This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa
File:                     3135322e3233312e34382e302f32302d3234203d3e203532343230.roa (raw, json)
Hash identifier:          no+5QoUl9xchjvCnuqzqEvLU8pd1woNJOEToEHFC3hw=
Subject key identifier:   29:22:A1:C7:F4:D5:A0:87:84:BA:70:86:7B:76:55:1C:36:86:B4:44
Certificate issuer:       /CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
Certificate serial:       1AA5E421A4F71C5024D9E3C2E2E4772DD988BC49
Authority key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa
Signing time:             Tue 06 Jan 2026 19:34:06 +0000
ROA not before:           Tue 06 Jan 2026 19:29:06 +0000
ROA not after:            Tue 05 Jan 2027 19:34:06 +0000
asID:                     52420
IP address blocks:        152.231.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 15:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a5:e4:21:a4:f7:1c:50:24:d9:e3:c2:e2:e4:77:2d:d9:88:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
        Validity
            Not Before: Jan  6 19:29:06 2026 GMT
            Not After : Jan  5 19:34:06 2027 GMT
        Subject: CN=2922A1C7F4D5A08784BA70867B76551C3686B444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:25:e5:82:f8:f8:01:fd:39:b7:1d:c4:6a:
                    89:98:ea:4d:93:23:9f:b4:25:c8:b6:33:cf:3a:8a:
                    a9:33:21:72:2a:a5:13:1e:c3:97:af:f6:1b:36:8c:
                    1b:51:c7:e6:a7:76:23:18:a6:2c:d3:db:b0:f3:c8:
                    e8:f3:f4:de:fb:5e:19:5c:d5:bd:b4:fd:bf:04:98:
                    32:2c:fa:98:16:60:98:0e:c4:e7:a5:38:4d:b2:5f:
                    50:a2:27:f1:a0:1e:2b:2b:7a:c5:86:07:82:5b:4f:
                    87:67:80:b4:f9:7a:a0:aa:d4:c0:52:1f:68:62:b1:
                    3b:67:20:d4:71:98:6f:78:dd:ce:75:c6:c1:f9:53:
                    a0:2f:22:e2:56:df:5c:0a:b6:7e:d8:4f:2a:3f:57:
                    bc:40:5a:ff:06:74:52:19:df:94:bd:c6:a5:a4:87:
                    7d:87:a9:85:c9:2e:ce:29:a9:ed:12:bb:9d:ad:d5:
                    62:16:7f:fb:7a:a9:a5:32:0d:98:12:fd:73:b1:84:
                    78:c4:df:e9:99:39:be:6b:e7:5f:ab:8f:18:75:f3:
                    e4:42:6a:2e:0a:3f:53:b0:01:74:50:24:e8:44:0e:
                    05:b3:32:87:0e:cb:e6:47:65:3f:dd:35:f6:3c:cd:
                    67:a9:7b:d6:4a:e4:3d:4a:46:0f:ad:d4:ee:4c:12:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:A1:C7:F4:D5:A0:87:84:BA:70:86:7B:76:55:1C:36:86:B4:44
            X509v3 Authority Key Identifier:
                keyid:5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/3135322e3233312e34382e302f32302d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:fd:68:e9:13:2a:b7:19:f0:d9:ec:1b:9f:c0:04:0a:95:
