This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3134332e3133372e32302e302f32322d3234203d3e20323633373336.roa
File:                     3134332e3133372e32302e302f32322d3234203d3e20323633373336.roa (raw, json)
Hash identifier:          XAOFCvETeWawMsvwrM+WBBRjlX9ux1H8jIAvBKVxFPg=
Subject key identifier:   9B:BA:49:E0:CB:41:A4:41:11:8C:E4:89:17:0B:A2:EE:2C:FF:3D:41
Certificate issuer:       /CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
Certificate serial:       6C4E9F54745A246C326C6BB1AB8F81DEC45FF297
Authority key identifier: 6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3134332e3133372e32302e302f32322d3234203d3e20323633373336.roa
Signing time:             Tue 06 Jan 2026 19:31:34 +0000
ROA not before:           Tue 06 Jan 2026 19:26:34 +0000
ROA not after:            Tue 05 Jan 2027 19:31:34 +0000
asID:                     263736
IP address blocks:        143.137.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 09:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:9f:54:74:5a:24:6c:32:6c:6b:b1:ab:8f:81:de:c4:5f:f2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
        Validity
            Not Before: Jan  6 19:26:34 2026 GMT
            Not After : Jan  5 19:31:34 2027 GMT
        Subject: CN=9BBA49E0CB41A441118CE489170BA2EE2CFF3D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:34:d2:11:e7:8d:85:37:6e:ca:df:c0:77:13:
                    77:6a:9a:a5:d6:15:e6:2e:9d:c0:2e:db:e5:80:c8:
                    f5:ce:cb:5a:76:8a:fe:3c:4d:86:10:09:a5:c0:38:
                    44:31:3a:5d:a6:f5:b5:5f:3a:76:38:ed:3e:c6:db:
                    a6:88:2e:57:66:92:3f:23:91:6c:f2:c2:f8:dd:50:
                    f0:cc:9a:99:ce:48:1e:f1:3d:23:a6:d7:01:e6:31:
                    4a:47:8f:20:11:3d:48:cf:bd:86:75:22:ff:2c:57:
                    ce:ab:e3:13:8b:8d:ce:fe:27:ea:27:02:c3:75:55:
                    90:f9:f6:7f:9b:48:69:40:43:59:32:22:7e:74:8e:
                    b3:fd:77:73:cd:07:5d:44:4c:0f:c3:53:0c:d0:dc:
                    2b:09:7c:ad:90:2d:b8:c3:41:5e:9e:4b:fc:0a:f8:
                    64:44:ca:13:0b:97:de:8d:02:c8:a5:85:3f:d9:95:
                    3f:a9:ec:dd:39:4c:c0:6f:6a:f6:ef:69:d1:69:d7:
                    c1:ef:a0:60:b9:34:50:bc:34:c9:98:1c:2c:14:35:
                    60:d2:ff:fe:d0:29:c1:94:00:9d:fc:0b:3b:ad:de:
                    24:af:a0:40:97:9a:60:2b:7b:cc:90:ae:d2:37:86:
                    4d:97:b1:d3:67:6e:f8:8a:58:0f:41:45:c2:84:ad:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:49:E0:CB:41:A4:41:11:8C:E4:89:17:0B:A2:EE:2C:FF:3D:41
            X509v3 Authority Key Identifier:
                keyid:6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3134332e3133372e32302e302f32322d3234203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:29:e1:72:26:7d:ab:cc:89:61:af:ec:34:ad:81:f5:c7:
