This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa
File:                     3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa (raw, json)
Hash identifier:          7/jsw+S2M00NxAjMC59HlVXoKBElTbu0PvCjbE+Phkw=
Subject key identifier:   5A:37:21:01:B5:B4:CF:CE:F6:21:F3:56:1A:ED:C6:CA:CF:06:08:CA
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       2BB2617C735014E0754F26A49F8187C78DF915B5
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa
Signing time:             Tue 06 Jan 2026 19:14:42 +0000
ROA not before:           Tue 06 Jan 2026 19:09:42 +0000
ROA not after:            Tue 05 Jan 2027 19:14:42 +0000
asID:                     265786
IP address blocks:        192.141.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b2:61:7c:73:50:14:e0:75:4f:26:a4:9f:81:87:c7:8d:f9:15:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Jan  6 19:09:42 2026 GMT
            Not After : Jan  5 19:14:42 2027 GMT
        Subject: CN=5A372101B5B4CFCEF621F3561AEDC6CACF0608CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:58:7f:26:c3:40:fe:bd:bf:68:1d:b4:aa:
                    e8:0a:57:76:45:d1:7c:68:b8:a8:b7:f8:fe:27:8b:
                    4f:df:2b:b5:5d:36:7f:e1:d3:fa:60:ee:32:bc:cf:
                    2e:b2:fd:12:30:ef:21:e5:d0:d7:05:a6:90:ca:58:
                    eb:24:34:87:1b:20:5e:e6:f5:7b:91:9e:9d:9e:46:
                    02:6f:fe:7d:88:d1:13:d8:c8:94:e8:ce:58:69:8d:
                    e1:e1:80:3e:95:a6:df:9b:44:5f:83:1c:0e:1e:59:
                    f6:3d:e0:d8:98:e7:2b:1b:6d:4e:c4:11:cf:2e:28:
                    05:bd:f0:62:4f:90:3b:fb:72:18:56:a4:db:40:1e:
                    89:72:77:73:be:30:71:90:c9:eb:90:0d:91:2d:2c:
                    7d:1d:9c:84:30:fa:9b:e0:3a:5b:cb:43:3c:ec:3b:
                    02:2b:03:b5:4d:aa:b2:4e:9f:42:ab:0f:e9:5f:c7:
                    34:e5:cc:1c:e0:35:91:2e:58:ef:be:a4:cc:51:6c:
                    f7:f9:2f:08:3f:4f:52:6e:f8:7c:8b:56:80:f9:e0:
                    ee:71:53:8c:42:39:42:bf:80:cc:33:0e:88:ed:51:
                    ac:fd:94:43:2f:ac:88:62:2a:a2:9b:45:54:73:0d:
                    a3:aa:ea:82:84:ef:28:90:62:84:d2:a2:2e:c6:d9:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:37:21:01:B5:B4:CF:CE:F6:21:F3:56:1A:ED:C6:CA:CF:06:08:CA
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:93:24:61:b2:4c:4a:93:7c:82:d0:2c:dc:0d:0f:8a:79:
         57:2f:f2:e7:dd:16:cd:74:36:15:e5:2a:40:fa:b3:ac:e9:a1:
         8d:b2:b3:7e:fc:e9:d8:72:1a:2d:39:aa:91:7c:92:83:67:39:
         30:ba:b0:1d:a0:a3:8b:36:24:04:5c:2a:98:8c:b8:78:f2:3d:
         fc:c1:5c:89:11:0c:58:16:d6:ff:ce:7d:f7:90:2d:81:67:c3:
         28:77:7a:ef:4b:ed:00:da:32:02:c8:c5:57:00:e5:b2:16:d4:
         e2:5e:b7:10:0b:02:7f:d1:a0:ac:a6:15:e6:98:3f:3d:1b:96:
         14:08:ff:83:2a:43:6a:be:16:ed:40:5c:ec:66:8a:4e:9d:27:
         57:79:ab:29:35:fe:ac:02:c4:ed:04:6d:f0:17:9c:04:c6:cb:
         37:cd:3d:69:1e:dc:c8:8f:ba:07:f7:e7:01:b9:1e:fe:f1:7a:
         38:c4:bc:64:22:69:84:d0:97:10:96:a6:dc:85:e5:51:fe:9f:
         c7:a1:d2:d1:3f:ca:58:36:e0:58:78:64:c7:c7:c1:b2:69:33:
         93:24:aa:09:dd:85:a8:b5:5f:a5:e6:ec:93:4e:7c:31:a3:1c:
         a0:3d:13:db:14:96:a7:15:cd:87:f3:7d:26:64:4e:a2:1b:c9:
         2f:bd:a1:1b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUK7JhfHNQFOB1Tyakn4GHx435FbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRCNkUwRUYyMUE0MTQ0ODc4OEZEN0M2OTMzNEYyQkFF
RkNFNjY4OTAeFw0yNjAxMDYxOTA5NDJaFw0yNzAxMDUxOTE0NDJaMDMxMTAvBgNV
BAMTKDVBMzcyMTAxQjVCNENGQ0VGNjIxRjM1NjFBRURDNkNBQ0YwNjA4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DVh/JsNA/r2/aB20qugKV3ZF
0XxouKi3+P4ni0/fK7VdNn/h0/pg7jK8zy6y/RIw7yHl0NcFppDKWOskNIcbIF7m
9XuRnp2eRgJv/n2I0RPYyJTozlhpjeHhgD6Vpt+bRF+DHA4eWfY94NiY5ysbbU7E
Ec8uKAW98GJPkDv7chhWpNtAHolyd3O+MHGQyeuQDZEtLH0dnIQw+pvgOlvLQzzs
OwIrA7VNqrJOn0KrD+lfxzTlzBzgNZEuWO++pMxRbPf5Lwg/T1Ju+HyLVoD54O5x
U4xCOUK/gMwzDojtUaz9lEMvrIhiKqKbRVRzDaOq6oKE7yiQYoTSoi7G2ablAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUWjchAbW0z872IfNWGu3Gys8GCMowHwYDVR0j
BBgwFoAUhLbg7yGkFEh4j9fGkzTyuu/OZokwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzM5QkYyQkZDMDcxQjlBOTk1RTA3NzdENjBCRjBBNkI2
RjFDOTZGM0VEMUM3QjMwMkE1Mzk5MTAzQUM4REJFLzAvODRCNkUwRUYyMUE0MTQ0
ODc4OEZEN0M2OTMzNEYyQkFFRkNFNjY4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEI2RTBFRjIxQTQxNDQ4Nzg4
RkQ3QzY5MzM0RjJCQUVGQ0U2Njg5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjczOUJGMkJGQzA3MUI5QTk5NUUwNzc3RDYwQkYwQTZCNkYxQzk2RjNF
RDFDN0IzMDJBNTM5OTEwM0FDOERCRS8wLzMxMzkzMjJlMzEzNDMxMmUzMTM0Mzgy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzNzM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALA
jZQwDQYJKoZIhvcNAQELBQADggEBAJSpkyRhskxKk3yC0CzcDQ+KeVcv8ufdFs10
NhXlKkD6s6zpoY2ys3786dhyGi05qpF8koNnOTC6sB2go4s2JARcKpiMuHjyPfzB
XIkRDFgW1v/OffeQLYFnwyh3eu9L7QDaMgLIxVcA5bIW1OJetxALAn/RoKymFeaY
Pz0blhQI/4MqQ2q+Fu1AXOxmik6dJ1d5qyk1/qwCxO0EbfAXnATGyzfNPWke3MiP
ugf35wG5Hv7xejjEvGQiaYTQlxCWptyF5VH+n8eh0tE/ylg24Fh4ZMfHwbJpM5Mk
qgndhai1X6Xm7JNOfDGjHKA9E9sUlqcVzYfzfSZkTqIbyS+9oRs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:12 2026 by rpki-client