This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135362e302f32342d3234203d3e203435343730.roa
File:                     3134332e3235352e3135362e302f32342d3234203d3e203435343730.roa (raw, json)
Hash identifier:          a1vK6zmNMUpwATAESXM6gUuMi2pb1pUokfNUVkpRmzM=
Subject key identifier:   68:CD:23:41:07:A7:42:33:A9:EC:2E:D8:01:64:45:94:16:FD:35:07
Certificate issuer:       /CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
Certificate serial:       6DC43A5F145EC5B0422C6DA095DD45BC138EB983
Authority key identifier: C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135362e302f32342d3234203d3e203435343730.roa
Signing time:             Tue 06 Jan 2026 19:14:39 +0000
ROA not before:           Tue 06 Jan 2026 19:09:39 +0000
ROA not after:            Tue 05 Jan 2027 19:14:39 +0000
asID:                     45470
IP address blocks:        143.255.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c4:3a:5f:14:5e:c5:b0:42:2c:6d:a0:95:dd:45:bc:13:8e:b9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
        Validity
            Not Before: Jan  6 19:09:39 2026 GMT
            Not After : Jan  5 19:14:39 2027 GMT
        Subject: CN=68CD234107A74233A9EC2ED80164459416FD3507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:86:12:27:e2:52:f5:cb:45:5f:61:6f:42:
                    86:94:ad:12:9b:5c:3b:b5:43:0b:7f:85:42:3d:c1:
                    64:03:6f:c5:a9:76:ae:ae:d2:21:02:db:a2:d1:af:
                    71:1d:c3:4e:f0:99:62:7f:5a:7c:1b:e6:10:dd:64:
                    1d:4e:67:41:e9:ef:ef:f0:9d:80:c9:a0:e3:74:3d:
                    a0:bd:43:c1:ae:6b:2d:95:59:5f:4c:12:e8:e8:fe:
                    ac:8f:be:7c:d1:cc:7c:a0:61:6c:eb:de:47:92:5b:
                    a4:a0:59:44:97:49:57:c6:1c:f8:d8:fb:38:94:46:
                    22:92:49:d1:3a:6c:6c:15:cc:b0:6f:ab:d2:18:ef:
                    df:57:d0:26:f9:f5:dc:f8:20:70:a4:10:e3:79:d5:
                    95:f0:44:33:2d:99:7d:3e:5b:6c:af:71:fd:f6:95:
                    1e:6d:81:12:db:92:17:02:1f:de:d7:73:83:e0:4e:
                    86:4d:12:94:3a:26:44:12:ed:02:2c:81:af:93:62:
                    70:45:b3:ba:ae:bb:74:c1:ab:0f:fb:f8:02:e1:14:
                    27:95:23:a2:8d:d1:7d:57:38:1e:5f:76:4d:8b:40:
                    03:6f:e6:4f:6c:ce:4e:b2:44:48:6d:ea:83:74:05:
                    92:6c:75:a8:1a:48:9b:f2:4e:78:9b:f8:2c:94:80:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CD:23:41:07:A7:42:33:A9:EC:2E:D8:01:64:45:94:16:FD:35:07
            X509v3 Authority Key Identifier:
                keyid:C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135362e302f32342d3234203d3e203435343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:c0:8c:8f:77:2f:28:f7:eb:5c:e8:ff:b9:f7:a1:89:81:
         a3:ba:8f:ab:a3:91:d9:8b:37:e2:9e:cc:d8:67:f8:c1:2c:79:
         42:7e:e1:8d:87:b0:d3:a5:a3:a9:c9:ce:b2:91:fa:bf:f2:bf:
         59:76:10:3d:98:48:63:f1:af:d1:a6:db:02:bd:ab:a7:a4:1a:
         83:c4:9d:30:fe:d3:f4:3d:d0:1b:22:16:07:b5:61:e9:37:c0:
         ee:eb:3b:09:2a:d9:fc:5b:df:4b:09:9b:8c:ad:9d:3b:1a:d3:
         4b:8e:40:4d:ec:cb:22:0a:f7:2f:69:b3:93:fa:88:6d:67:c9:
         ba:86:f1:68:a0:3a:2f:4c:65:bd:82:7f:70:0e:d4:c7:5c:80:
         47:71:9c:e7:fa:3c:9b:93:bb:9d:5e:ad:99:4e:af:9d:a6:89:
         48:a9:5a:17:38:8f:e9:9d:63:1e:06:97:c2:a6:77:3b:2f:4e:
         6e:65:94:de:2b:ed:0e:da:d3:9b:e4:65:fe:b7:ae:b5:1d:ed:
         52:ad:ac:8a:dc:58:c6:b4:a0:f5:55:c7:77:b4:44:3d:77:02:
         d3:a2:10:87:c8:2d:ac:d2:81:10:73:18:ef:df:36:22:f5:38:
         69:db:25:b8:91:35:2a:ba:eb:5f:a6:09:bd:aa:ff:20:8a:c9:
         4c:cb:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:11 2026 by rpki-client