This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36362e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e36362e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          KhdygnFpi2CHsQDqOEUzYdSDWOKaATKHqez6oQUHBXM=
Subject key identifier:   6A:5E:1C:C9:FE:96:71:F4:F7:60:FE:28:A0:B1:DA:56:BF:97:43:75
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       53C421D770A9DE887820D6F54C8B9863855687F1
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36362e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 06 Jan 2026 19:14:53 +0000
ROA not before:           Tue 06 Jan 2026 19:09:53 +0000
ROA not after:            Tue 05 Jan 2027 19:14:53 +0000
asID:                     22011
IP address blocks:        148.243.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:21:d7:70:a9:de:88:78:20:d6:f5:4c:8b:98:63:85:56:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:53 2026 GMT
            Not After : Jan  5 19:14:53 2027 GMT
        Subject: CN=6A5E1CC9FE9671F4F760FE28A0B1DA56BF974375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:c7:35:40:61:57:52:66:d7:9a:d3:6e:c0:
                    81:34:de:aa:f6:c7:20:c3:f3:8b:87:91:16:09:8a:
                    24:c3:db:53:76:16:bc:b7:23:c4:bd:9f:bf:c6:b5:
                    67:f1:e6:fd:99:5a:3a:d4:1c:1b:f1:f8:96:2f:e0:
                    38:31:89:18:51:71:e8:3a:ae:13:b9:04:34:c0:d3:
                    ee:26:fc:fe:fe:65:14:1e:bb:a0:94:94:00:e0:af:
                    20:0b:60:2d:6d:cd:62:71:66:aa:47:7a:29:ca:a7:
                    90:86:12:b8:bb:c9:1b:9b:84:0a:e4:0e:38:d6:26:
                    6c:f9:1f:c3:71:04:1c:e8:7f:7d:91:05:50:30:db:
                    2b:bf:1b:b2:1f:06:fc:98:42:67:41:a3:26:c9:08:
                    43:9a:99:24:95:35:bf:b4:61:23:b0:57:ee:d4:47:
                    fa:cc:b1:a7:f3:c1:a1:a1:70:7d:5b:47:07:3b:cc:
                    f2:c9:97:69:bd:30:4f:13:30:b3:be:c4:a5:d0:f8:
                    d4:0f:39:fb:56:70:26:89:43:04:e3:7b:34:e6:71:
                    05:4b:59:2e:d4:2d:8b:96:1c:a2:8d:a7:f0:56:1b:
                    2e:b1:a2:38:75:d7:80:e2:87:ae:81:f3:41:b3:25:
                    a5:64:20:a0:08:cb:36:83:e7:2e:1f:86:6c:f1:ba:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5E:1C:C9:FE:96:71:F4:F7:60:FE:28:A0:B1:DA:56:BF:97:43:75
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36362e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:3c:01:63:03:c6:95:31:7f:e0:20:f9:af:99:62:7c:1c:
         e3:ab:b5:ad:e7:3b:72:59:d2:88:ce:66:14:8e:80:2d:ba:84:
         2e:33:99:dc:ae:51:f0:46:88:2b:0b:cb:f0:4c:ea:bb:aa:58:
         08:56:ac:0c:3a:56:a3:fe:5c:3f:eb:d4:65:68:3e:a3:7d:d4:
         0d:07:6e:8b:54:4e:2a:09:e6:9a:09:8b:2f:ff:24:2f:dd:e6:
         77:15:41:58:23:68:34:86:f6:3c:cc:08:48:66:45:92:bf:06:
         b7:b1:40:3e:be:cf:10:f2:7a:13:80:05:c1:ad:df:ac:b5:70:
         ea:e2:d8:0a:aa:c8:24:74:f5:04:4d:04:a3:a8:b3:64:7c:6a:
         a3:5d:dd:4c:ef:89:94:64:ed:1f:99:fe:8d:ea:8c:13:64:99:
         4f:4b:e6:20:c0:dd:f8:e0:aa:df:08:40:7c:be:60:84:5e:58:
         9e:22:93:5d:f7:00:8b:50:10:41:ad:8b:02:cd:62:ea:53:1a:
         62:f4:16:5d:de:8d:ab:e8:e7:40:69:1d:50:c6:65:1c:73:35:
         b6:29:a8:ea:29:ef:1c:1e:ac:47:3d:15:55:2c:6d:be:3c:85:
         52:b8:b2:b1:a3:79:70:83:2d:99:84:6b:73:58:18:bc:38:1c:
         53:7c:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:43 2026 by rpki-client