This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          ABg5vrB0OywGCRVnj1LqB3b2gbQK7JQWwZtMexhYOQA=
Subject key identifier:   9B:17:3E:18:86:D7:B6:B7:E6:60:19:CC:12:2B:5D:57:BC:27:80:89
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       3EB55A683D81B34E2F46CEA5D6DDA61C8DE20886
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 06 Jan 2026 19:14:41 +0000
ROA not before:           Tue 06 Jan 2026 19:09:41 +0000
ROA not after:            Tue 05 Jan 2027 19:14:41 +0000
asID:                     265786
IP address blocks:        192.141.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b5:5a:68:3d:81:b3:4e:2f:46:ce:a5:d6:dd:a6:1c:8d:e2:08:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Jan  6 19:09:41 2026 GMT
            Not After : Jan  5 19:14:41 2027 GMT
        Subject: CN=9B173E1886D7B6B7E66019CC122B5D57BC278089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:5b:f8:1b:51:49:68:e5:80:0d:2b:f8:fd:
                    c1:1f:cf:5c:55:0c:c3:91:61:e8:d9:88:92:0d:ff:
                    af:bd:7f:88:f5:ad:74:a7:dc:ac:5c:de:39:f7:10:
                    e1:f1:31:63:72:b9:9c:1e:6c:89:ec:43:e5:bd:c8:
                    ef:47:c7:99:a3:ba:a1:54:21:96:9b:9e:d5:b0:70:
                    68:17:90:7f:50:d3:87:8f:96:37:f2:1d:e0:e5:94:
                    35:d7:ad:11:7d:8a:31:13:06:2b:7d:b7:42:86:1b:
                    a1:2c:30:04:86:56:14:28:d5:e4:87:00:ba:57:66:
                    e1:35:37:a8:31:19:d0:9b:ec:07:f6:48:5f:04:4e:
                    03:ba:44:bb:8e:a7:dc:ce:4f:a3:b0:9a:01:22:20:
                    d6:12:4c:4f:7d:ba:ea:d1:d8:d7:32:37:37:5b:c3:
                    00:75:eb:61:67:98:dd:2b:5a:c2:de:8b:07:d5:cb:
                    2b:7d:67:3f:18:cb:aa:0b:1e:2e:4e:13:24:2e:ed:
                    87:e0:c2:24:6a:d0:93:02:26:43:c3:4d:fb:dc:e4:
                    d2:b0:6f:af:d0:84:6b:f7:d9:87:a1:59:90:6a:15:
                    38:11:f4:ac:f8:a1:63:0f:b7:b6:d1:7a:d0:60:25:
                    3c:1a:9b:30:3d:15:70:d8:30:29:d7:26:e7:28:d2:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:3E:18:86:D7:B6:B7:E6:60:19:CC:12:2B:5D:57:BC:27:80:89
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:62:9f:5a:22:de:6c:90:8c:94:3a:92:07:a3:7e:dc:95:
         c4:6e:58:07:0d:31:a4:66:92:93:4a:82:da:aa:8b:a0:ab:ff:
         00:cf:d0:bc:35:9f:d5:f8:92:57:b5:65:ef:b3:90:d8:22:e2:
         fc:3f:0f:58:9c:43:2b:ed:a6:5d:a5:01:10:5c:31:aa:f8:c6:
         73:60:df:ff:47:6a:6a:f2:4c:10:bd:f5:b7:08:72:46:b1:b9:
