This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa
File:                     3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa (raw, json)
Hash identifier:          sIOThUcQTanpBtFFWyJfRelgsmR3o4AWTlypmW/lm64=
Subject key identifier:   E5:A6:35:B5:0B:91:C5:FB:F9:F6:EE:EE:42:F4:56:97:A6:FF:96:A2
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       5065BA50C282950E2CA049A7F434FCCB43877330
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa
Signing time:             Tue 27 Jan 2026 20:27:55 +0000
ROA not before:           Tue 27 Jan 2026 20:22:55 +0000
ROA not after:            Tue 26 Jan 2027 20:27:55 +0000
asID:                     61451
IP address blocks:        148.222.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:65:ba:50:c2:82:95:0e:2c:a0:49:a7:f4:34:fc:cb:43:87:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Jan 27 20:22:55 2026 GMT
            Not After : Jan 26 20:27:55 2027 GMT
        Subject: CN=E5A635B50B91C5FBF9F6EEEE42F45697A6FF96A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:f6:91:8d:39:0a:0e:48:be:45:86:0d:fa:
                    9d:f2:94:16:a7:a5:3f:2e:ce:bc:b1:cf:8e:e5:4a:
                    23:9a:84:1a:62:52:66:e6:3e:f5:68:50:c2:42:92:
                    53:09:26:e5:c1:b3:de:c7:5b:6c:2f:0e:2e:95:d8:
                    0b:ef:24:d3:4c:1a:64:b5:b1:df:37:a0:e5:b5:10:
                    ad:2a:be:82:2e:b2:4c:a2:61:24:49:42:84:60:8d:
                    9e:f6:22:cb:66:a3:18:f3:62:c9:d2:41:de:39:46:
                    e7:6e:67:1e:23:0c:ee:76:c5:b2:6a:e4:68:0c:bd:
                    91:14:d5:12:b2:d5:94:0c:fa:87:a9:3b:c3:dc:ce:
                    33:48:e0:0b:79:d2:f7:5f:e6:e0:2c:fb:9c:f6:cd:
                    19:9d:ea:b7:51:b2:0a:90:fc:96:90:7d:dd:cd:d2:
                    a1:f5:d0:23:2c:61:55:68:b0:ac:09:91:d3:58:14:
                    42:a5:14:aa:dd:04:e4:3e:85:d2:7f:c7:7b:d8:75:
                    92:e5:c6:cb:3f:1f:65:6f:a5:4b:4a:f0:fb:79:e0:
                    6d:c9:00:c6:f1:f6:83:ba:52:94:45:4a:de:24:20:
                    7a:b8:14:bf:eb:8f:fb:2d:bd:9b:d4:bb:e5:93:52:
                    46:7a:43:97:b3:52:28:75:df:3a:e3:f9:5b:cf:57:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A6:35:B5:0B:91:C5:FB:F9:F6:EE:EE:42:F4:56:97:A6:FF:96:A2
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3134342e302f32312d3234203d3e203631343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:92:4d:39:18:5c:98:c6:86:e3:70:96:2b:97:6f:17:0f:71:
         e9:67:ef:a1:65:88:df:48:29:00:72:74:aa:34:15:81:0e:ad:
         8a:e1:b4:39:4a:aa:43:37:01:be:a6:76:80:9c:42:a6:af:d7:
         6a:30:80:6a:c2:17:c5:79:aa:c5:17:4c:0a:53:c8:ba:1d:ab:
         f2:7a:f5:eb:3b:a2:2c:c2:6e:76:7f:6a:90:b8:7f:9e:85:72:
         19:b5:8a:10:a9:16:bd:25:27:82:e8:ff:72:63:98:99:c0:8b:
         0d:c4:66:96:c9:e4:a4:27:aa:17:f8:8a:e4:4f:02:bd:73:e8:
         ae:7e:df:2a:68:b4:0f:f1:e8:15:38:d1:69:60:18:6e:06:26:
         c8:10:60:db:d0:80:15:3d:bb:c1:45:13:75:5f:0e:50:50:92:
         7e:d9:ea:ae:04:4b:4e:2d:c8:ee:fb:0d:e0:ee:31:5f:87:b3:
         a1:67:6b:08:f9:8e:78:39:2e:84:38:c3:26:55:c6:f5:52:5d:
         47:27:fb:1c:79:90:cb:78:5f:dd:7f:64:26:25:9a:40:36:51:
         a9:f2:9f:9d:19:5a:e0:a4:05:fa:f9:3f:20:80:05:b1:44:ef:
         0f:24:fd:52:8f:b7:13:01:c0:e4:f7:e1:2d:73:b2:8c:9a:d2:
         79:bc:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:02:50 2026 by rpki-client