This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          uTaV/532oNBMCAYl8rwQNi8L2hS/4lnE2bymlWnKktc=
Subject key identifier:   01:6B:40:B0:2D:0D:15:CD:20:3A:01:8B:D3:89:D7:7C:99:50:40:7C
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       7AF23862F0CC3AEE5E84AAB6A623838B73BBFCFF
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 06 Jan 2026 19:32:56 +0000
ROA not before:           Tue 06 Jan 2026 19:27:56 +0000
ROA not after:            Tue 05 Jan 2027 19:32:56 +0000
asID:                     22122
IP address blocks:        148.209.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:38:62:f0:cc:3a:ee:5e:84:aa:b6:a6:23:83:8b:73:bb:fc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Jan  6 19:27:56 2026 GMT
            Not After : Jan  5 19:32:56 2027 GMT
        Subject: CN=016B40B02D0D15CD203A018BD389D77C9950407C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:53:8e:0f:84:00:dd:49:00:dc:ed:59:43:
                    ae:61:4d:93:4a:e8:ef:9b:6d:32:8b:6c:50:55:f0:
                    f1:9d:fd:84:fd:49:29:e6:5c:e2:91:82:ed:37:a3:
                    59:38:66:0f:a1:98:7d:8d:cd:44:6f:69:08:6b:61:
                    d5:03:d7:35:3c:5e:0f:6a:b0:12:80:90:6e:f0:3d:
                    07:6f:70:24:fa:9f:34:b0:14:fc:12:91:96:20:84:
                    7b:46:93:0b:b4:f9:3f:2e:ab:70:70:b4:93:ee:4e:
                    57:13:32:d1:63:aa:6f:ff:d7:3d:42:e9:67:af:53:
                    fd:a5:de:d5:bf:9b:26:ac:28:06:9f:21:a1:b9:9a:
                    be:af:c4:de:8f:29:b5:4f:1a:9f:f7:4c:3e:28:04:
                    d4:64:48:4d:83:29:f7:c5:96:ce:0e:c2:9c:5b:07:
                    ca:44:65:a7:73:09:fc:2e:4e:a8:67:59:2a:05:da:
                    e1:ba:6f:a5:48:0b:fa:1c:8c:e5:77:16:72:5f:5d:
                    77:f2:fd:39:ac:d8:28:0a:0c:7b:16:7b:9c:c1:36:
                    f5:f1:c5:48:80:96:54:e7:d0:0f:af:3f:00:8a:6f:
                    57:70:19:c0:0c:72:0a:b8:bc:5d:60:d8:3c:83:4f:
                    3e:9f:13:57:1d:75:70:b1:70:f3:be:aa:83:d4:3a:
                    5d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6B:40:B0:2D:0D:15:CD:20:3A:01:8B:D3:89:D7:7C:99:50:40:7C
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8c:15:28:38:fe:d5:f1:90:a8:af:2f:0d:8d:2f:99:d7:61:
         28:cc:a3:63:9a:67:26:87:d0:2c:f7:fa:6f:3f:59:2f:21:ed:
         d3:16:df:82:69:e2:d6:bb:d2:38:8f:21:8d:4c:00:24:c7:a7:
         18:f8:5e:f5:27:68:9a:fc:72:cc:0f:fc:c1:05:8e:19:69:e2:
         ee:dc:ce:7d:d5:c7:02:78:86:f3:99:57:bf:8b:30:fd:a7:19:
         63:45:40:cd:3e:0f:fa:1b:de:01:9a:7c:78:19:28:c5:60:c7:
         aa:60:8a:7a:2c:6e:39:b4:08:23:27:ec:3d:d2:c7:63:b5:bd:
         40:4f:6c:5e:de:1f:f4:e2:3b:7d:71:13:46:d3:d5:35:3e:e9:
         6d:82:fb:89:05:5f:2c:37:d8:a9:99:a6:a7:45:a0:00:e2:17:
         3a:63:41:88:fb:14:3d:0d:6b:5a:b4:0e:76:67:b5:b5:30:95:
         bc:2f:02:fa:83:7e:da:ef:f0:6d:ca:4a:92:56:ce:f8:bd:37:
         c0:38:3b:c9:b2:ed:fd:b4:db:64:82:ed:07:94:6f:4f:5d:8a:
         a6:c4:05:26:6d:4a:50:df:7f:2f:75:e4:44:ef:9d:46:a8:12:
         97:9f:09:02:3a:b2:c9:6c:df:50:05:5e:d4:dc:a0:9e:dc:5e:
         ad:52:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:23 2026 by rpki-client