This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa
File:                     3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          EZWI1c8hfywhdzXzY+TKmnQOYONMnGQgAIARmINhudY=
Subject key identifier:   6F:04:28:5B:0D:D9:CA:E9:0F:57:DD:A4:6F:BB:9C:1C:AD:FA:A4:B0
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       3817EF7CBDA4231C2B2DD55B9AEA875A766C80A7
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 06 Jan 2026 18:57:23 +0000
ROA not before:           Tue 06 Jan 2026 18:52:23 +0000
ROA not after:            Tue 05 Jan 2027 18:57:23 +0000
asID:                     262159
IP address blocks:        143.137.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:17:ef:7c:bd:a4:23:1c:2b:2d:d5:5b:9a:ea:87:5a:76:6c:80:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Jan  6 18:52:23 2026 GMT
            Not After : Jan  5 18:57:23 2027 GMT
        Subject: CN=6F04285B0DD9CAE90F57DDA46FBB9C1CADFAA4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:5d:5f:0a:e0:cb:99:50:3a:4f:95:73:2a:
                    dd:9b:15:f5:91:11:a6:2c:7d:21:b8:46:89:08:1d:
                    55:19:b7:ea:87:e2:76:44:e4:38:e0:f3:fa:8a:18:
                    fd:5b:54:00:ec:fe:8f:4a:ec:73:a5:3f:54:28:43:
                    71:c1:ec:a3:4c:8f:a6:fd:0f:47:76:44:5d:1b:e9:
                    ec:ef:04:6c:4a:a1:fe:cf:88:ce:45:c5:1a:07:3c:
                    b1:9b:1a:bf:ff:37:58:38:07:ad:32:d2:76:cf:20:
                    56:b5:92:59:e5:71:6c:76:83:25:99:30:73:54:cb:
                    6a:87:3c:fd:5c:d3:7e:93:63:d3:f3:da:d0:5c:e1:
                    bb:6a:13:b7:ef:48:cb:37:47:07:86:49:1d:e4:b9:
                    d9:76:d3:b5:ad:cf:5b:68:74:df:a4:5e:3e:51:75:
                    ef:6f:6a:ad:e4:44:51:d7:b1:c2:e6:b1:6b:bc:2b:
                    6a:e9:e4:e9:cc:88:5d:0d:76:22:d8:c2:6f:bd:b7:
                    42:4d:fb:72:29:2e:3d:d8:bc:b9:99:2d:83:8d:c3:
                    a8:1a:87:36:02:8a:77:f4:97:ac:66:05:01:1b:46:
                    eb:d5:1f:b1:73:ba:7b:f9:f5:a2:62:98:c1:68:80:
                    d8:be:80:44:3b:d5:2d:5f:39:bb:28:9b:ad:fc:0b:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:28:5B:0D:D9:CA:E9:0F:57:DD:A4:6F:BB:9C:1C:AD:FA:A4:B0
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3134332e3133372e3131322e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:b5:9a:17:67:e2:00:19:ad:66:43:94:a3:9e:ea:34:fc:
         af:4a:8b:ee:21:76:cc:40:17:00:c2:b0:bb:ed:3d:64:b3:20:
         e3:82:d4:bc:18:3b:00:e7:17:e7:82:e9:ad:25:0f:72:17:5d:
         20:48:0a:67:2e:0c:ff:fe:ef:6c:d8:1d:ad:4f:26:e3:4c:af:
