This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
File:                     3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa (raw, json)
Hash identifier:          Z/2eI0DBCm3+cnROYvqnaR8JJSM+uP7IRonXhdkQseA=
Subject key identifier:   B8:01:08:B4:0B:E6:86:06:0E:33:AC:7C:AB:2D:67:83:DE:53:1C:23
Certificate issuer:       /CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
Certificate serial:       0401CCED31DD9240848B1079994C11187B03481E
Authority key identifier: BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
Signing time:             Tue 06 Jan 2026 19:33:43 +0000
ROA not before:           Tue 06 Jan 2026 19:28:43 +0000
ROA not after:            Tue 05 Jan 2027 19:33:43 +0000
asID:                     64155
IP address blocks:        148.222.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:01:cc:ed:31:dd:92:40:84:8b:10:79:99:4c:11:18:7b:03:48:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
        Validity
            Not Before: Jan  6 19:28:43 2026 GMT
            Not After : Jan  5 19:33:43 2027 GMT
        Subject: CN=B80108B40BE686060E33AC7CAB2D6783DE531C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:73:fd:74:b1:b3:d5:ed:9c:33:8a:f8:92:
                    72:e6:96:eb:03:70:3b:38:bf:51:95:76:d3:b0:e9:
                    e7:37:61:95:00:e8:3f:48:a6:29:ca:3e:3a:e7:a1:
                    ff:a4:58:3c:b3:af:2b:41:10:ee:ff:b7:e5:a6:5a:
                    b2:55:f8:80:a6:6f:c4:40:47:5c:31:04:92:94:e9:
                    5d:c2:22:16:e0:06:26:3f:bb:b0:1e:24:c7:d5:d9:
                    17:37:3e:f7:f4:1e:bf:da:38:9d:3e:c8:b3:b7:db:
                    a7:e7:e0:28:f9:34:dc:d7:ff:3e:9a:a3:2c:9c:f2:
                    3b:72:44:cd:3b:07:85:69:5e:4e:51:5c:aa:69:6e:
                    56:9a:6a:ab:95:22:a3:72:f3:3d:ac:22:aa:ab:80:
                    d0:a5:96:2c:6b:c6:83:e5:ae:03:4f:2a:62:80:61:
                    47:86:5d:ef:b6:1a:3c:c3:35:7b:b1:1b:4c:b7:58:
                    0f:eb:15:49:ac:9e:65:74:69:f2:7a:aa:a9:93:91:
                    4f:9b:e9:bb:18:7a:73:a7:9d:5a:49:28:aa:d4:40:
                    22:3c:5c:c2:b2:b2:3a:66:5b:e7:29:11:ce:f9:bc:
                    7e:e0:d7:c8:95:d7:93:68:a7:5c:53:d0:27:89:10:
                    d6:6b:da:0c:a4:b5:5f:8c:69:ec:b6:1d:a6:4d:e9:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:01:08:B4:0B:E6:86:06:0E:33:AC:7C:AB:2D:67:83:DE:53:1C:23
            X509v3 Authority Key Identifier:
                keyid:BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:b2:db:71:f9:9d:91:fd:5a:44:f2:7b:f4:7c:6e:2e:be:e0:
         99:2d:fd:b3:20:38:83:59:39:8f:e5:67:19:ba:e7:24:bf:e9:
         2a:a1:d5:c0:fd:5a:fb:2a:fc:6e:51:06:f0:5c:58:14:a6:e4:
         32:0c:1d:e9:cf:61:c0:38:4e:d3:c2:7a:62:48:16:df:b2:65:
         2e:ea:6b:e6:83:15:f4:70:02:a9:da:a3:72:e4:8a:8a:23:47:
         ca:a8:0d:2a:ed:6f:d0:d7:17:94:74:40:32:c3:a1:19:83:87:
         9a:e7:9a:66:77:12:62:5e:81:64:f7:6b:c2:db:59:33:ab:19:
         d4:79:4b:73:af:0c:4b:b5:da:c6:5d:33:06:da:3e:37:70:f5:
         bd:38:81:95:97:a1:33:d3:61:ad:bd:b6:70:4b:4c:a5:c8:22:
         36:a8:c4:0d:1f:7a:89:b9:9c:37:3f:28:fc:bb:53:73:fb:0a:
         e9:07:05:5d:7d:8f:1c:6b:77:b2:51:2f:34:8b:19:cf:00:9e:
         23:3e:d1:b3:af:ab:1c:6c:13:b0:15:ed:6b:81:1c:d6:58:e8:
         6e:31:54:c7:07:4f:74:7f:8d:f4:22:23:45:8c:fd:2b:dc:38:
         67:4f:07:99:98:23:83:11:d4:f1:17:24:46:4d:85:14:f9:db:
         aa:33:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:56 2026 by rpki-client