This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa
File:                     3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa (raw, json)
Hash identifier:          0RITN6PawdZNJWXW7vsVrrDOIhOD7hS04Qoj9Q4BOpY=
Subject key identifier:   05:2F:C2:7F:43:48:EF:BD:73:C9:D3:A6:5E:7D:61:31:A2:1C:4E:1B
Certificate issuer:       /CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
Certificate serial:       46AE4D59AF4F966E7FCF17CAAF1CBB5917187EC0
Authority key identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa
Signing time:             Tue 06 Jan 2026 18:58:52 +0000
ROA not before:           Tue 06 Jan 2026 18:53:52 +0000
ROA not after:            Tue 05 Jan 2027 18:58:52 +0000
asID:                     263196
IP address blocks:        143.202.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ae:4d:59:af:4f:96:6e:7f:cf:17:ca:af:1c:bb:59:17:18:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
        Validity
            Not Before: Jan  6 18:53:52 2026 GMT
            Not After : Jan  5 18:58:52 2027 GMT
        Subject: CN=052FC27F4348EFBD73C9D3A65E7D6131A21C4E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:5d:ab:76:c1:4f:82:ca:bf:65:9b:b9:3b:
                    4f:f3:bc:e2:7d:47:93:e4:4b:2a:d6:cd:33:e4:eb:
                    1c:33:0b:48:db:89:fe:07:88:b1:e0:70:0f:99:a6:
                    e0:4d:e3:e5:b3:b0:ae:44:f7:1a:66:d0:2e:08:84:
                    b3:bb:fd:21:db:d6:28:76:cf:53:0b:64:54:a0:4b:
                    55:24:06:14:ea:47:51:91:dc:b2:51:fd:1d:d0:df:
                    2b:0e:8b:3a:a0:3e:e9:f6:4b:8c:c7:57:d0:1a:9c:
                    8c:fe:c2:71:36:3f:85:da:42:71:ab:9f:31:a1:63:
                    23:12:c5:16:f2:88:ba:17:bf:0d:e3:07:b5:89:9a:
                    6f:a4:d8:f6:9b:f0:6e:cc:fc:8a:38:ef:72:8d:c9:
                    d3:10:87:01:13:41:a6:92:03:51:d8:6d:da:89:7d:
                    a3:1a:53:d6:10:eb:a9:32:fa:c9:43:15:4e:b5:95:
                    d4:51:fb:08:df:52:23:aa:2d:eb:03:69:55:b0:93:
                    97:3a:15:20:56:38:db:9f:a6:45:4d:73:77:a2:df:
                    c4:1c:f9:e6:f0:38:8c:a8:03:e2:61:ab:ec:50:e8:
                    ff:25:38:dc:7a:ae:ec:cb:99:51:f1:9e:12:88:fe:
                    c9:56:8d:03:e0:81:04:b7:07:ca:8b:dd:7f:d3:bb:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:C2:7F:43:48:EF:BD:73:C9:D3:A6:5E:7D:61:31:A2:1C:4E:1B
            X509v3 Authority Key Identifier:
                keyid:1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/3134332e3230322e3133362e302f32322d3234203d3e20323633313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:2f:67:9b:65:67:cb:98:80:4d:47:88:d0:9d:7d:45:23:
         98:43:0c:36:1b:31:5e:51:2e:80:b2:ef:80:3b:3f:dc:44:f2:
         cd:cd:ef:16:7f:28:d6:b1:f4:07:15:17:f4:63:4d:db:20:2e:
         78:c0:5f:1f:e8:d8:ba:37:8a:bd:c2:1f:50:a2:c2:09:62:11:
         16:46:b6:98:bc:77:c3:25:b8:c4:1b:83:9b:2e:72:70:b0:67:
         00:e2:3b:a2:31:54:4c:f5:ff:54:47:d7:04:81:4e:f1:ce:b4:
         fd:58:58:80:69:d8:f9:54:6d:53:82:88:63:f8:cc:54:52:8e:
         3f:07:7b:d7:d9:56:f0:f4:7d:38:c2:70:67:b8:aa:45:bf:b3:
         c0:36:9d:fa:ec:e7:4f:8d:98:12:16:d4:55:20:18:f0:a8:8a:
         b6:4c:2d:c7:95:79:ce:98:77:7e:0d:be:b1:11:31:1a:b0:05:
         d7:23:0d:4d:02:ee:f0:ca:b0:be:2f:db:17:86:55:1f:b8:59:
         04:61:e8:b0:ce:13:ec:67:b8:49:f6:50:0b:87:9f:07:79:1a:
         8f:97:38:17:eb:c7:39:98:60:2e:28:df:95:c4:e3:2a:46:d0:
         00:51:82:a6:08:57:9d:72:8c:a6:41:fb:cc:af:0a:7d:f8:1d:
         ec:3b:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:52:56 2026 by rpki-client