         f3:fc:7f:90:a4:b7:38:14:c8:a5:59:29:45:f5:8a:76:98:f3:
         35:e7:e6:7e:fd:a8:4a:c0:bf:c0:5f:dc:4f:08:be:47:14:d8:
         a9:2f:ca:14:7c:1b:6f:b6:fc:0c:2e:ac:54:c9:47:dc:c4:31:
         12:29:04:29:ca:37:50:6d:5d:95:06:74:51:75:d2:e1:c4:8d:
         7a:22:11:fb:29:f1:ed:4a:73:ee:58:6a:b1:7a:c6:11:6b:e8:
         22:bc:c7:c7:e2:b2:b4:f6:a8:f3:22:a7:fa:fa:f7:7b:f1:54:
         a9:6d:86:2b:ce:a7:6e:ef:8f:fc:ea:ec:34:94:73:ee:41:76:
         7f:25:f1:47:60:67:60:3f:7b:27:21:c2:92:ea:15:e4:83:6a:
         8d:e4:96:81:3c:1c:a7:df:78:ad:db:11:51:a5:63:91:de:01:
         18:a3:6e:8c:84:fb:f8:24:0d:bf:c7:35:dc:5d:bb:75:00:f2:
         f0:93:18:7f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOBfvfL2kIxwrLdVbmuqHWnZsgKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDM0EwNzcxNjM3QUNCMjRCRUFDRDIzREREMjA3NUZC
MDUzRjgxMTAeFw0yNjAxMDYxODUyMjNaFw0yNzAxMDUxODU3MjNaMDMxMTAvBgNV
BAMTKDZGMDQyODVCMEREOUNBRTkwRjU3RERBNDZGQkI5QzFDQURGQUE0QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDV1fCuDLmVA6T5VzKt2bFfWR
EaYsfSG4RokIHVUZt+qH4nZE5Djg8/qKGP1bVADs/o9K7HOlP1QoQ3HB7KNMj6b9
D0d2RF0b6ezvBGxKof7PiM5FxRoHPLGbGr//N1g4B60y0nbPIFa1klnlcWx2gyWZ
MHNUy2qHPP1c036TY9Pz2tBc4btqE7fvSMs3RweGSR3kudl207Wtz1todN+kXj5R
de9vaq3kRFHXscLmsWu8K2rp5OnMiF0NdiLYwm+9t0JN+3IpLj3YvLmZLYONw6ga
hzYCinf0l6xmBQEbRuvVH7Fzunv59aJimMFogNi+gEQ71S1fObsom638C5e7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUbwQoWw3ZyukPV92kb7ucHK36pLAwHwYDVR0j
BBgwFoAUlMOgdxY3rLJL6s0j3dIHX7BT+BEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zREMxQjRFOTk1NzcxODJCNzVCOTUxOTUwMTI1OEUwM0VF
ODlFRkI0Rjk4NEEzOTE4QjI4QTc2RjNBOTcyMDA2LzAvOTRDM0EwNzcxNjM3QUNC
MjRCRUFDRDIzREREMjA3NUZCMDUzRjgxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEMzQTA3NzE2MzdBQ0IyNEJF
QUNEMjNEREQyMDc1RkIwNTNGODExLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0RDMUI0RTk5NTc3MTgyQjc1Qjk1MTk1MDEyNThFMDNFRTg5RUZCNEY5
ODRBMzkxOEIyOEE3NkYzQTk3MjAwNi8wLzMxMzQzMzJlMzEzMzM3MmUzMTMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM1Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKP
iXAwDQYJKoZIhvcNAQELBQADggEBACu2tZoXZ+IAGa1mQ5Sjnuo0/K9Ki+4hdsxA
FwDCsLvtPWSzIOOC1LwYOwDnF+eC6a0lD3IXXSBICmcuDP/+72zYHa1PJuNMr/P8
f5CktzgUyKVZKUX1inaY8zXn5n79qErAv8Bf3E8IvkcU2KkvyhR8G2+2/AwurFTJ
R9zEMRIpBCnKN1BtXZUGdFF10uHEjXoiEfsp8e1Kc+5YarF6xhFr6CK8x8fisrT2
qPMip/r693vxVKlthivOp27vj/zq7DSUc+5Bdn8l8UdgZ2A/eychwpLqFeSDao3k
loE8HKffeK3bEVGlY5HeARijboyE+/gkDb/HNdxdu3UA8vCTGH8=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:00 2026 by rpki-client