This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa
File:                     3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier:          tI3QcxyCsyqO8lJKegm62H7380uEUDCYRG4ZuB0Tc7s=
Subject key identifier:   D5:5B:90:4F:EE:52:94:48:11:42:40:A3:1D:0A:48:EA:37:FE:08:72
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       597BCF0FCDEA6C8FE09C68143B9487B2411600BD
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa
Signing time:             Tue 06 Jan 2026 19:32:40 +0000
ROA not before:           Tue 06 Jan 2026 19:27:40 +0000
ROA not after:            Tue 05 Jan 2027 19:32:40 +0000
asID:                     22122
IP address blocks:        148.209.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7b:cf:0f:cd:ea:6c:8f:e0:9c:68:14:3b:94:87:b2:41:16:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Jan  6 19:27:40 2026 GMT
            Not After : Jan  5 19:32:40 2027 GMT
        Subject: CN=D55B904FEE529448114240A31D0A48EA37FE0872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:8f:4d:9c:1a:4d:28:2f:d6:26:b4:45:ed:
                    d7:1b:20:7b:a0:e7:70:38:0c:b1:88:6e:fe:7f:4b:
                    f3:24:29:23:74:88:35:fc:42:c7:b9:3c:d8:05:41:
                    b5:28:d7:42:3f:84:50:31:f5:3b:a6:9e:00:ac:42:
                    0f:26:e9:63:43:6a:a9:f5:c4:f8:13:f1:ae:58:8e:
                    50:8d:b9:0b:b3:96:87:3c:e4:eb:10:e5:f4:09:58:
                    89:02:07:ed:3d:9e:92:83:01:3e:e8:2f:e6:92:31:
                    69:88:94:eb:63:d0:c6:ee:59:d7:69:c7:ca:d9:c7:
                    9f:8b:14:c4:4b:d9:d2:be:e1:58:e2:ec:1b:77:3f:
                    f1:5e:03:a8:e0:b6:5e:2d:f2:6d:c7:c3:d1:36:b2:
                    08:ba:1a:ee:1b:f0:ec:45:35:a3:b3:e7:ab:21:6f:
                    7e:32:33:d8:cf:31:d3:8e:e1:3f:e6:9a:59:03:23:
                    f7:f3:d1:8e:c5:c1:ec:ca:2a:37:8e:23:03:05:fd:
                    1d:d3:72:5b:b9:4d:21:38:94:0b:3b:55:a6:87:44:
                    a6:8e:da:39:61:01:08:57:95:a5:5c:25:b9:31:cc:
                    bf:cf:f3:a6:5a:4a:2c:7c:35:66:18:f0:6e:db:68:
                    dd:da:70:1d:2a:ac:59:39:fb:9b:7a:e5:07:88:77:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:90:4F:EE:52:94:48:11:42:40:A3:1D:0A:48:EA:37:FE:08:72
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:12:74:c6:4c:d6:48:dd:e9:b9:cc:5b:d4:ee:21:3b:b8:94:
         27:1f:fd:c1:ff:35:89:b8:8c:b4:e0:53:c7:89:c9:52:dc:32:
         db:28:2f:8d:91:00:96:66:5c:18:40:41:f4:ae:66:b3:ff:e1:
         88:4c:ec:39:80:85:31:d6:29:59:33:8c:d8:af:58:3a:30:62:
         8c:db:f3:df:66:36:1c:31:a0:2a:39:10:a5:b2:7a:be:48:fd:
         d0:ae:79:97:83:6d:be:4d:74:b9:f8:f1:5a:5d:4a:8e:08:69:
         a0:86:af:ab:01:81:35:86:2e:8c:f8:b3:b0:48:87:a1:d3:fa:
         66:36:4e:e8:f1:b1:8b:75:d4:fa:d3:62:82:46:ee:56:69:80:
         56:9e:19:b4:13:bb:4d:01:e4:c4:92:18:32:ba:8a:1a:c0:9e:
         1c:a9:d3:e8:c1:10:a8:a0:b5:de:04:1d:13:dc:50:f0:f9:93:
         fd:dc:2b:a9:d2:9f:b4:5c:c1:9f:4e:df:e8:95:6e:4d:ab:4c:
         77:a9:f1:2e:d0:85:02:80:01:a1:9b:b4:ba:d6:7b:28:cb:70:
         80:aa:8a:a3:30:00:6f:56:73:a5:00:6a:c9:c7:6f:62:ad:3f:
         e3:d5:53:5e:52:e0:3d:0f:e1:89:3e:38:df:42:85:21:8f:df:
         4d:f8:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:28 2026 by rpki-client