This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa
File:                     3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa (raw, json)
Hash identifier:          hLh7yFXhpwB37nfKQjUVig/jK8/NhQt0YZ97HI9O+4E=
Subject key identifier:   E2:AA:23:4B:75:B9:F1:A4:E0:1A:B8:D3:C6:9C:55:2A:38:4B:35:8E
Certificate issuer:       /CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
Certificate serial:       1E98EED00FCD54A86E1223E400A2463C32FF0E15
Authority key identifier: E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa
Signing time:             Tue 06 Jan 2026 18:58:21 +0000
ROA not before:           Tue 06 Jan 2026 18:53:21 +0000
ROA not after:            Tue 05 Jan 2027 18:58:21 +0000
asID:                     273054
IP address blocks:        185.114.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:ee:d0:0f:cd:54:a8:6e:12:23:e4:00:a2:46:3c:32:ff:0e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
        Validity
            Not Before: Jan  6 18:53:21 2026 GMT
            Not After : Jan  5 18:58:21 2027 GMT
        Subject: CN=E2AA234B75B9F1A4E01AB8D3C69C552A384B358E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:ca:5c:78:0f:35:72:f8:4e:31:85:45:41:
                    01:24:fb:9f:06:91:98:92:c7:d3:1e:a0:0d:05:d2:
                    42:94:db:49:96:93:5d:fe:81:27:3a:a2:fc:2e:05:
                    99:5f:c2:c0:1e:54:72:39:56:32:48:8a:74:6c:9f:
                    8a:f5:78:bd:88:85:ad:a3:87:7e:b4:5f:08:ca:a2:
                    c1:e7:e5:26:80:fc:98:97:14:80:2d:cc:77:24:f4:
                    83:8c:e7:27:a0:36:a2:5a:72:b4:4e:f0:e9:06:e1:
                    8a:4b:ca:96:42:94:98:56:c0:45:99:77:06:23:c4:
                    9f:7c:f4:3f:d7:42:55:c3:0a:fa:15:e1:5a:8a:1a:
                    5f:f0:60:b9:d4:a9:1a:60:4d:5e:1e:a7:de:86:2a:
                    1f:ad:ce:ae:0d:ef:32:01:8f:ba:38:58:97:a6:f0:
                    9c:e2:03:5d:9c:1a:b2:4d:e7:79:83:0d:68:a5:9c:
                    12:39:13:44:3a:f6:62:39:10:46:26:6d:fa:90:d4:
                    48:86:14:ba:a7:17:9a:a8:67:03:a1:32:8e:1f:3e:
                    7e:25:49:c0:02:94:3c:fc:d3:2a:3b:70:9c:49:fc:
                    1a:ec:3a:f0:ab:26:82:c0:b3:ff:63:d1:af:8f:1d:
                    34:59:66:70:d3:27:0f:c5:d4:a9:1f:4e:e3:68:62:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:23:4B:75:B9:F1:A4:E0:1A:B8:D3:C6:9C:55:2A:38:4B:35:8E
            X509v3 Authority Key Identifier:
                keyid:E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/3138352e3131342e35322e302f32322d3234203d3e20323733303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:d3:b6:9f:16:80:cf:0b:4d:5b:83:24:57:a4:44:c6:b3:
         60:a0:81:d5:b4:61:85:d0:30:f2:0d:5d:87:45:cc:5f:28:f2:
         0a:5a:db:6c:ff:7c:34:a2:92:8f:6b:95:5d:f2:32:57:09:b7:
         c4:22:06:1e:bb:c0:81:03:1c:a5:17:f2:86:56:3c:e3:53:b6:
         08:f5:b1:a1:05:0e:1a:ab:fb:ac:de:94:67:0d:3e:24:eb:e6:
         d7:81:a6:ac:0b:95:78:4b:4a:64:3e:c0:32:7c:23:95:be:88:
         a9:bd:56:3b:1b:5e:de:9a:29:a8:87:15:e4:06:db:e8:12:fc:
         74:4a:35:d5:f5:c1:ad:b1:52:ed:89:85:f2:fd:be:80:d4:65:
         d3:72:90:e7:05:a5:30:10:7e:0b:67:7d:ab:34:31:e9:83:38:
         61:21:e3:77:25:6c:52:45:e8:0c:89:97:24:1e:18:8b:54:3d:
         d8:f8:69:00:b7:87:f1:62:20:a2:c8:37:45:2e:e9:78:6b:db:
         76:22:c7:62:79:91:6e:bb:82:ba:9c:8d:ac:8b:5c:26:1b:cd:
         7c:9b:d1:0a:e2:2c:98:eb:48:17:7e:77:54:75:d6:2a:bc:6c:
         74:2a:7c:2f:22:a5:e0:da:e1:b5:0e:2c:08:ae:67:ec:d4:88:
         97:24:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:23 2026 by rpki-client