This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
File:                     3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          t4z4caP0a7EonREotU58Hw6LeY09engGormwb7WSsiE=
Subject key identifier:   74:47:7B:66:AE:B4:D7:A9:50:A0:ED:B7:E9:EC:54:28:E0:C6:EC:FD
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       26E67A7053DA843ED4C1685F547583DE647C9DCD
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 06 Jan 2026 20:50:52 +0000
ROA not before:           Tue 06 Jan 2026 20:45:52 +0000
ROA not after:            Tue 05 Jan 2027 20:50:52 +0000
asID:                     14754
IP address blocks:        201.131.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e6:7a:70:53:da:84:3e:d4:c1:68:5f:54:75:83:de:64:7c:9d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Jan  6 20:45:52 2026 GMT
            Not After : Jan  5 20:50:52 2027 GMT
        Subject: CN=74477B66AEB4D7A950A0EDB7E9EC5428E0C6ECFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:39:f8:c9:2b:23:01:d3:05:2f:0d:b1:fa:
                    f3:b3:9a:08:65:e4:ec:cb:00:ee:3b:d8:8f:61:4c:
                    16:03:07:85:fa:55:00:5a:ce:b7:8c:06:89:dd:49:
                    38:79:69:b4:55:60:38:ae:07:24:1a:c9:9c:45:37:
                    50:ce:27:99:6e:ab:7e:92:e4:a6:9c:e5:5d:c9:3d:
                    79:2a:4a:7a:58:10:e2:51:92:8c:4b:19:88:dd:49:
                    74:55:19:6f:7e:da:ee:3e:b7:1b:9a:06:83:9b:7d:
                    96:6d:14:e6:00:f8:1e:69:af:5f:d9:14:c3:71:da:
                    06:1d:20:cd:d6:c3:e5:72:c1:36:10:c9:3f:d2:75:
                    b8:31:80:6c:08:eb:21:43:5e:75:d9:5b:33:6c:ec:
                    a0:5f:e9:89:8d:0a:f7:8f:04:78:6f:fb:5c:d7:0c:
                    a8:e5:ef:93:e8:a8:3e:fe:ca:eb:b5:8d:c4:0f:9a:
                    b6:25:09:07:6f:91:04:cb:df:df:8a:db:a9:ca:8f:
                    62:b5:5e:17:e5:82:ff:92:ec:65:45:4a:21:9a:a9:
                    0d:34:81:7f:e9:09:71:e9:57:97:b7:d2:b1:13:74:
                    44:3e:fd:65:e7:5a:13:c2:ce:4d:88:a4:bc:0a:ef:
                    69:e0:a8:83:c6:a9:7c:e6:52:18:ba:78:d6:0d:ce:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:47:7B:66:AE:B4:D7:A9:50:A0:ED:B7:E9:EC:54:28:E0:C6:EC:FD
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:ea:7f:f9:af:65:ae:a9:c3:62:e0:c7:72:c1:e5:f4:c0:78:
         5f:99:b7:4f:2d:7a:7f:f3:c0:3f:61:0f:6b:23:17:7f:27:2a:
         9b:19:0a:21:c1:2e:81:1a:f9:f5:2d:4e:aa:05:b6:3a:80:2e:
         57:e3:97:a4:82:16:b4:fc:63:19:14:e7:3e:c1:d5:d0:70:1a:
         3b:d9:d8:87:87:54:5a:f5:e4:11:6e:34:bf:2e:36:fc:ff:94:
         e1:18:1a:40:76:4e:bf:fd:b3:fd:53:c1:b4:58:e4:1d:d0:cb:
         30:61:72:c7:4e:5e:fa:e9:74:c6:2e:48:ae:5a:b1:fa:93:3a:
         5f:5c:10:41:c7:09:e6:0a:d1:1d:5d:44:50:64:90:81:a0:47:
         2c:eb:a6:b0:fe:d2:d4:4f:d2:08:6e:05:2a:7c:d1:68:f9:a1:
         12:4a:6f:68:b8:97:91:f4:16:ca:f2:25:3d:2c:3b:60:ce:ef:
         50:a2:c7:86:76:e2:95:b7:f2:1a:a2:38:5e:e1:52:df:6f:b5:
         80:81:10:d8:0b:b5:0a:78:48:8a:c1:ee:03:c4:88:d5:49:36:
         23:00:9e:08:5e:32:6e:dc:5e:67:a4:f0:42:57:e0:cc:87:54:
         3a:fd:37:ab:4d:df:2d:1b:4d:52:22:51:73:97:af:b2:76:73:
         b0:95:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:25 2026 by rpki-client