This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa
File:                     3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa (raw, json)
Hash identifier:          +DpAbksORTScTSriBErvBnV4AH2ePw0j36QFfH02aFI=
Subject key identifier:   91:07:30:42:91:B0:56:DC:38:77:20:8B:99:1C:73:DC:81:E4:DA:4B
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       2CCE36328903F0C82E0F719DA868BE16F6A24CAA
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa
Signing time:             Tue 27 Jan 2026 20:27:55 +0000
ROA not before:           Tue 27 Jan 2026 20:22:55 +0000
ROA not after:            Tue 26 Jan 2027 20:27:55 +0000
asID:                     61451
IP address blocks:        148.222.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 02:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ce:36:32:89:03:f0:c8:2e:0f:71:9d:a8:68:be:16:f6:a2:4c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Jan 27 20:22:55 2026 GMT
            Not After : Jan 26 20:27:55 2027 GMT
        Subject: CN=9107304291B056DC3877208B991C73DC81E4DA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:e4:ab:c8:26:ef:0c:03:0b:1f:b5:3d:e4:
                    65:be:62:6f:1b:df:0b:a5:56:86:ea:31:f1:80:83:
                    50:bf:ed:ef:a8:ba:90:99:05:71:fc:ee:68:5f:c5:
                    7e:87:c4:59:e2:8e:5f:cd:ad:ce:96:d2:b2:ce:2d:
                    d9:06:80:72:00:38:cb:43:99:3f:ce:be:50:77:24:
                    78:27:72:a7:46:b5:bf:f6:00:67:8e:d4:0a:c8:4c:
                    43:96:aa:d6:e2:70:6e:71:3e:ad:20:62:6b:f0:95:
                    46:ed:88:30:41:e4:77:a6:30:18:8e:ec:dc:df:15:
                    37:b9:fa:5a:0e:88:39:8a:15:29:a2:35:fb:27:05:
                    b6:67:e7:52:dd:a9:bc:87:61:13:a1:81:9b:ac:cf:
                    bc:5e:8e:c0:f8:32:6f:09:ef:bc:2c:eb:98:d3:e6:
                    30:79:f6:e0:fc:2b:f3:ac:7f:f9:33:9f:64:1f:17:
                    3a:ba:0d:54:e4:7f:20:b0:6d:92:ae:35:3d:a3:66:
                    c8:79:96:cc:2b:5a:e9:b3:47:b9:22:52:5e:8d:5c:
                    68:49:8a:91:35:e1:0a:46:eb:c5:60:44:5b:a1:b8:
                    8d:36:c0:d1:e2:84:82:6f:38:95:d4:62:9f:43:72:
                    b2:3a:86:af:cd:95:e4:d3:78:1c:dd:5d:2d:e4:71:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:07:30:42:91:B0:56:DC:38:77:20:8B:99:1C:73:DC:81:E4:DA:4B
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135392e302f32342d3234203d3e203631343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:ce:5c:ca:94:2d:90:3c:86:b0:17:ed:a9:67:f2:06:4c:04:
