This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          Q+TkplyWgHoz944E3xPfIhoTS1oH725VchvMYxlB1eo=
Subject key identifier:   43:01:94:E9:71:30:74:19:9B:D5:B4:5A:A4:BA:5C:5E:F6:4B:79:CB
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       719A05262751D0F89AD8738928CCA0DF75C8D740
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:35:59 +0000
ROA not before:           Tue 06 Jan 2026 19:30:59 +0000
ROA not after:            Tue 05 Jan 2027 19:35:59 +0000
asID:                     21575
IP address blocks:        148.102.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9a:05:26:27:51:d0:f8:9a:d8:73:89:28:cc:a0:df:75:c8:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:30:59 2026 GMT
            Not After : Jan  5 19:35:59 2027 GMT
        Subject: CN=430194E9713074199BD5B45AA4BA5C5EF64B79CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:4b:e3:37:bf:65:cb:03:56:9a:67:02:2a:
                    79:84:74:30:b6:75:c0:b3:30:3d:e1:50:b8:82:db:
                    79:11:a1:00:06:e2:1c:64:2c:3a:4c:ca:f2:66:a0:
                    79:91:87:ce:2c:e7:3c:9a:4b:31:89:a1:e5:f4:82:
                    37:b1:e1:de:c2:e8:4d:ca:ff:53:07:18:0d:cc:09:
                    cf:ce:91:7c:53:e5:25:5c:7a:57:74:80:63:41:9b:
                    06:71:6c:a3:c2:9e:5e:d8:34:42:bf:c4:fd:d2:71:
                    2b:57:f5:cc:83:5f:b2:55:c3:3d:cb:0b:d8:31:44:
                    68:5d:cb:a4:3a:22:35:ab:a2:ea:8c:26:0b:95:06:
                    94:36:43:cc:da:82:4a:9e:c0:12:4f:2e:ba:c4:5a:
                    d1:6a:c0:d4:c0:a5:ca:4d:61:34:a9:1a:3d:7e:e8:
                    dc:7a:7b:d4:17:58:e8:dd:69:f3:1f:88:c2:bd:ce:
                    c8:52:ef:92:b8:c7:63:79:41:aa:2a:a0:5a:d5:6a:
                    55:1c:81:4e:fb:fa:f8:b6:66:94:dc:ff:1e:93:3f:
                    89:65:9e:3a:0a:ca:3c:b1:39:77:2b:64:97:7d:62:
                    59:af:7e:d1:62:ae:af:28:7a:83:7e:71:18:9f:78:
                    13:ed:7a:df:1b:f2:90:b4:0b:f8:40:f1:7d:9f:9d:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:01:94:E9:71:30:74:19:9B:D5:B4:5A:A4:BA:5C:5E:F6:4B:79:CB
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130342e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b5:f0:ab:b0:07:13:81:39:3c:51:46:ae:32:6d:45:11:4c:
         fe:23:57:80:52:58:c7:94:02:de:d4:1e:e2:fd:fa:43:31:4b:
         31:81:61:12:81:5e:75:82:5d:5a:96:db:e7:60:a9:57:3a:be:
         d7:34:36:3b:12:9e:cd:88:d3:ea:cc:5c:0b:1a:ac:49:ac:0f:
         56:fa:e2:4e:d5:68:b2:da:35:f7:ff:5a:84:32:2d:90:f3:3c:
         be:a5:88:b1:a6:d9:53:3c:fe:1b:fe:90:3e:af:fe:07:40:6c:
         85:bc:75:e5:9c:f4:9c:a6:a8:d4:5e:48:e0:5a:5b:4b:14:ce:
         5b:ef:ec:eb:e3:de:e9:01:fd:ba:70:93:20:51:cc:78:7a:1f:
         2d:69:5f:9f:66:9e:c9:98:45:38:d4:b2:82:ba:83:56:a5:f8:
         14:39:f9:6c:a6:23:6c:2b:be:b4:f5:ec:c6:a0:c2:32:d7:19:
         99:62:8a:d3:53:59:54:a1:41:98:1b:a1:28:f0:5a:cc:1f:ed:
         05:95:a6:bd:1b:21:eb:4b:16:68:da:0c:5d:9d:7e:c7:e3:cf:
         6f:6c:c2:3e:b1:68:0a:66:df:11:45:42:4c:36:bc:7d:ab:aa:
         11:80:4b:62:57:54:c2:f9:73:1d:66:5e:96:a8:8c:39:8c:c1:
         61:ef:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:49 2026 by rpki-client