This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3134332e302e3234342e302f32322d3234203d3e203132313530.roa
File:                     3134332e302e3234342e302f32322d3234203d3e203132313530.roa (raw, json)
Hash identifier:          tTpmuE3jng6tXbkRa/D5oivt+SB1WFTUlsjeLYffzcY=
Subject key identifier:   06:BB:FC:A1:A1:7B:06:AE:52:73:E1:7F:2B:3C:87:5F:45:BD:7C:BB
Certificate issuer:       /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial:       4D84E191C0A94AA8BE93AF1DED9BEA01B30AD519
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3134332e302e3234342e302f32322d3234203d3e203132313530.roa
Signing time:             Tue 06 Jan 2026 18:59:19 +0000
ROA not before:           Tue 06 Jan 2026 18:54:19 +0000
ROA not after:            Tue 05 Jan 2027 18:59:19 +0000
asID:                     12150
IP address blocks:        143.0.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:84:e1:91:c0:a9:4a:a8:be:93:af:1d:ed:9b:ea:01:b3:0a:d5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
        Validity
            Not Before: Jan  6 18:54:19 2026 GMT
            Not After : Jan  5 18:59:19 2027 GMT
        Subject: CN=06BBFCA1A17B06AE5273E17F2B3C875F45BD7CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:75:e0:3f:4f:d1:47:c3:ab:24:2d:59:8b:
                    86:f0:5f:8e:e4:1e:f4:9e:4f:55:72:e2:11:3f:6d:
                    6f:6b:4b:9c:a9:9e:03:fa:c0:71:70:79:53:48:46:
                    77:dc:d3:49:35:9e:a2:54:8a:ad:a2:51:93:da:15:
                    15:73:cd:b9:2e:a0:92:fe:37:79:a7:8e:a6:a5:d6:
                    2a:a0:f7:e1:15:de:bd:58:4a:1e:93:a1:f9:e2:cc:
                    b3:0f:5b:1c:4b:72:4b:84:e3:e3:ab:50:3d:b2:94:
                    48:cb:a3:5c:b9:ac:a4:a6:53:75:0c:41:bb:75:9e:
                    14:7c:eb:4a:35:76:09:8f:0c:30:5a:a5:82:26:69:
                    d2:a3:29:41:6f:ab:db:e8:22:df:7f:88:3b:47:79:
                    8e:52:71:1c:7c:cf:00:ee:3d:91:c5:67:91:ab:51:
                    86:28:e3:38:3f:82:f3:44:f9:af:88:91:9f:d1:43:
                    28:90:7e:b8:c5:f0:2a:2b:e1:ba:e6:2f:fd:b6:c9:
                    0b:6e:01:b8:d7:34:ef:51:57:6a:a7:e1:63:df:13:
                    23:86:e2:ab:ae:c8:f0:4a:53:74:78:cb:c9:c0:5a:
                    6b:05:a7:4c:eb:a0:98:b2:bf:ba:0a:4a:54:9c:4d:
                    24:1c:b1:e7:71:2f:bc:41:70:fc:25:b2:50:43:80:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BB:FC:A1:A1:7B:06:AE:52:73:E1:7F:2B:3C:87:5F:45:BD:7C:BB
            X509v3 Authority Key Identifier:
                keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/3134332e302e3234342e302f32322d3234203d3e203132313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:8d:ae:69:60:42:c8:9f:e0:d8:ae:65:a5:fd:20:9b:5f:
