This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37382e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37382e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          J0jUCGGLar32upuEFYTZ34W63ZOH0PhLwsBzX4p30lw=
Subject key identifier:   72:68:86:CE:3E:03:1E:BA:4F:3C:F5:88:34:5C:84:CB:C2:8A:CF:67
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       3F3FFB4E6798ADE683C624132FAC4D5B73257E95
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37382e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 06 Jan 2026 19:14:55 +0000
ROA not before:           Tue 06 Jan 2026 19:09:55 +0000
ROA not after:            Tue 05 Jan 2027 19:14:55 +0000
asID:                     22011
IP address blocks:        148.243.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3f:fb:4e:67:98:ad:e6:83:c6:24:13:2f:ac:4d:5b:73:25:7e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:55 2026 GMT
            Not After : Jan  5 19:14:55 2027 GMT
        Subject: CN=726886CE3E031EBA4F3CF588345C84CBC28ACF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:c7:f8:6f:dc:b3:71:91:19:35:04:28:64:
                    80:25:4d:83:61:fc:cd:7e:89:07:d5:fe:45:b5:27:
                    6a:7a:67:18:e2:f1:05:a5:6f:a8:67:df:0c:b2:ba:
                    31:d2:97:c6:b2:ca:98:cd:6d:db:78:55:18:cf:9d:
                    83:07:f0:4a:65:ae:ec:71:38:7a:ae:1d:17:98:ef:
                    86:fd:a3:98:ae:68:26:1d:ff:11:c3:6c:65:66:b2:
                    f7:7a:a8:3a:fd:9b:f1:87:9e:22:64:56:58:5f:10:
                    3f:d0:a9:a8:61:43:8f:c5:5a:77:90:d8:c5:e6:28:
                    7b:0d:08:60:33:6c:fd:a5:fd:2e:43:e6:88:87:37:
                    98:9f:8a:8c:0d:b0:61:3c:c0:98:38:50:74:b3:4b:
                    c2:45:fa:2a:a4:ca:e3:e7:68:e2:b6:d6:d7:2c:0d:
                    94:2f:83:b4:a9:75:21:d5:a9:52:98:85:c2:f3:e8:
                    5b:30:32:24:14:e2:59:49:c6:2b:8d:17:e5:87:4b:
                    e5:7d:7e:cf:db:fb:75:e8:96:37:9f:b7:60:66:0e:
                    02:9e:05:69:90:4b:de:da:a6:b1:04:45:46:9b:c8:
                    83:dc:0d:0c:65:c3:5b:43:16:ea:49:20:c5:57:c6:
                    b5:b6:5d:39:bf:3a:64:22:f4:98:40:51:29:60:69:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:86:CE:3E:03:1E:BA:4F:3C:F5:88:34:5C:84:CB:C2:8A:CF:67
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37382e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:6e:c5:54:5d:c9:45:98:b2:e0:7e:2b:a8:59:f6:52:ef:
         36:1e:cb:3c:3e:15:9e:bb:39:3e:db:3a:cb:cb:ef:ca:66:32:
         b5:92:43:01:24:8e:5c:82:d8:31:e8:22:47:85:fd:2f:c1:2e:
         1e:50:50:54:52:3f:c7:4b:71:b2:20:c1:9a:dc:59:58:03:ad:
         af:c2:74:d9:41:5d:a0:20:f7:6c:bf:17:6b:e9:cb:96:da:67:
         bd:bd:05:1e:95:4b:01:ee:42:e9:ff:30:90:6b:ef:b4:98:81:
         2c:a2:71:0e:30:e0:c5:2a:ee:b0:15:b2:93:f9:33:2c:55:df:
         8f:c2:5a:47:06:8d:d5:80:d8:6c:a6:57:dd:2d:89:38:74:72:
         e5:ea:69:21:af:e4:5f:85:99:fb:82:f9:4e:9a:5c:c7:2f:9a:
         72:45:ea:0c:14:e3:19:10:a7:95:53:84:e8:6d:ea:8f:5f:a3:
         f3:80:94:52:f8:c3:8b:93:de:23:93:7a:f4:0e:d0:16:9e:28:
         6f:d1:31:67:01:4e:0b:75:fd:68:09:8b:93:f9:4b:32:dd:8e:
         5a:e4:88:fa:85:f6:5e:92:f9:66:f7:08:ac:e6:4d:fc:ab:51:
         45:36:e4:4a:84:7e:0a:f6:03:9e:a8:df:58:c3:d0:0a:e1:29:
         5d:a0:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:24:57 2026 by rpki-client