This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39362e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e39362e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          qeZn5hUIRtvqKUMjeAdnXcRfTH2SgJAp435EmUPm5ts=
Subject key identifier:   2C:AA:8E:F5:02:BB:6E:AE:8C:34:48:FC:18:37:03:1A:51:6E:99:C8
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       6E19C99A8AEFBC26759AD26269975744CE621E81
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39362e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:36:12 +0000
ROA not before:           Tue 06 Jan 2026 19:31:12 +0000
ROA not after:            Tue 05 Jan 2027 19:36:12 +0000
asID:                     21575
IP address blocks:        148.102.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:19:c9:9a:8a:ef:bc:26:75:9a:d2:62:69:97:57:44:ce:62:1e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:31:12 2026 GMT
            Not After : Jan  5 19:36:12 2027 GMT
        Subject: CN=2CAA8EF502BB6EAE8C3448FC1837031A516E99C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:92:0e:37:98:12:c3:88:9e:61:19:04:c4:
                    45:f6:41:b4:fc:65:42:77:c7:97:8d:b5:f1:ec:d5:
                    c4:20:5f:5b:4b:cb:64:92:3f:b0:6b:84:88:2a:48:
                    05:87:fd:3a:da:67:32:71:3c:e9:27:85:9e:cf:90:
                    75:ac:25:d8:5d:84:6e:5a:e3:14:09:7c:2f:c3:06:
                    fc:d4:50:1c:be:0d:e9:a0:9f:d6:18:ff:61:ad:4d:
                    3e:e2:95:83:3c:1b:06:8f:2f:d1:6f:78:7b:c0:23:
                    9e:7a:88:d9:e8:cd:ff:98:73:4a:8c:6c:72:2a:80:
                    94:54:b8:20:39:2a:71:14:74:99:44:f8:b9:3b:96:
                    d2:21:90:c1:02:d6:8a:ae:2c:5e:fb:bb:2f:18:aa:
                    c7:7a:39:de:bc:f0:7e:4b:2b:cc:9b:ff:18:f3:4f:
                    ec:4a:3b:5f:58:e9:1c:5f:af:bd:98:77:80:94:fc:
                    e6:b2:3a:16:15:8b:17:76:16:3a:63:ce:f3:a9:9a:
                    17:bb:35:3d:d2:5c:e4:7b:47:62:61:8a:a8:75:63:
                    90:43:ce:c9:4e:bd:a3:0d:06:31:b6:a6:d6:1a:84:
                    f2:1f:8c:1d:90:32:27:41:e0:ee:f2:07:ee:c7:4b:
                    2b:92:f1:e2:bf:63:02:44:e5:31:0c:dc:f1:f8:f3:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:8E:F5:02:BB:6E:AE:8C:34:48:FC:18:37:03:1A:51:6E:99:C8
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39362e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:de:fb:35:5b:94:f4:c1:62:73:92:d4:1e:76:cd:dc:49:
         34:f2:87:fe:f8:84:4e:12:fd:b7:57:73:76:65:45:a3:8b:68:
         0c:68:35:eb:08:e5:c6:5c:5d:39:95:a0:48:62:87:0b:3e:dd:
