b:e5:29:9b:06:de:
         5a:87:3b:23:3f:3e:1a:16:dd:14:38:a7:5c:76:10:12:f6:31:
         b3:29:80:5d:07:cc:14:c4:b8:75:3a:25:7e:25:d1:e9:c4:73:
         4e:b5:e4:4d:43:24:d6:4e:0d:44:e3:7b:91:89:2d:c7:72:af:
         9c:2b:b7:91:10:53:27:a1:76:19:3a:be:6e:19:01:10:ac:23:
         95:e9:97:0b:09:9a:82:92:65:69:25:cc:96:3a:64:2c:8b:16:
         f2:e9:0d:da:cf:6f:72:1b:20:8a:18:ae:a9:b3:6b:cf:22:12:
         89:58:34:97:ab:5d:ed:9e:3f:e4:d2:21:84:86:45:e0:13:aa:
         96:30:bd:e2:ba:ba:19:57:c4:82:ad:87:c2:be:72:4b:ab:49:
         a2:40:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:31:31 2026 by rpki-client