This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
File:                     3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier:          pC+ZPffVAzXjb0RZRuF4k9vWuByL0NUon1qIWdPCXWY=
Subject key identifier:   9C:9F:1F:F3:97:CC:02:24:37:60:B0:BF:B2:1C:F2:27:67:36:06:4D
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       7558BA4A7E4F713C474CC2739B4EEEEE79DE9C7F
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa
Signing time:             Tue 06 Jan 2026 19:32:50 +0000
ROA not before:           Tue 06 Jan 2026 19:27:50 +0000
ROA not after:            Tue 05 Jan 2027 19:32:50 +0000
asID:                     22122
IP address blocks:        148.209.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:58:ba:4a:7e:4f:71:3c:47:4c:c2:73:9b:4e:ee:ee:79:de:9c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Jan  6 19:27:50 2026 GMT
            Not After : Jan  5 19:32:50 2027 GMT
        Subject: CN=9C9F1FF397CC02243760B0BFB21CF2276736064D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:6e:24:bd:9a:8d:6c:e5:bb:80:40:e2:2d:
                    6d:0e:7d:67:fd:46:1d:2f:a4:20:c8:5d:4e:13:b5:
                    0e:24:ab:ab:7f:19:71:ac:6e:02:2e:23:14:0f:8a:
                    eb:86:df:ee:49:d4:0b:dd:24:48:b2:26:8b:55:72:
                    75:1d:54:2c:33:d0:1e:7c:15:9a:b4:6d:a8:6d:ed:
                    59:f1:ec:6a:8f:eb:79:d6:3c:f2:7a:6b:a2:b7:fe:
                    fd:13:03:d7:53:64:e3:a7:41:3b:d3:bd:7c:39:22:
                    75:6d:53:ee:1f:91:3f:b1:ed:01:84:6e:55:90:0e:
                    74:21:19:2b:29:2e:8f:a0:2d:7b:c2:70:6b:03:d8:
                    ba:69:25:2f:76:c2:1c:26:9f:53:51:e6:9e:b3:bc:
                    51:9e:9b:d7:85:eb:d1:9c:ee:ee:7f:cb:3a:eb:3b:
                    69:83:53:b0:ac:da:b2:f2:0b:65:4c:a2:b2:6c:72:
                    e4:1c:2e:eb:90:03:b5:4d:33:33:98:ca:ba:87:dc:
                    4f:92:19:fa:48:5d:af:1f:a8:7d:e6:a9:8f:12:08:
                    f7:1b:71:17:f0:f0:e5:29:61:bd:ec:4a:d0:36:d5:
                    08:84:55:bf:cb:cb:ec:64:92:29:89:53:a2:ea:4e:
                    b0:71:b0:3a:b5:6d:65:c3:fb:2a:62:7b:9f:40:a9:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9F:1F:F3:97:CC:02:24:37:60:B0:BF:B2:1C:F2:27:67:36:06:4D
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3134322e302f32332d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:5f:77:99:5e:82:fd:85:24:bb:87:eb:19:3b:2d:22:ba:
         f6:17:21:77:1a:93:e2:bb:a6:76:bb:1a:ff:1e:07:9e:47:6b:
         96:44:3b:c4:02:9f:0c:0c:04:ef:2b:6a:47:d6:9a:af:a4:1e:
         61:22:70:a5:ba:64:7c:c7:66:7e:9f:c1:73:77:c8:30:02:dd:
         50:37:50:e9:5c:ca:5d:b7:4c:12:72:84:d5:48:0f:d1:56:1d:
         32:34:25:de:af:61:31:95:7f:61:2d:57:a9:bb:36:94:4b:92:
         3f:f5:c2:39:1e:3c:de:86:2a:30:d5:4b:fb:76:e3:32:2c:57:
         03:3d:89:fc:b8:3a:91:6f:0f:2e:6f:65:22:46:1b:5a:95:09:
         ef:e6:de:93:0f:71:cc:1a:a2:71:5c:a0:bb:78:45:85:60:96:
         2a:fd:43:27:be:27:e8:5f:ab:a5:25:2f:3b:ba:01:c3:f9:60:
         49:80:7d:d1:ad:43:41:4f:80:9c:a4:fe:51:1f:32:6c:99:c0:
         e6:4f:82:12:cf:91:76:7a:00:b0:78:c7:3a:4f:af:e8:12:7d:
         aa:f1:75:e0:65:fd:09:e8:fe:a5:02:21:06:a7:14:57:88:52:
         e5:fc:79:88:00:3d:b9:19:6c:d3:79:61:45:b2:a4:64:b5:51:
         ca:66:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:28 2026 by rpki-client