         46:64:b8:50:24:ec:10:12:b5:44:6c:14:91:94:39:83:3f:48:
         fb:96:65:b0:35:a6:50:b8:c0:3b:3b:e3:7f:c2:e1:3d:e3:3c:
         24:d5:7f:86:a1:61:72:f0:cb:b4:2a:d2:35:9e:a4:3a:a0:fc:
         4f:cf:8c:90:a8:d5:78:6e:ee:d1:78:c6:ad:7e:92:8f:e3:9a:
         47:75:70:04:2c:98:c8:0f:73:75:ee:d3:88:41:6a:a0:90:65:
         40:f9:cc:d7:66:0a:a5:36:df:09:3e:bc:8c:2a:ec:c1:bc:77:
         84:07:4d:f6:62:93:82:3a:27:f9:eb:70:fa:9e:98:d7:4f:1d:
         d8:05:d1:c0:58:2c:d3:f1:fc:fb:d5:89:8c:8f:99:1c:7d:02:
         3b:38:c8:75:e4:64:d6:00:d3:79:f4:6b:39:32:d9:57:12:f9:
         46:69:fd:1b:b4:ac:6e:db:98:8c:4a:4d:90:4d:24:28:22:f4:
         d7:40:18:23:87:c4:3c:a9:c7:29:33:a8:c9:f5:c7:5f:4c:c6:
         4c:ae:b4:b5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbhnJmorvvCZ1mtJiaZdXRM5iHoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIxQzFCN0I4MTgzNjAwNUI0NTVDNEZGMjZEREFBMUZC
M0E2NzhFNTAeFw0yNjAxMDYxOTMxMTJaFw0yNzAxMDUxOTM2MTJaMDMxMTAvBgNV
BAMTKDJDQUE4RUY1MDJCQjZFQUU4QzM0NDhGQzE4MzcwMzFBNTE2RTk5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdg5ION5gSw4ieYRkExEX2QbT8
ZUJ3x5eNtfHs1cQgX1tLy2SSP7BrhIgqSAWH/TraZzJxPOknhZ7PkHWsJdhdhG5a
4xQJfC/DBvzUUBy+Demgn9YY/2GtTT7ilYM8GwaPL9FveHvAI556iNnozf+Yc0qM
bHIqgJRUuCA5KnEUdJlE+Lk7ltIhkMEC1oquLF77uy8Yqsd6Od688H5LK8yb/xjz
T+xKO19Y6Rxfr72Yd4CU/OayOhYVixd2FjpjzvOpmhe7NT3SXOR7R2Jhiqh1Y5BD
zslOvaMNBjG2ptYahPIfjB2QMidB4O7yB+7HSyuS8eK/YwJE5TEM3PH48wnNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULKqO9QK7bq6MNEj8GDcDGlFumcgwHwYDVR0j
BBgwFoAUKxwbe4GDYAW0VcT/Jt2qH7OmeOUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRkM2MzIxMUE4RjlDNkZGNTY3OTcyRTkxNEI4NjZCN0U0
QkQ2RjlFNTYxMjU5NzQyMEVFNzBCNjFBNEM3MjNGLzAvMkIxQzFCN0I4MTgzNjAw
NUI0NTVDNEZGMjZEREFBMUZCM0E2NzhFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjFDMUI3QjgxODM2MDA1QjQ1
NUM0RkYyNkREQUExRkIzQTY3OEU1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0ZDNjMyMTFBOEY5QzZGRjU2Nzk3MkU5MTRCODY2QjdFNEJENkY5RTU2
MTI1OTc0MjBFRTcwQjYxQTRDNzIzRi8wLzMxMzQzODJlMzEzMDMyMmUzOTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJRmYDAN
BgkqhkiG9w0BAQsFAAOCAQEAAb/e+zVblPTBYnOS1B52zdxJNPKH/viEThL9t1dz
dmVFo4toDGg16wjlxlxdOZWgSGKHCz7dRmS4UCTsEBK1RGwUkZQ5gz9I+5ZlsDWm
ULjAOzvjf8LhPeM8JNV/hqFhcvDLtCrSNZ6kOqD8T8+MkKjVeG7u0XjGrX6Sj+Oa
R3VwBCyYyA9zde7TiEFqoJBlQPnM12YKpTbfCT68jCrswbx3hAdN9mKTgjon+etw
+p6Y108d2AXRwFgs0/H8+9WJjI+ZHH0COzjIdeRk1gDTefRrOTLZVxL5Rmn9G7Ss
btuYjEpNkE0kKCL010AYI4fEPKnHKTOoyfXHX0zGTK60tQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:41:08 2026 by rpki-client