This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa
File:                     3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa (raw, json)
Hash identifier:          ybbVES+tMVoBU5Lx/MJXOe9LbVkt/r+PhCxRpkhvc7k=
Subject key identifier:   2E:A1:D7:5F:91:53:FB:9B:AC:6A:AF:AA:78:FC:87:84:24:0E:F2:B2
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       5EDB9C84B74C1D693BD1834F24DAD374F969E2AF
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa
Signing time:             Tue 06 Jan 2026 19:14:52 +0000
ROA not before:           Tue 06 Jan 2026 19:09:52 +0000
ROA not after:            Tue 05 Jan 2027 19:14:52 +0000
asID:                     28509
IP address blocks:        148.245.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:db:9c:84:b7:4c:1d:69:3b:d1:83:4f:24:da:d3:74:f9:69:e2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:52 2026 GMT
            Not After : Jan  5 19:14:52 2027 GMT
        Subject: CN=2EA1D75F9153FB9BAC6AAFAA78FC8784240EF2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:69:f7:af:99:42:f4:6d:0f:86:5d:df:86:
                    0f:6d:f6:54:ff:48:4c:93:94:59:f1:9a:9d:01:81:
                    0d:eb:c6:61:1b:0d:6b:19:72:eb:7e:1b:a2:6b:d7:
                    cb:3d:ae:0c:9e:27:93:56:8c:fb:88:3b:77:8b:75:
                    59:d5:73:a2:49:4b:95:20:89:89:b6:af:55:bb:1e:
                    f6:e8:51:af:e7:3b:09:85:53:85:48:a2:23:ea:f6:
                    50:33:d5:38:d8:14:3e:62:4f:8a:0c:0a:3c:8d:d5:
                    b0:3e:ed:e8:d5:a2:23:24:01:10:33:ec:a0:8a:d3:
                    40:74:2a:16:d8:83:1a:43:4d:47:01:c2:8d:a1:07:
                    28:62:be:b4:4d:c9:ec:17:16:a0:27:3f:e4:32:80:
                    b3:22:2e:98:45:00:c0:b2:d7:16:2e:d4:65:e4:95:
                    ab:65:7f:33:b3:d0:91:e6:6e:de:2b:27:34:a5:fc:
                    32:32:3d:7c:dc:c5:b2:cf:e7:75:ef:3b:eb:54:50:
                    84:2b:d2:83:5d:d3:b4:a4:f2:bf:dd:7d:4e:7d:b7:
                    03:37:e5:53:f6:89:ab:8a:e1:ac:13:f5:bd:2f:ee:
                    ca:99:39:ac:f5:0d:16:d6:84:cb:b5:8f:c3:14:ba:
                    71:ec:33:c5:6d:82:bb:ce:37:5a:84:bb:22:e5:d3:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:D7:5F:91:53:FB:9B:AC:6A:AF:AA:78:FC:87:84:24:0E:F2:B2
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:51:63:6f:70:03:78:a4:32:42:a3:35:2e:11:eb:5b:b2:db:
         97:f8:55:4b:e4:7f:fb:4a:44:e3:32:8e:3b:c1:33:a8:69:62:
         a1:6c:49:f7:b1:64:a5:00:c1:27:ed:64:3c:8f:84:4c:e3:7e:
         69:95:8a:d9:e6:62:45:98:b2:ce:41:e5:d7:04:55:0c:18:d4:
         13:bc:56:20:da:6d:7d:a8:a7:1a:29:e6:ca:35:95:27:e2:0f:
         40:65:74:1a:ab:98:54:c3:3f:96:0d:d6:ef:ce:04:0e:c5:99:
         a7:ad:86:91:bf:48:e5:09:be:9c:b8:c3:9e:48:04:af:2b:75:
         0c:8d:7d:ef:a8:0d:19:0a:23:79:f2:93:25:a4:fc:a8:96:cd:
         1d:d2:44:a6:97:ac:3d:76:39:e7:d9:58:e3:05:a2:bc:0b:70:
         01:41:94:00:c3:da:b8:59:b6:25:8f:de:c5:50:0d:cd:e8:30:
         4f:7b:83:0b:bb:95:7b:0b:6c:08:4a:32:a1:44:13:c2:fa:d1:
         aa:9e:1b:43:ec:28:5f:e1:6f:96:1c:16:96:ae:73:1f:69:0c:
         94:ab:82:1a:eb:34:f6:8d:77:45:28:f5:02:07:24:83:f2:80:
         2c:ae:63:3a:99:8f:40:2c:c0:a9:97:e4:51:a8:e0:94:5c:96:
         f8:fd:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:09 2026 by rpki-client