         44:43:4e:2f:2a:54:ec:3f:2f:e2:3e:b6:e4:25:39:25:52:a8:
         20:74:ba:11:c7:7f:99:4e:cd:9b:fd:da:f6:6a:1a:c9:f4:13:
         2e:ef:d4:47:34:53:3c:66:44:ea:e4:9a:20:86:e6:b2:eb:03:
         cd:72:cb:5c:61:f9:9a:93:16:02:7d:86:c8:2a:f2:2c:07:3c:
         8c:e2:e0:01:25:33:96:bb:da:46:bf:a8:2d:57:5f:51:5a:a0:
         32:d2:3b:c3:2c:e6:5e:ce:b2:8a:be:8c:48:9a:1a:96:24:02:
         6a:d3:76:7d:06:b7:8f:fd:9e:19:df:7a:ea:3e:f6:c9:dc:66:
         da:ec:16:b1:56:47:6f:f6:94:08:da:6c:7a:65:5e:7c:50:c1:
         67:30:cb:3c:f8:4d:f8:d0:b6:8a:53:e8:80:c7:c4:b5:ad:c7:
         88:b3:fd:b8:57:1b:88:31:e3:0b:59:67:6b:b1:2b:35:b8:5f:
         de:71:ae:8f:05:27:3c:50:d9:45:6d:69:64:19:b9:a0:f9:14:
         8e:c1:f1:fa:6f:b3:ed:2b:11:55:fa:2a:e7:86:2e:a6:9a:9e:
         d4:0e:57:64:af:e3:f2:34:c7:39:df:66:09:03:1a:53:7e:95:
         81:12:b2:82
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGqXkIaT3HFAk2ePC4uR3LdmIvEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVFRjc0RUM1NDlCQkEzQTk4NTg2OTQ4QTY1MkVGMUU2
NzcyOUYwODAeFw0yNjAxMDYxOTI5MDZaFw0yNzAxMDUxOTM0MDZaMDMxMTAvBgNV
BAMTKDI5MjJBMUM3RjRENUEwODc4NEJBNzA4NjdCNzY1NTFDMzY4NkI0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaiXlgvj4Af05tx3EaomY6k2T
I5+0Jci2M886iqkzIXIqpRMew5ev9hs2jBtRx+andiMYpizT27DzyOjz9N77Xhlc
1b20/b8EmDIs+pgWYJgOxOelOE2yX1CiJ/GgHisresWGB4JbT4dngLT5eqCq1MBS
H2hisTtnINRxmG943c51xsH5U6AvIuJW31wKtn7YTyo/V7xAWv8GdFIZ35S9xqWk
h32HqYXJLs4pqe0Su52t1WIWf/t6qaUyDZgS/XOxhHjE3+mZOb5r51+rjxh18+RC
ai4KP1OwAXRQJOhEDgWzMocOy+ZHZT/dNfY8zWepe9ZK5D1KRg+t1O5MEn2nAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUKSKhx/TVoIeEunCGe3ZVHDaGtEQwHwYDVR0j
BBgwFoAUXu907FSbujqYWGlIplLvHmdynwgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0UwQURGOUFFODYyOTNENDFEQTg4QUUxRDM4MTQxRUE5
ODM2OEI5OTlFRjY4RTMxOThFRjlFNTRFRjFDNjJGLzAvNUVFRjc0RUM1NDlCQkEz
QTk4NTg2OTQ4QTY1MkVGMUU2NzcyOUYwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RUVGNzRFQzU0OUJCQTNBOTg1
ODY5NDhBNjUyRUYxRTY3NzI5RjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNFMEFERjlBRTg2MjkzRDQxREE4OEFFMUQzODE0MUVBOTgzNjhCOTk5
RUY2OEUzMTk4RUY5RTU0RUYxQzYyRi8wLzMxMzUzMjJlMzIzMzMxMmUzNDM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjM0MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJjnMDAN
BgkqhkiG9w0BAQsFAAOCAQEAfnT9aOkTKrcZ8NnsG5/ABAqVRENOLypU7D8v4j62
5CU5JVKoIHS6Ecd/mU7Nm/3a9moayfQTLu/URzRTPGZE6uSaIIbmsusDzXLLXGH5
mpMWAn2GyCryLAc8jOLgASUzlrvaRr+oLVdfUVqgMtI7wyzmXs6yir6MSJoaliQC
atN2fQa3j/2eGd966j72ydxm2uwWsVZHb/aUCNpsemVefFDBZzDLPPhN+NC2ilPo
gMfEta3HiLP9uFcbiDHjC1lna7ErNbhf3nGujwUnPFDZRW1pZBm5oPkUjsHx+m+z
7SsRVfoq54Yuppqe1A5XZK/j8jTHOd9mCQMaU36VgRKygg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:58 2026 by rpki-client