This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          OsY5RrQ6BnxLe2yYQa967XTsXNhZ0niZU4K3P6xAptk=
Subject key identifier:   8D:9E:4C:95:14:92:84:22:12:67:1C:49:D4:D0:5C:66:5B:04:2B:A4
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       6CDA84E78B95D04AAEDAF3F542A7E64E88CCB96C
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:36:04 +0000
ROA not before:           Tue 06 Jan 2026 19:31:04 +0000
ROA not after:            Tue 05 Jan 2027 19:36:04 +0000
asID:                     21575
IP address blocks:        148.102.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 15:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:84:e7:8b:95:d0:4a:ae:da:f3:f5:42:a7:e6:4e:88:cc:b9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:31:04 2026 GMT
            Not After : Jan  5 19:36:04 2027 GMT
        Subject: CN=8D9E4C951492842212671C49D4D05C665B042BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:59:7a:3c:89:11:d4:35:3e:91:a4:70:19:
                    18:f0:a7:07:46:d2:b9:42:73:32:b1:56:54:c5:44:
                    2d:3b:6e:7f:51:db:a4:cb:f7:4b:1c:86:23:7c:5d:
                    2c:84:11:6f:96:f2:34:7f:90:ca:f2:a3:f5:c4:c3:
                    60:7b:d1:b9:d3:88:5e:e7:6b:a7:8b:6e:08:63:c8:
                    b9:18:2b:5c:3e:60:6f:c6:69:c6:dd:da:40:6d:d5:
                    c3:6d:85:ab:05:7a:24:43:43:3e:f9:d2:f0:09:e1:
                    f3:cd:40:14:78:74:50:30:b7:dd:4b:e7:40:d2:52:
                    94:a2:9b:72:47:04:ed:49:38:c8:57:94:f2:c8:5f:
                    70:4a:78:10:d6:d3:31:37:da:5d:cf:a2:03:cb:37:
                    a6:df:57:da:22:b2:e3:28:ec:0c:f9:70:26:7f:f1:
                    08:c3:0c:e9:8b:b7:9c:3c:e9:52:f2:4f:b6:55:e8:
                    c8:a2:74:7e:8a:04:8d:d1:6c:4e:df:d3:34:a6:14:
                    8e:d8:1a:89:fd:2e:99:66:a6:5c:5c:d1:ad:af:0a:
                    e7:ff:23:f3:8f:23:91:9f:3c:cb:31:18:af:38:96:
                    c2:5e:5e:b2:05:c3:91:4c:67:d1:f8:2d:96:07:83:
                    10:5a:b1:da:36:42:fe:88:b5:bf:b8:85:2f:dc:43:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9E:4C:95:14:92:84:22:12:67:1C:49:D4:D0:5C:66:5B:04:2B:A4
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130392e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:37:82:fe:ad:96:70:97:f8:b9:3e:e5:30:32:48:d0:9b:
         04:74:21:86:e5:b8:ef:a6:8c:25:a1:b4:7f:9e:39:98:99:6a:
         11:82:00:7f:e6:95:fd:4c:79:ce:35:05:bc:a0:e2:c9:a9:25:
         8d:eb:e1:cb:be:9b:5f:99:88:ce:b6:10:8e:11:f0:0e:72:fb:
         07:dd:fc:09:c4:a6:4d:c8:c0:3c:07:e4:f3:d5:95:22:bf:2f:
         31:b5:eb:74:7c:e4:55:8c:97:bb:4a:48:81:1f:06:94:2f:1c:
         40:74:2e:ae:a0:e0:94:e2:03:61:c5:dd:a3:5e:0f:a5:03:7e:
         c7:c7:31:a2:30:5a:86:96:49:74:94:de:66:18:af:3e:57:74:
         0f:bf:68:8b:6c:29:7a:ac:46:d5:35:83:9b:35:82:d4:96:62:
         ce:e3:b1:a2:99:ee:4f:3d:b6:56:5a:63:82:2d:97:17:9c:8d:
         03:0a:b0:3a:44:f6:fe:a5:f7:c6:ff:7f:76:7d:f7:33:b9:26:
         91:3c:53:84:83:ff:98:63:6e:17:af:39:1d:60:59:6e:58:2e:
         8b:42:9b:6b:85:d4:30:ae:9c:f8:a2:dc:68:3a:18:67:ff:4e:
         d3:fe:86:2b:4d:a1:74:8e:0f:f5:87:f2:42:c2:a3:a2:49:a8:
         cc:c8:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:58 2026 by rpki-client