This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37302e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37302e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          6B+IOljBMIQL/+zqEpqTv/F9+ifBy9wXfXdlqbsQUJU=
Subject key identifier:   21:76:7D:50:A5:F0:91:12:B3:4B:08:E2:E5:F5:A1:1B:A3:76:70:56
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       50E88B9BC50BCD7851D00828257B1C417102AF65
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37302e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 06 Jan 2026 19:14:52 +0000
ROA not before:           Tue 06 Jan 2026 19:09:52 +0000
ROA not after:            Tue 05 Jan 2027 19:14:52 +0000
asID:                     22011
IP address blocks:        148.243.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 05:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:8b:9b:c5:0b:cd:78:51:d0:08:28:25:7b:1c:41:71:02:af:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:52 2026 GMT
            Not After : Jan  5 19:14:52 2027 GMT
        Subject: CN=21767D50A5F09112B34B08E2E5F5A11BA3767056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:e3:5e:2f:50:98:1b:8c:6a:f0:97:88:ea:
                    a1:8e:24:77:4b:1f:6c:10:d8:23:6d:8d:71:dc:a7:
                    d7:dc:e7:8f:5f:d6:f4:26:27:ad:e1:db:ec:a6:89:
                    85:39:2c:e5:cd:0a:0a:27:61:6f:61:45:54:5e:7b:
                    80:27:43:ca:76:40:73:bb:e4:76:7f:95:f5:c8:06:
                    14:ad:d5:04:f9:13:c4:b5:61:4b:45:3e:56:79:13:
                    77:2b:ce:3e:53:61:5c:7b:fd:db:0c:5a:ff:ce:56:
                    cf:f9:00:c9:fe:27:d6:de:50:f1:19:7a:1e:1d:43:
                    ae:35:35:3f:1d:f8:e5:72:71:ae:98:d4:54:a7:33:
                    6b:df:f4:76:35:73:f5:48:52:9d:ec:b9:55:f8:0e:
                    4d:5b:87:67:17:26:22:b3:51:c5:1a:db:3f:e0:8f:
                    c1:95:ce:11:f2:d9:66:c2:9a:47:0b:0b:4c:27:2e:
                    28:44:d9:10:bf:d0:56:02:63:61:f5:7a:5d:09:80:
                    49:be:e7:74:3a:1a:3b:9f:56:82:a8:56:01:7d:d3:
                    ba:d1:e9:02:27:76:82:cc:6c:db:26:8d:b5:cb:4e:
                    d0:f8:5d:35:c5:03:b4:3b:9a:0b:d7:58:61:2b:6c:
                    26:4f:f7:92:d5:c2:8c:ac:81:48:b6:36:60:de:58:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:76:7D:50:A5:F0:91:12:B3:4B:08:E2:E5:F5:A1:1B:A3:76:70:56
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37302e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:e8:55:0f:89:21:a6:08:08:ab:cd:ba:d2:24:de:2a:bc:
         77:09:5f:28:bb:aa:b9:20:56:31:16:41:95:ed:f7:ad:1a:10:
         61:30:72:19:f2:4a:8e:d8:28:a5:21:e1:2c:d3:39:d4:5a:da:
         71:83:0e:38:f6:18:bc:5b:d5:dc:2d:6b:4c:52:83:63:f1:f9:
         06:de:0f:04:89:ff:39:1f:00:b1:b8:47:ba:a4:8a:cc:c0:15:
         23:88:ca:7e:87:69:e5:b1:e0:04:ba:28:c5:c3:3b:c9:bb:be:
         0d:a8:c5:60:80:4e:be:06:ca:bb:41:47:f0:c8:b5:a7:44:60:
         49:e2:df:fb:66:9c:2e:39:f9:85:67:09:ca:0c:8a:b2:25:55:
         e2:e1:bf:b6:3d:77:fe:47:99:fe:59:29:20:9a:09:21:b6:77:
         e7:a8:dc:7c:db:e6:91:78:70:98:ee:42:d6:9d:65:7f:7e:ff:
         93:48:25:dd:3b:0f:52:1f:94:19:d4:2b:26:0a:11:7e:d3:18:
         d7:58:84:86:b8:23:16:85:9d:27:b6:e8:a0:42:7f:d8:5d:4f:
         be:90:49:f3:55:7b:3f:f6:63:53:81:d4:1e:d4:42:cd:bd:b4:
         35:94:a6:10:65:89:4a:63:0c:9b:c9:42:80:4b:fd:98:d5:59:
         93:c3:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:55:08 2026 by rpki-client