This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/3134332e3230382e34342e302f32322d3234203d3e20323633383039.roa
File:                     3134332e3230382e34342e302f32322d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          dPBhR7eY3J2WUYZpemsynug458/voUCau24ocJPz+54=
Subject key identifier:   2C:89:97:F1:17:F8:DA:3A:10:3B:5D:94:AD:07:DB:AB:9D:CB:52:52
Certificate issuer:       /CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4
Certificate serial:       1AB5B281AB8542DBB262D9B0B337383ADEFDB3F9
Authority key identifier: D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/3134332e3230382e34342e302f32322d3234203d3e20323633383039.roa
Signing time:             Tue 06 Jan 2026 19:40:00 +0000
ROA not before:           Tue 06 Jan 2026 19:35:00 +0000
ROA not after:            Tue 05 Jan 2027 19:40:00 +0000
asID:                     263809
IP address blocks:        143.208.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b5:b2:81:ab:85:42:db:b2:62:d9:b0:b3:37:38:3a:de:fd:b3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4
        Validity
            Not Before: Jan  6 19:35:00 2026 GMT
            Not After : Jan  5 19:40:00 2027 GMT
        Subject: CN=2C8997F117F8DA3A103B5D94AD07DBAB9DCB5252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:22:e2:7c:7f:53:a3:2d:12:41:65:f8:e6:
                    81:e1:b8:01:99:b7:be:47:86:15:e5:65:ee:22:bd:
                    13:07:3a:0e:25:77:6e:92:8f:06:1e:c9:ce:7d:ab:
                    b1:1e:5b:da:44:97:e7:5f:7d:aa:48:8c:4e:97:1d:
                    90:0f:4f:12:a2:c7:1f:91:de:f4:4a:ab:3b:ef:43:
                    8b:99:45:7f:50:41:98:1e:de:1b:64:3b:b3:7c:fd:
                    2a:dc:ca:53:7d:23:59:9b:57:5e:c2:43:83:6a:29:
                    c0:eb:45:52:51:b4:73:50:5b:ca:fd:59:45:dd:37:
                    bf:ab:24:ae:7c:8c:49:90:6c:5e:50:9f:66:58:32:
                    8e:2a:b0:0d:a1:8f:84:96:8b:a4:c8:6c:b3:fb:be:
                    be:5e:a0:ea:86:d6:06:1d:2a:b5:6c:50:a8:9a:d6:
                    8a:f0:bc:32:fe:1a:e3:99:ed:a2:29:88:0a:72:ab:
                    fd:1a:c2:6c:a0:44:39:25:91:4d:ab:5c:f6:b4:6c:
                    11:02:d0:a8:ba:cc:bf:df:3f:28:82:1d:e8:58:07:
                    1e:cf:b4:60:62:30:d0:00:21:ce:b1:f4:3c:19:4f:
                    8d:50:4b:0e:c4:b9:03:d5:f7:9b:95:bc:86:ee:d1:
                    44:75:98:10:96:79:ec:30:49:6e:69:4c:f2:02:dd:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:89:97:F1:17:F8:DA:3A:10:3B:5D:94:AD:07:DB:AB:9D:CB:52:52
            X509v3 Authority Key Identifier:
                keyid:D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/3134332e3230382e34342e302f32322d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:da:6c:87:f0:a2:63:d4:3a:4d:b4:cb:1c:73:1f:4e:53:80:
         89:cd:61:38:c4:d2:ee:ab:14:8b:91:3c:20:94:eb:b9:0f:80:
         9b:e2:af:25:53:c1:d8:a2:61:d9:35:29:a7:d1:48:7f:a8:dc:
         84:aa:c6:74:96:a2:32:79:0f:3f:fe:87:0a:62:21:03:29:4f:
         fe:6e:5a:81:f6:01:75:72:a6:b4:ce:2d:3e:18:48:e2:a3:10:
         38:bf:84:8f:ba:de:0a:dd:e8:99:88:7e:d4:4a:82:62:01:23:
         3a:7e:65:8a:27:2c:1c:f0:7e:a5:a4:92:15:9c:35:ce:2b:69:
         34:be:61:81:03:68:0e:1a:45:55:04:6a:9e:5c:dd:f8:56:92:
         53:fb:e0:1f:c4:b9:c7:c7:85:ca:b9:d5:de:a8:fb:f5:bd:1f:
         71:c6:63:83:32:e7:ec:c6:51:48:ac:07:57:e2:e3:b2:04:0f:
         f5:ce:cc:02:38:79:f0:9a:8f:7b:ad:36:9e:59:a7:49:78:2c:
         ce:a4:15:bf:6f:02:8a:83:ec:65:f0:99:6b:ad:02:40:c9:35:
         92:47:a5:5e:f9:4e:fa:51:64:16:35:fb:c7:80:7e:8c:ce:70:
         57:7b:d3:39:e0:10:55:a5:46:f4:e5:f4:a9:cd:92:b1:28:36:
         58:9d:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:41:55 2026 by rpki-client