This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37362e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          BWTL8B1lwMhz57cYGDfz9X0bG/0WbpMwvj9+PuEgpg8=
Subject key identifier:   F8:17:ED:3E:21:1A:D0:D6:6D:AE:11:C7:85:8E:61:E1:F7:E4:1C:0C
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       1C1CE0547ECD34DE1E1C9A5998943E2B40273BFF
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 06 Jan 2026 19:14:49 +0000
ROA not before:           Tue 06 Jan 2026 19:09:49 +0000
ROA not after:            Tue 05 Jan 2027 19:14:49 +0000
asID:                     22011
IP address blocks:        148.243.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1c:e0:54:7e:cd:34:de:1e:1c:9a:59:98:94:3e:2b:40:27:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:49 2026 GMT
            Not After : Jan  5 19:14:49 2027 GMT
        Subject: CN=F817ED3E211AD0D66DAE11C7858E61E1F7E41C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:b6:d6:32:38:3b:c0:2c:16:92:83:85:a1:
                    85:be:a2:64:8a:f5:fa:24:d7:d2:7c:49:12:1a:e7:
                    b5:a3:04:9a:cf:69:d6:4b:a7:f6:b2:8c:5c:d7:18:
                    b8:d7:50:2b:2c:96:e8:2e:f3:df:f1:ce:2c:72:ab:
                    b3:b3:22:0e:21:d1:1e:ae:1c:58:5e:75:e8:69:3e:
                    b0:9c:f6:6d:6e:89:b9:1b:b6:25:ae:79:d3:d2:32:
                    f2:6c:25:0a:cd:a4:e2:14:ee:ae:e6:85:d6:c3:1b:
                    01:39:b3:1e:67:79:d3:41:b7:45:c8:ab:ae:60:cc:
                    97:a2:4f:39:56:60:7b:cf:e7:b3:fc:fa:d3:a0:f0:
                    56:b9:18:05:94:25:13:3f:79:d4:5a:97:bb:01:09:
                    9e:0a:cc:3f:d2:5c:9d:99:c7:cb:ea:9b:ad:10:a8:
                    ec:0a:21:94:23:bc:0b:f8:a9:ce:ef:ce:b1:f6:63:
                    8a:98:5a:29:12:22:82:ac:49:ef:f0:1e:32:61:64:
                    4e:10:e0:3f:8f:12:3c:37:fc:9c:6d:23:31:1a:72:
                    ba:ad:dd:56:ec:5c:91:a1:de:f4:47:e4:37:f4:24:
                    30:af:24:40:92:88:5c:41:57:ce:c7:66:9c:b1:27:
                    c5:35:64:34:12:f2:89:a9:e2:77:a0:2b:02:0a:2a:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:17:ED:3E:21:1A:D0:D6:6D:AE:11:C7:85:8E:61:E1:F7:E4:1C:0C
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:39:66:ff:77:1e:20:a2:03:15:8a:66:a7:0a:46:a8:4b:
         12:55:a0:bb:26:e4:d2:e0:09:1e:f8:73:be:7a:6e:fd:6c:d8:
         6e:1e:da:9d:51:07:fc:de:e3:d9:45:40:80:48:f0:85:17:35:
         cd:e1:8a:15:bb:95:81:0a:75:97:17:77:a1:90:9f:6c:12:76:
         61:a8:b0:6e:98:69:1f:ab:0c:c8:80:9d:b5:bd:9c:a9:9f:bc:
         43:80:ca:fb:e4:61:15:93:63:31:87:f1:7f:14:e2:61:12:4c:
         49:a3:8f:55:e2:62:2c:e8:78:93:c5:e1:66:6d:9d:79:c8:a1:
         69:8b:75:f8:0d:8e:28:30:4c:89:28:62:3f:f2:60:88:1d:1d:
         43:1a:64:96:54:cd:26:4c:f1:9f:ae:c9:2f:2e:3a:2c:fe:eb:
         75:bd:7f:de:bb:cd:83:25:4e:07:fc:89:e4:6a:da:33:95:53:
         96:b3:b3:2f:fd:83:43:9f:ee:c7:5d:76:6b:91:52:04:cf:9d:
         e2:22:a8:9f:2c:3c:e7:09:3c:05:61:70:c7:d4:e7:38:6d:52:
         75:1f:27:52:8c:cf:64:68:80:c9:4d:85:d2:44:f7:1d:68:61:
         1e:1b:a8:2c:e5:d4:e2:cd:f1:e5:ac:71:0f:96:0c:89:08:6f:
         2f:09:c4:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHBzgVH7NNN4eHJpZmJQ+K0AnO/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNjAxMDYxOTA5NDlaFw0yNzAxMDUxOTE0NDlaMDMxMTAvBgNV
BAMTKEY4MTdFRDNFMjExQUQwRDY2REFFMTFDNzg1OEU2MUUxRjdFNDFDMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/LbWMjg7wCwWkoOFoYW+omSK
9fok19J8SRIa57WjBJrPadZLp/ayjFzXGLjXUCsslugu89/xzixyq7OzIg4h0R6u
HFhedehpPrCc9m1uibkbtiWuedPSMvJsJQrNpOIU7q7mhdbDGwE5sx5nedNBt0XI
q65gzJeiTzlWYHvP57P8+tOg8Fa5GAWUJRM/edRal7sBCZ4KzD/SXJ2Zx8vqm60Q
qOwKIZQjvAv4qc7vzrH2Y4qYWikSIoKsSe/wHjJhZE4Q4D+PEjw3/JxtIzEacrqt
3VbsXJGh3vRH5Df0JDCvJECSiFxBV87HZpyxJ8U1ZDQS8omp4negKwIKKvGZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU+BftPiEa0NZtrhHHhY5h4ffkHAwwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDMzMmUzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMwMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJTzTDAN
BgkqhkiG9w0BAQsFAAOCAQEAbdQ5Zv93HiCiAxWKZqcKRqhLElWguybk0uAJHvhz
vnpu/WzYbh7anVEH/N7j2UVAgEjwhRc1zeGKFbuVgQp1lxd3oZCfbBJ2Yaiwbphp
H6sMyICdtb2cqZ+8Q4DK++RhFZNjMYfxfxTiYRJMSaOPVeJiLOh4k8XhZm2decih
aYt1+A2OKDBMiShiP/JgiB0dQxpkllTNJkzxn67JLy46LP7rdb1/3rvNgyVOB/yJ
5GraM5VTlrOzL/2DQ5/ux112a5FSBM+d4iKonyw85wk8BWFwx9TnOG1SdR8nUozP
ZGiAyU2F0kT3HWhhHhuoLOXU4s3x5axxD5YMiQhvLwnEkQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:35:20 2026 by rpki-client