         3f:e2:8a:d2:37:44:1f:f4:38:e2:11:af:52:17:42:cc:d2:a2:
         e5:f6:30:80:b4:dd:e1:9a:da:b7:5f:da:34:a1:55:82:03:63:
         46:31:8b:14:9c:47:44:4e:5b:3e:f2:d2:f6:28:f1:c9:20:5c:
         d9:af:ec:73:49:56:a7:6d:d4:ce:69:65:16:8b:d3:30:74:3c:
         26:b7:a7:01:62:53:10:be:61:45:70:b0:19:fa:eb:20:96:fa:
         09:5b:b7:07:68:eb:34:2c:ed:c6:a8:99:fc:bb:5f:62:ca:98:
         e2:bd:5b:ea:fb:13:aa:bd:6e:5f:a2:52:3e:7c:9e:c4:63:53:
         64:4d:92:a5:a2:4d:bf:3f:cb:04:5f:a9:47:c9:52:a2:0d:84:
         9f:bb:71:0c:f3:40:d7:67:44:28:87:b6:2e:f8:a7:54:b8:b9:
         f8:df:6f:4b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUPrVaaD2Bs04vRs6l1t2mHI3iCIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRCNkUwRUYyMUE0MTQ0ODc4OEZEN0M2OTMzNEYyQkFF
RkNFNjY4OTAeFw0yNjAxMDYxOTA5NDFaFw0yNzAxMDUxOTE0NDFaMDMxMTAvBgNV
BAMTKDlCMTczRTE4ODZEN0I2QjdFNjYwMTlDQzEyMkI1RDU3QkMyNzgwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLlv4G1FJaOWADSv4/cEfz1xV
DMORYejZiJIN/6+9f4j1rXSn3Kxc3jn3EOHxMWNyuZwebInsQ+W9yO9Hx5mjuqFU
IZabntWwcGgXkH9Q04ePljfyHeDllDXXrRF9ijETBit9t0KGG6EsMASGVhQo1eSH
ALpXZuE1N6gxGdCb7Af2SF8ETgO6RLuOp9zOT6OwmgEiINYSTE99uurR2NcyNzdb
wwB162FnmN0rWsLeiwfVyyt9Zz8Yy6oLHi5OEyQu7YfgwiRq0JMCJkPDTfvc5NKw
b6/QhGv32YehWZBqFTgR9Kz4oWMPt7bRetBgJTwamzA9FXDYMCnXJuco0oEfAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUmxc+GIbXtrfmYBnMEitdV7wngIkwHwYDVR0j
BBgwFoAUhLbg7yGkFEh4j9fGkzTyuu/OZokwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzM5QkYyQkZDMDcxQjlBOTk1RTA3NzdENjBCRjBBNkI2
RjFDOTZGM0VEMUM3QjMwMkE1Mzk5MTAzQUM4REJFLzAvODRCNkUwRUYyMUE0MTQ0
ODc4OEZEN0M2OTMzNEYyQkFFRkNFNjY4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NEI2RTBFRjIxQTQxNDQ4Nzg4
RkQ3QzY5MzM0RjJCQUVGQ0U2Njg5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjczOUJGMkJGQzA3MUI5QTk5NUUwNzc3RDYwQkYwQTZCNkYxQzk2RjNF
RDFDN0IzMDJBNTM5OTEwM0FDOERCRS8wLzMxMzkzMjJlMzEzNDMxMmUzMTM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM4MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA
jZQwDQYJKoZIhvcNAQELBQADggEBAFrDYp9aIt5skIyUOpIHo37clcRuWAcNMaRm
kpNKgtqqi6Cr/wDP0Lw1n9X4kle1Ze+zkNgi4vw/D1icQyvtpl2lARBcMar4xnNg
3/9HamryTBC99bcIckaxuT/iitI3RB/0OOIRr1IXQszSouX2MIC03eGa2rdf2jSh
VYIDY0YxixScR0ROWz7y0vYo8ckgXNmv7HNJVqdt1M5pZRaL0zB0PCa3pwFiUxC+
YUVwsBn66yCW+glbtwdo6zQs7caomfy7X2LKmOK9W+r7E6q9bl+iUj58nsRjU2RN
kqWiTb8/ywRfqUfJUqINhJ+7cQzzQNdnRCiHti74p1S4ufjfb0s=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:53 2026 by rpki-client