This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e302e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          Akt84rsSuo1qN32iI7xpne5Md14dDPuqDZvKFZnMokU=
Subject key identifier:   D2:6D:F9:7F:D8:77:CF:1E:B2:99:97:D6:16:AA:A7:CB:4E:09:42:DF
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       54892B268F1C215A10957E6B44C8875B4B2B851E
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:36:04 +0000
ROA not before:           Tue 06 Jan 2026 19:31:04 +0000
ROA not after:            Tue 05 Jan 2027 19:36:04 +0000
asID:                     21575
IP address blocks:        148.102.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:89:2b:26:8f:1c:21:5a:10:95:7e:6b:44:c8:87:5b:4b:2b:85:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:31:04 2026 GMT
            Not After : Jan  5 19:36:04 2027 GMT
        Subject: CN=D26DF97FD877CF1EB29997D616AAA7CB4E0942DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:c0:ba:0d:6d:4b:61:10:54:81:03:a0:5e:
                    16:4e:d0:65:d5:a1:d8:bd:b4:9c:ed:77:64:66:9c:
                    eb:2a:1e:05:34:81:d0:a9:5a:ff:f5:fb:fd:07:ea:
                    d6:27:02:2f:3b:ab:a2:69:a5:7c:5e:31:95:89:73:
                    62:71:b4:9b:19:eb:6d:21:27:fe:69:d1:66:c3:b0:
                    fd:61:01:cb:6d:ea:32:73:51:d2:25:dd:a8:7f:89:
                    46:22:f4:16:18:5a:22:57:61:e8:c7:fa:24:01:e2:
                    33:68:5e:16:16:ee:da:6a:86:08:cd:ac:e3:3c:6e:
                    a4:b9:8f:c0:ff:fc:d6:a6:fc:fa:df:06:de:72:81:
                    6c:fc:19:48:63:dd:5d:58:1b:2d:6e:90:ff:95:72:
                    db:c7:ce:7d:46:00:70:52:2f:72:7f:23:d3:8b:c4:
                    51:41:37:aa:e0:37:98:83:56:91:3a:c4:1b:bd:84:
                    92:f4:20:b8:14:9c:b1:1a:6d:e2:98:0a:4c:ad:80:
                    fc:d1:8f:b0:d3:fe:9c:58:e3:f5:63:11:2e:3c:04:
                    7f:8b:4a:08:c4:3b:03:c0:86:95:c9:18:b6:87:67:
                    25:f4:99:7f:8f:4b:3d:ed:33:93:1f:36:df:52:90:
                    37:22:15:11:02:45:70:e5:2e:e0:87:20:15:0c:77:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6D:F9:7F:D8:77:CF:1E:B2:99:97:D6:16:AA:A7:CB:4E:09:42:DF
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:10:bc:73:55:e3:49:d0:c6:06:26:c4:65:8c:93:05:44:
         45:4d:89:9c:1d:ed:a7:3b:57:f7:a6:7e:0a:c0:fa:ac:76:a7:
         82:29:f6:b1:18:ba:bc:04:8d:8d:ae:21:8e:62:79:2a:3b:4f:
         8b:d5:e7:a7:13:08:d2:22:87:dc:4a:44:a5:83:b9:40:c0:3f:
         45:86:d8:32:bd:11:38:f6:a1:a5:ff:b0:bf:e6:ee:36:1b:48:
         94:e4:9e:e5:2a:b2:15:a5:21:4e:33:ca:3c:25:e8:37:6c:1b:
         42:06:ed:c8:20:45:4a:a0:4d:a3:f6:4b:34:d1:f5:18:92:b7:
         76:d1:60:13:69:d3:de:3e:27:de:03:08:70:eb:5c:d4:68:dd:
         aa:03:44:56:4f:40:90:3b:f4:b2:db:08:2e:9c:76:15:45:d2:
         29:ba:99:49:06:61:ca:76:6a:25:33:ef:bd:d3:be:db:87:72:
         03:d4:7a:ea:f1:0f:c3:f7:59:7c:9d:df:16:2a:79:f0:c8:8b:
         0f:f6:f9:60:21:c4:85:9c:52:b1:c6:d3:07:cd:9f:07:f6:cd:
         76:3e:c5:17:4b:33:fa:f0:84:e3:72:90:37:1b:b0:dc:f8:b7:
         0e:12:ea:6a:08:08:24:4c:f9:b5:0a:51:d8:a2:48:6e:52:61:
         03:2a:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:30 2026 by rpki-client