         8b:57:51:48:51:36:49:9e:42:30:4e:70:c3:30:c4:81:26:3a:
         f0:c5:68:82:56:43:77:3f:20:59:7c:f2:a5:a4:96:fd:9a:c9:
         7c:4b:c4:4b:0e:99:a1:c2:50:14:b3:05:51:78:85:70:e8:e9:
         d5:93:e7:d9:2f:d6:85:58:fc:46:a2:cf:60:c7:f6:4b:91:ca:
         92:6e:b6:47:1e:aa:75:8f:56:c9:6a:13:be:00:ea:15:64:7c:
         61:3f:49:e6:5f:69:e9:40:69:cf:c4:f3:66:a9:71:d5:a7:98:
         55:a2:f4:eb:54:93:89:31:12:f7:9f:c6:5a:8c:04:5a:1f:48:
         a3:8f:be:19:b3:5a:29:e2:8f:83:b1:45:5f:a9:be:72:98:c5:
         b7:25:90:2e:83:c2:71:e9:44:08:27:56:12:d3:35:19:a8:ca:
         28:71:e8:c2:88:8f:ba:4a:be:e4:48:50:a9:d6:fd:ae:57:fa:
         9c:d3:4b:74:fb:53:e0:a0:5f:1a:92:06:0f:eb:05:21:86:3e:
         67:b5:03:41:55:1e:b6:e0:47:c1:ea:00:a1:09:55:2c:b7:6b:
         43:55:6b:06:02:69:81:44:70:c5:2f:0a:45:c0:b8:6f:29:06:
         3b:1f:d6:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbE6fVHRaJGwybGuxq4+B3sRf8pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQzRkMzRDFFRjE0OTdCNjUwRUE0QjhGMjM4QzcxRjI0
MkNDRDg4QTAeFw0yNjAxMDYxOTI2MzRaFw0yNzAxMDUxOTMxMzRaMDMxMTAvBgNV
BAMTKDlCQkE0OUUwQ0I0MUE0NDExMThDRTQ4OTE3MEJBMkVFMkNGRjNENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKNNIR542FN27K38B3E3dqmqXW
FeYuncAu2+WAyPXOy1p2iv48TYYQCaXAOEQxOl2m9bVfOnY47T7G26aILldmkj8j
kWzywvjdUPDMmpnOSB7xPSOm1wHmMUpHjyARPUjPvYZ1Iv8sV86r4xOLjc7+J+on
AsN1VZD59n+bSGlAQ1kyIn50jrP9d3PNB11ETA/DUwzQ3CsJfK2QLbjDQV6eS/wK
+GREyhMLl96NAsilhT/ZlT+p7N05TMBvavbvadFp18HvoGC5NFC8NMmYHCwUNWDS
//7QKcGUAJ38Czut3iSvoECXmmAre8yQrtI3hk2XsdNnbviKWA9BRcKErYeBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUm7pJ4MtBpEERjOSJFwui7iz/PUEwHwYDVR0j
BBgwFoAUbT/D0e8Ul7ZQ6kuPI4xx8kLM2IowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDg5RURERUREMTY4NDBCMjg1QkNGMTExNTNERDFBMDRC
MTgwRTUxODI2RjNCMTIxMTg0Rjc1MEM4MjRGRjg4LzAvNkQzRkMzRDFFRjE0OTdC
NjUwRUE0QjhGMjM4QzcxRjI0MkNDRDg4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RDNGQzNEMUVGMTQ5N0I2NTBF
QTRCOEYyMzhDNzFGMjQyQ0NEODhBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ4OUVEREVERDE2ODQwQjI4NUJDRjExMTUzREQxQTA0QjE4MEU1MTgy
NkYzQjEyMTE4NEY3NTBDODI0RkY4OC8wLzMxMzQzMzJlMzEzMzM3MmUzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj4kU
MA0GCSqGSIb3DQEBCwUAA4IBAQAyzinhciZ9q8yJYa/sNK2B9ceLV1FIUTZJnkIw
TnDDMMSBJjrwxWiCVkN3PyBZfPKlpJb9msl8S8RLDpmhwlAUswVReIVw6OnVk+fZ
L9aFWPxGos9gx/ZLkcqSbrZHHqp1j1bJahO+AOoVZHxhP0nmX2npQGnPxPNmqXHV
p5hVovTrVJOJMRL3n8ZajARaH0ijj74Zs1op4o+DsUVfqb5ymMW3JZAug8Jx6UQI
J1YS0zUZqMoocejCiI+6Sr7kSFCp1v2uV/qc00t0+1PgoF8akgYP6wUhhj5ntQNB
VR624EfB6gChCVUst2tDVWsGAmmBRHDFLwpFwLhvKQY7H9YJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:02 2026 by rpki-client