This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130322e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e3130322e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          ppxlIg6Z2hbp+Jp00Lek/aSAA48WBQwu9+eqZ7nI3fg=
Subject key identifier:   B8:67:6A:31:05:E5:6D:CB:15:19:C2:29:6B:A1:07:F6:67:B6:7C:B6
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       1BD4785F7126DA582D43BE0A7A7ACEE0496FD86B
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130322e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:36:03 +0000
ROA not before:           Tue 06 Jan 2026 19:31:03 +0000
ROA not after:            Tue 05 Jan 2027 19:36:03 +0000
asID:                     21575
IP address blocks:        148.102.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d4:78:5f:71:26:da:58:2d:43:be:0a:7a:7a:ce:e0:49:6f:d8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:31:03 2026 GMT
            Not After : Jan  5 19:36:03 2027 GMT
        Subject: CN=B8676A3105E56DCB1519C2296BA107F667B67CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:53:e5:34:60:d9:fd:ca:21:a1:0b:0f:88:
                    95:d5:bd:bf:da:67:a5:cd:e9:49:7a:8d:92:58:61:
                    4a:21:ad:d8:f7:87:0c:c0:37:d7:dd:29:df:cc:f5:
                    31:7b:5e:0c:82:33:77:d8:cf:7a:1f:45:5a:dc:9e:
                    11:d9:61:68:c7:25:f1:3b:b4:d8:21:0c:e8:61:ef:
                    b9:a1:ba:f9:1f:66:4d:26:ab:6f:27:6b:e0:14:1c:
                    08:a0:25:46:a3:c1:0a:ee:f0:9b:52:1e:17:a0:3d:
                    ee:bd:54:d5:c3:67:24:e1:7d:f7:40:b6:7d:31:20:
                    e4:a0:7b:f8:18:18:2d:24:f5:f9:da:db:68:42:e8:
                    3d:a6:9f:e5:f7:9c:e7:6a:30:b3:48:96:14:4d:a6:
                    f1:17:5b:ee:63:70:cf:6b:fd:b7:d7:41:50:e4:f0:
                    be:43:b8:f5:40:c4:7e:83:c3:da:f6:03:8a:71:1c:
                    d1:bc:43:c6:0a:3a:82:a8:a5:fc:45:54:99:2a:41:
                    ae:00:34:86:4c:b1:f7:8a:95:f5:87:cd:b2:a7:95:
                    bd:52:e9:34:59:13:07:a4:32:89:12:72:c5:ae:1c:
                    e2:a2:d8:66:8e:73:80:64:33:1b:ed:d3:39:eb:9a:
                    12:c5:91:6a:08:21:d6:3a:5d:32:e4:74:10:5c:c7:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:67:6A:31:05:E5:6D:CB:15:19:C2:29:6B:A1:07:F6:67:B6:7C:B6
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130322e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:27:7f:98:63:ff:4b:35:79:0a:2e:35:9c:b3:16:c3:54:64:
         0b:a3:3c:f5:cc:0c:38:23:f7:30:e8:2b:8f:30:0a:0b:71:a2:
         ce:15:cf:7f:b9:63:3d:56:9f:6a:27:e8:b5:1d:d0:76:2e:01:
         3e:41:4d:dd:1f:35:28:c7:1e:85:34:fb:d1:1c:db:78:c5:b0:
         50:0e:d7:56:c1:f8:64:d1:60:58:72:05:c0:96:2c:51:a9:94:
         eb:09:e9:49:d2:be:a7:f5:43:55:38:50:04:75:78:dc:5a:12:
         82:1d:f0:2d:0d:60:b3:05:95:b3:3d:26:60:f1:5d:ba:ae:83:
         26:8b:23:51:54:18:78:00:22:09:6b:5e:3c:41:09:85:de:39:
         71:9a:c1:f2:56:b9:db:64:d4:81:b3:7c:3a:6b:69:0b:8e:73:
         bf:46:f1:19:bd:5c:2a:1e:34:a6:91:7b:dc:6c:e1:81:8e:14:
         98:8a:fa:2f:c4:8f:54:98:44:a4:a2:90:eb:6c:37:f5:86:61:
         cc:34:58:74:ff:7e:2d:27:5f:25:0b:0d:73:ed:64:0a:db:3f:
         a5:db:8c:68:23:0b:25:89:20:c8:fb:e9:7b:02:aa:4e:a7:28:
         2d:8b:e2:a7:43:e5:f5:ba:57:a8:78:fa:60:25:da:a5:be:18:
         d5:a4:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:14:16 2026 by rpki-client