This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e352e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e352e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          qvpCH9rD0BQAQx5ikaseklfuVAibbXtvjFkuO4g7u0Q=
Subject key identifier:   6A:74:DE:AC:75:33:50:12:18:5E:70:9F:BD:07:D8:24:03:C2:25:0B
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       6478129B16BE2CFB0A77B64AB1078FD82F4428CE
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e352e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 06 Jan 2026 19:32:52 +0000
ROA not before:           Tue 06 Jan 2026 19:27:52 +0000
ROA not after:            Tue 05 Jan 2027 19:32:52 +0000
asID:                     22122
IP address blocks:        148.209.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:78:12:9b:16:be:2c:fb:0a:77:b6:4a:b1:07:8f:d8:2f:44:28:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Jan  6 19:27:52 2026 GMT
            Not After : Jan  5 19:32:52 2027 GMT
        Subject: CN=6A74DEAC75335012185E709FBD07D82403C2250B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:36:af:ea:86:42:24:c8:9d:ae:97:5c:5f:
                    c9:03:24:bc:fe:25:2b:60:83:7b:51:6e:c6:1c:c9:
                    cd:73:85:c1:19:ec:2d:59:c1:8f:46:c8:50:41:55:
                    3f:26:ce:04:06:08:55:e3:a9:67:04:33:12:51:8d:
                    a9:3c:e6:66:46:b0:0c:59:83:7c:fa:0f:36:b1:58:
                    e6:f6:75:e9:e4:42:98:62:07:99:f0:94:24:63:5d:
                    a2:76:11:df:61:b7:05:71:24:95:3f:60:6b:4b:5f:
                    05:a3:17:8f:78:2d:c8:a1:25:f9:24:47:d1:1b:91:
                    82:ad:32:00:6c:c1:69:12:b7:f8:8e:82:c2:c3:7a:
                    40:c8:e8:af:22:f7:7f:5c:d2:b8:39:4c:3d:cd:2c:
                    7b:26:45:27:ff:db:06:e8:84:0d:76:65:79:8a:91:
                    62:fd:11:6e:26:9c:e2:c2:6c:13:dd:e1:e0:72:df:
                    bb:ee:3e:b8:3c:07:d5:78:00:4b:76:af:f2:7f:0e:
                    1b:bb:ea:f1:d1:85:ac:05:55:13:3f:3b:f8:3b:db:
                    1a:9f:d1:56:be:8b:70:d3:e1:df:4c:c4:63:2d:8c:
                    52:66:79:e5:00:1a:38:a2:cb:d7:d6:f8:9d:5a:cc:
                    37:ae:33:c1:b6:8f:67:17:ef:ab:73:b5:da:66:29:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:74:DE:AC:75:33:50:12:18:5E:70:9F:BD:07:D8:24:03:C2:25:0B
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e352e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:01:98:fd:a3:d3:69:92:49:ba:05:f0:36:de:97:81:80:
         66:b8:c8:2f:7f:55:4c:4f:9a:95:95:60:e5:91:8a:68:98:bc:
         a6:42:c5:d6:44:e8:76:58:a6:87:6d:85:d1:ba:f8:1e:93:f2:
         1a:1f:5c:c9:30:14:41:99:08:70:fa:c9:8e:bc:97:e0:52:75:
         b0:96:65:d6:96:1d:69:32:e1:17:8f:3c:15:51:93:a9:f2:7f:
         38:54:6a:19:24:1d:da:b9:ec:95:7c:03:a4:01:44:55:f4:f1:
         0e:13:5e:f5:58:5b:38:ee:f2:e5:4c:fd:12:af:05:62:2f:ee:
         8f:88:bc:f2:62:d7:52:0c:0a:bb:c4:26:9e:ce:ee:bb:cd:fb:
         01:7e:f6:1e:f1:26:28:c6:46:6d:9d:7c:1b:ca:2b:8c:51:16:
         7f:6a:0d:ac:14:bb:4b:bf:a2:5e:38:bb:9a:fe:23:9b:c6:fe:
         44:82:58:34:0e:30:c0:4a:e6:b1:aa:45:8c:70:80:ea:b2:e7:
         f3:2b:54:2c:b6:44:02:df:f4:f9:e5:b0:6a:5c:1e:42:ef:8f:
         3d:8d:d2:d5:a9:c3:78:d9:83:b6:b9:f4:a7:ce:f2:3c:e0:e1:
         b7:e2:49:ed:4d:59:ff:64:26:44:28:8d:b1:0d:11:69:94:fe:
         51:8b:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:29 2026 by rpki-client