This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37352e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37352e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          BPTRUiE6wUMVoHObX1NhaYlgTOYd3uPuFFEpcJA4i3c=
Subject key identifier:   5C:70:3A:1F:2D:5D:CF:31:3A:C4:B7:D8:4B:DB:D9:57:49:89:34:44
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       3ABBE3BD8014203B6ED1E84921C6AA8B04857BB5
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37352e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 06 Jan 2026 19:14:49 +0000
ROA not before:           Tue 06 Jan 2026 19:09:49 +0000
ROA not after:            Tue 05 Jan 2027 19:14:49 +0000
asID:                     22011
IP address blocks:        148.243.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bb:e3:bd:80:14:20:3b:6e:d1:e8:49:21:c6:aa:8b:04:85:7b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:49 2026 GMT
            Not After : Jan  5 19:14:49 2027 GMT
        Subject: CN=5C703A1F2D5DCF313AC4B7D84BDBD95749893444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:27:47:ab:1b:04:c9:4e:66:f2:60:01:b2:
                    8b:68:5e:ac:b5:f6:16:eb:7b:a0:55:f6:a3:ea:22:
                    01:72:24:f4:7b:ce:04:95:77:44:1d:56:9f:ce:9a:
                    6f:c5:27:4f:9d:cf:1e:54:ff:14:57:c7:d5:f8:5a:
                    42:e2:eb:7f:21:bb:1c:23:1d:90:b6:ce:d7:bf:f5:
                    9a:ed:18:c3:dc:4c:62:f0:ca:2d:89:41:e1:4b:68:
                    37:4e:8e:d9:82:3f:08:bd:d0:aa:7d:4f:2f:fc:a1:
                    48:be:87:58:02:0b:a1:9c:40:0e:69:35:98:f2:6d:
                    05:28:fc:c3:96:5e:7c:f6:12:3b:40:34:0f:28:ef:
                    db:8a:bb:c0:40:52:75:83:f2:c8:07:1e:29:d5:dc:
                    95:28:1f:0a:4a:89:d6:eb:02:73:d5:0e:cb:61:60:
                    27:d0:1b:36:93:8d:a7:a6:74:d8:9c:9b:28:a7:b7:
                    1b:f8:99:81:f7:1c:81:30:5c:6a:e8:b4:75:4c:2a:
                    48:98:c6:25:c5:be:1d:c2:92:d1:bb:90:2a:bd:aa:
                    34:c3:67:76:69:2b:ed:7f:33:b6:4d:56:92:c5:fa:
                    81:df:4c:2d:1f:58:dc:8b:c1:91:ba:21:76:bc:29:
                    ea:01:43:d7:bf:b7:aa:d5:44:0b:50:17:21:8c:51:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:70:3A:1F:2D:5D:CF:31:3A:C4:B7:D8:4B:DB:D9:57:49:89:34:44
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37352e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:32:a6:cf:0a:b8:f0:85:3b:11:80:c6:f1:5f:44:30:ab:b0:
         09:0e:97:f6:ca:07:a9:81:7d:0a:1e:8d:10:1d:27:28:19:0e:
         e1:e2:0f:1f:65:68:e1:6c:30:47:35:b7:86:26:00:1f:df:cd:
         b0:82:5f:3e:65:24:b0:fe:f0:cc:11:29:d5:d6:be:0a:5b:d6:
         60:15:69:06:72:79:b3:d7:df:86:83:9d:c9:86:ec:3d:07:24:
         9a:57:7c:3d:86:b9:da:14:79:83:67:f4:56:a5:85:c4:0d:15:
         73:f7:68:6b:a2:db:44:bd:f2:8c:4b:3d:1b:df:b0:ea:c8:ae:
         be:dd:2a:40:05:6e:89:dc:df:11:38:f9:08:38:98:df:dd:49:
         79:98:f3:73:a5:d6:bc:97:36:ee:ec:91:59:a6:4c:d4:df:1e:
         d1:42:88:62:6a:ff:14:0d:21:3d:8a:1a:d5:f5:ea:fc:88:e1:
         3a:f9:e8:3f:41:c9:74:ed:bb:cd:02:2b:36:ab:3f:b2:63:f7:
         76:d6:1d:00:3a:95:24:ea:f4:4d:39:7e:96:30:3a:02:78:80:
         a7:d4:cf:8f:97:2d:4a:8c:b0:7a:2e:c1:c0:67:ac:9e:17:aa:
         f0:fd:4d:a5:96:c6:61:6d:0b:aa:cf:3c:cc:ce:05:65:34:d9:
         81:79:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:50:04 2026 by rpki-client