This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e3131352e302f32342d3234203d3e203238343932.roa
File:                     3134382e3234332e3131352e302f32342d3234203d3e203238343932.roa (raw, json)
Hash identifier:          Ak8wCMIAtQ+T4dhdyP1QBOpoNjoy4kFMHVQd8XBbS8M=
Subject key identifier:   8F:B9:CE:2C:C1:27:32:83:3D:A3:09:62:D7:1A:66:2E:F7:13:86:84
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       68D3E59EF37229FCC8884E2CDB8472E5BD49DF9E
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e3131352e302f32342d3234203d3e203238343932.roa
Signing time:             Tue 06 Jan 2026 19:14:58 +0000
ROA not before:           Tue 06 Jan 2026 19:09:58 +0000
ROA not after:            Tue 05 Jan 2027 19:14:58 +0000
asID:                     28492
IP address blocks:        148.243.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 00:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d3:e5:9e:f3:72:29:fc:c8:88:4e:2c:db:84:72:e5:bd:49:df:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:58 2026 GMT
            Not After : Jan  5 19:14:58 2027 GMT
        Subject: CN=8FB9CE2CC12732833DA30962D71A662EF7138684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:f9:52:e9:6b:bb:3c:ff:05:b3:7e:d2:de:
                    0e:df:37:56:04:4d:4c:36:03:d3:23:9a:f6:c9:2f:
                    a0:b3:fc:02:f0:dd:b7:f3:4d:51:a9:34:a9:3b:ba:
                    5a:dc:09:ab:ae:7b:55:26:5d:f8:2f:2c:72:af:9d:
                    71:50:e4:91:24:60:d5:3b:6b:58:c3:0a:ee:58:4e:
                    28:ce:fb:7c:02:88:e4:dc:74:8b:8c:57:8e:9e:c1:
                    e6:bd:69:39:0c:b1:fb:a2:07:c0:b9:9f:3a:05:1c:
                    f8:e1:2b:91:7f:a4:de:31:7d:b0:6d:cd:11:19:57:
                    99:6d:a0:c4:a5:cb:08:d0:aa:9e:0f:9a:dc:5d:8f:
                    70:35:d9:5d:84:f8:06:4a:4a:8c:72:14:c0:47:f7:
                    a7:5b:32:66:68:96:ac:c6:d8:41:d9:6d:18:9d:0f:
                    af:10:89:3d:5e:b5:aa:26:96:28:51:d2:54:42:c9:
                    61:82:fe:51:23:ba:d8:9d:4b:f8:b8:d2:ab:83:dd:
                    c2:9a:79:ea:44:c2:ab:22:c8:aa:46:57:39:af:6d:
                    0c:63:33:b7:12:95:41:82:71:4a:86:34:01:eb:61:
                    17:55:0c:a9:cf:4e:07:b0:22:18:f4:46:d1:47:a5:
                    cc:ee:16:9b:ea:c8:06:46:b1:f3:f4:44:45:37:3e:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B9:CE:2C:C1:27:32:83:3D:A3:09:62:D7:1A:66:2E:F7:13:86:84
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e3131352e302f32342d3234203d3e203238343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:26:57:3c:b4:f5:f7:73:d9:dd:1f:8c:03:78:d9:a6:5d:
         44:c3:65:1d:2b:ad:32:ba:a5:95:2b:a9:db:e7:ca:bc:e0:5e:
         db:08:19:5d:fa:b7:ee:eb:c8:c9:80:23:12:a6:b5:3e:4e:72:
         dd:cc:32:48:02:d5:d9:2d:12:5b:f1:72:ac:17:2c:b9:ae:bf:
         3c:af:ba:45:8a:52:65:72:74:3a:0b:4b:c8:ba:0c:3d:a4:58:
         83:48:e9:3a:d1:36:7f:33:be:a9:2c:3c:52:d5:58:89:3f:be:
         17:fb:c2:c5:98:28:eb:a0:ca:ed:25:a7:3b:f5:4e:61:39:6e:
         0b:8e:38:4a:f2:a1:d2:90:45:64:eb:93:c9:4f:c3:cb:87:c3:
         1a:ed:b2:f0:ac:47:fa:2c:de:ad:da:0f:62:02:b3:01:4c:49:
         05:37:3e:0c:bc:c2:3b:76:77:e5:52:58:de:54:98:a0:44:2d:
         88:5c:e3:6f:69:31:cf:33:b6:fe:a1:6f:b8:46:54:41:14:c4:
         23:26:36:b8:b2:39:a3:2a:7c:ee:07:16:36:42:cc:15:d9:2b:
         5c:5d:00:7d:19:9f:b4:e7:a5:e9:a0:31:bd:7b:46:93:9a:fd:
         17:05:45:92:3e:f9:58:24:24:cd:e7:41:5a:ce:b0:3e:41:d4:
         51:bc:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 13:32:57 2026 by rpki-client