This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa
File:                     3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          +h6qjMnas0VVQA3NkRj9GaGxqffgVO11h2f2LubswwA=
Subject key identifier:   AD:F0:A6:FC:1F:F1:B5:7F:44:C2:ED:45:D2:B8:72:83:63:FE:E7:A3
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       58C936EEB30AF68A0C281466BC0A7CD5096A6274
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 07 Jan 2026 07:59:10 +0000
ROA not before:           Wed 07 Jan 2026 07:54:10 +0000
ROA not after:            Wed 06 Jan 2027 07:59:10 +0000
asID:                     265524
IP address blocks:        177.152.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c9:36:ee:b3:0a:f6:8a:0c:28:14:66:bc:0a:7c:d5:09:6a:62:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Jan  7 07:54:10 2026 GMT
            Not After : Jan  6 07:59:10 2027 GMT
        Subject: CN=ADF0A6FC1FF1B57F44C2ED45D2B8728363FEE7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:b0:83:b3:91:b4:9d:01:44:02:f0:e6:47:
                    e1:5f:b7:8d:2a:fd:21:55:7f:9e:de:7d:e9:0c:bd:
                    6d:d6:62:bd:07:08:65:2b:95:4b:18:ca:48:35:1b:
                    3c:08:04:ba:62:40:f0:54:4f:6e:ff:22:24:96:5a:
                    d8:0d:2e:46:11:fc:fa:d5:36:e5:ba:62:64:24:93:
                    6c:d6:ed:71:a8:06:ac:d9:8d:8a:5b:74:1a:2b:e9:
                    93:f1:95:bd:55:f9:6e:9e:a4:33:30:5e:93:c9:b5:
                    48:83:34:ed:82:75:aa:55:df:8a:e2:0a:e2:1f:b6:
                    4b:6c:2f:09:99:7f:8c:82:94:e6:46:d3:59:77:d6:
                    f0:1b:ec:78:76:f7:0d:98:a3:b6:3a:d8:30:2c:60:
                    d5:32:5c:36:e0:b2:75:db:9a:2d:8a:f3:00:22:ba:
                    37:f8:db:c1:f9:18:b5:13:f8:c4:76:72:89:27:8b:
                    f9:64:24:41:25:50:a2:39:d3:6c:cc:a9:c0:da:9a:
                    70:5d:10:ff:d5:1b:ec:44:96:79:f5:06:03:70:14:
                    fe:4c:80:83:04:d0:d2:44:e1:bd:99:42:ca:d4:10:
                    ef:6e:d9:66:59:15:9a:3d:1a:cb:18:b8:26:2c:e8:
                    39:83:89:d2:2d:d3:7d:06:4c:c0:e9:50:3f:cd:88:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F0:A6:FC:1F:F1:B5:7F:44:C2:ED:45:D2:B8:72:83:63:FE:E7:A3
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:b9:f9:c0:08:54:77:ea:b0:8f:be:a4:43:a8:a1:90:e9:
         55:ab:dd:66:0d:4f:98:e9:fe:ea:2e:f7:cf:25:21:ba:17:23:
         e5:11:94:3b:4f:0a:05:e2:39:fa:6b:c4:3f:c8:9f:a6:8b:1b:
         87:c2:a6:c4:73:e1:f3:b6:5b:2e:b6:9f:77:dc:d2:0a:92:f1:
         49:87:87:a4:6b:d1:09:b2:af:61:c1:10:3b:57:90:dc:3a:77:
         43:f0:eb:56:ce:ac:14:21:eb:b0:cf:20:2b:d5:1e:73:09:16:
         a7:2d:5f:b3:ce:70:6b:3d:32:8f:d4:b5:68:c6:b1:90:55:26:
         67:00:3d:a1:c9:fb:9b:b2:7c:2e:73:61:69:b2:7f:07:1e:91:
         44:2c:d8:ce:7f:ad:4d:2f:21:33:8b:c6:0d:9c:fe:b5:f0:bb:
         d9:31:cc:b1:53:3f:15:3a:b1:4b:5f:e4:6e:c9:b3:11:ad:20:
         fd:aa:06:eb:78:68:15:f1:4c:32:31:88:a6:7d:e2:56:25:2d:
         e0:9f:a3:17:ff:38:2a:35:fa:ed:af:09:d4:eb:70:77:df:ab:
         c3:69:11:7b:de:63:f8:c7:57:09:ae:21:f4:21:e7:6d:bf:01:
         9f:f5:66:36:61:39:e1:75:7a:9c:62:e5:c4:32:a3:7f:bd:ce:
         ea:fa:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:16:06 2026 by rpki-client