         6e:ee:68:76:f8:8d:69:c5:a9:64:34:d8:3e:f0:a8:80:bf:79:
         37:40:2c:17:a4:41:22:42:04:09:67:ab:05:3f:29:cb:31:44:
         10:a9:63:ee:94:73:a5:23:d5:0a:d3:0a:2e:37:53:7d:d8:a6:
         f5:f2:f7:de:81:8e:d8:3d:93:b7:25:ad:e4:60:70:32:26:f9:
         28:4d:aa:ff:43:72:61:89:be:76:4c:2c:85:2f:43:30:48:0e:
         a6:ba:a8:d6:19:57:6b:ca:50:ab:c1:f3:83:91:f0:a2:17:34:
         af:65:aa:db:d7:56:dc:84:fd:1f:26:80:ac:1b:22:e7:99:7a:
         10:67:84:4b:b2:fe:67:66:65:20:13:83:d0:ff:2c:41:30:12:
         14:6f:f2:dd:e0:b0:06:6d:b5:a7:fe:97:19:db:c2:1e:02:26:
         4b:63:bd:12:51:71:31:6d:34:da:7d:b7:f0:db:0d:43:3b:f7:
         b4:6b:d9:e0:c4:fe:7b:0f:77:4d:4d:cf:ee:5b:bd:a8:bb:e3:
         e8:06:39:4b:38:7d:4b:66:71:f8:3d:18:03:ce:f2:55:61:a7:
         cf:b3:13:3c:61:fb:ab:3a:85:e9:fd:86:2f:f3:6b:d5:9c:b1:
         c4:f0:c5:e6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTYThkcCpSqi+k68d7ZvqAbMK1RkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJCRDdDN0Q3NEY0OUNFNkJFQzgwRDk1Qzk2MjEzREQw
REM1QzRCNzAeFw0yNjAxMDYxODU0MTlaFw0yNzAxMDUxODU5MTlaMDMxMTAvBgNV
BAMTKDA2QkJGQ0ExQTE3QjA2QUU1MjczRTE3RjJCM0M4NzVGNDVCRDdDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85HXgP0/RR8OrJC1Zi4bwX47k
HvSeT1Vy4hE/bW9rS5ypngP6wHFweVNIRnfc00k1nqJUiq2iUZPaFRVzzbkuoJL+
N3mnjqal1iqg9+EV3r1YSh6TofnizLMPWxxLckuE4+OrUD2ylEjLo1y5rKSmU3UM
Qbt1nhR860o1dgmPDDBapYImadKjKUFvq9voIt9/iDtHeY5ScRx8zwDuPZHFZ5Gr
UYYo4zg/gvNE+a+IkZ/RQyiQfrjF8Cor4brmL/22yQtuAbjXNO9RV2qn4WPfEyOG
4quuyPBKU3R4y8nAWmsFp0zroJiyv7oKSlScTSQcsedxL7xBcPwlslBDgGezAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUBrv8oaF7Bq5Sc+F/KzyHX0W9fLswHwYDVR0j
BBgwFoAUwr18fXT0nOa+yA2VyWIT3Q3FxLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RkZGMjJDMjc3QTEwNDQ0OEM5QkNGRjlGNzU5NUMxQkRC
RDgwREUwOTBEOUE0ODg5RUI3QjcwM0UxRjMxOTQ1LzAvQzJCRDdDN0Q3NEY0OUNF
NkJFQzgwRDk1Qzk2MjEzREQwREM1QzRCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMkJEN0M3RDc0RjQ5Q0U2QkVD
ODBEOTVDOTYyMTNERDBEQzVDNEI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkZGRjIyQzI3N0ExMDQ0NDhDOUJDRkY5Rjc1OTVDMUJEQkQ4MERFMDkw
RDlBNDg4OUVCN0I3MDNFMUYzMTk0NS8wLzMxMzQzMzJlMzAyZTMyMzQzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzIzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKPAPQwDQYJ
KoZIhvcNAQELBQADggEBAD5sja5pYELIn+DYrmWl/SCbX27uaHb4jWnFqWQ02D7w
qIC/eTdALBekQSJCBAlnqwU/KcsxRBCpY+6Uc6Uj1QrTCi43U33YpvXy996Bjtg9
k7clreRgcDIm+ShNqv9DcmGJvnZMLIUvQzBIDqa6qNYZV2vKUKvB84OR8KIXNK9l
qtvXVtyE/R8mgKwbIueZehBnhEuy/mdmZSATg9D/LEEwEhRv8t3gsAZttaf+lxnb
wh4CJktjvRJRcTFtNNp9t/DbDUM797Rr2eDE/nsPd01Nz+5bvai74+gGOUs4fUtm
cfg9GAPO8lVhp8+zEzxh+6s6hen9hi/za9WcscTwxeY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:57:44 2026 by rpki-client