         a0:80:6f:97:c7:f9:ab:e0:2b:cb:cd:2f:9b:70:97:ad:aa:08:
         61:4a:e4:4d:3b:6e:8d:c6:e4:2b:e2:fb:84:31:57:fe:e3:0f:
         f3:32:34:45:81:17:0c:bf:72:1d:07:8e:b5:d6:20:03:bb:55:
         06:6b:23:7d:44:fd:e2:94:48:66:43:9d:1e:ca:ec:8f:30:18:
         00:29:40:e4:bc:a4:52:d9:88:6c:4b:d9:db:54:78:46:f2:30:
         a8:b4:c7:10:76:55:05:cd:42:f7:07:f6:97:0b:3d:ff:ff:76:
         b9:86:0d:01:2b:3b:61:06:ef:73:21:54:e3:5b:79:64:04:d9:
         d8:bf:f9:9f:79:c9:c6:ea:70:43:e9:ff:a6:8b:87:4b:e9:ac:
         98:fd:c2:7a:e3:89:8d:5e:75:3f:cc:32:8f:ae:d1:1e:60:3c:
         ff:ef:3f:fc:84:f8:ca:1e:68:c6:12:62:50:61:fb:71:c3:b5:
         f4:9e:9e:a7:b2:dc:86:49:e2:b0:48:6a:53:9e:6d:25:13:9f:
         4e:60:ab:12:85:90:32:a8:cd:6b:e2:78:13:f5:57:3f:09:9b:
         07:26:90:60:4a:be:05:2b:7d:bd:cf:63:de:0d:95:d8:95:b3:
         44:a6:10:3c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULM42MokD8MguD3GdqGi+FvaiTKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0MjBEQTUyQzRGRUQ2NEM2NDA4MUY5NzhFODQ4NUNE
ODE2MUE4MTAeFw0yNjAxMjcyMDIyNTVaFw0yNzAxMjYyMDI3NTVaMDMxMTAvBgNV
BAMTKDkxMDczMDQyOTFCMDU2REMzODc3MjA4Qjk5MUM3M0RDODFFNERBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxOSryCbvDAMLH7U95GW+Ym8b
3wulVobqMfGAg1C/7e+oupCZBXH87mhfxX6HxFnijl/Nrc6W0rLOLdkGgHIAOMtD
mT/OvlB3JHgncqdGtb/2AGeO1ArITEOWqtbicG5xPq0gYmvwlUbtiDBB5HemMBiO
7NzfFTe5+loOiDmKFSmiNfsnBbZn51LdqbyHYROhgZusz7xejsD4Mm8J77ws65jT
5jB59uD8K/Osf/kzn2QfFzq6DVTkfyCwbZKuNT2jZsh5lswrWumzR7kiUl6NXGhJ
ipE14QpG68VgRFuhuI02wNHihIJvOJXUYp9DcrI6hq/NleTTeBzdXS3kceu/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkQcwQpGwVtw4dyCLmRxz3IHk2kswHwYDVR0j
BBgwFoAULUINpSxP7WTGQIH5eOhIXNgWGoEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUIzQzExQkY0MDI1M0Y5MDU1MTA3Q0YyQUZDMUY0OUU1
NzdCREI0OTFDRkQ3QjhBNDhGODAyRkM1ODgzQjVELzAvMkQ0MjBEQTUyQzRGRUQ2
NEM2NDA4MUY5NzhFODQ4NUNEODE2MUE4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDQyMERBNTJDNEZFRDY0QzY0
MDgxRjk3OEU4NDg1Q0Q4MTYxQTgxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFCM0MxMUJGNDAyNTNGOTA1NTEwN0NGMkFGQzFGNDlFNTc3QkRCNDkx
Q0ZEN0I4QTQ4RjgwMkZDNTg4M0I1RC8wLzMxMzQzODJlMzIzMjMyMmUzMTM1Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlN6f
MA0GCSqGSIb3DQEBCwUAA4IBAQDUzlzKlC2QPIawF+2pZ/IGTASggG+Xx/mr4CvL
zS+bcJetqghhSuRNO26NxuQr4vuEMVf+4w/zMjRFgRcMv3IdB4611iADu1UGayN9
RP3ilEhmQ50eyuyPMBgAKUDkvKRS2YhsS9nbVHhG8jCotMcQdlUFzUL3B/aXCz3/
/3a5hg0BKzthBu9zIVTjW3lkBNnYv/mfecnG6nBD6f+mi4dL6ayY/cJ644mNXnU/
zDKPrtEeYDz/7z/8hPjKHmjGEmJQYftxw7X0np6nstyGSeKwSGpTnm0lE59OYKsS
hZAyqM1r4ngT9Vc/CZsHJpBgSr4FK329z2PeDZXYlbNEphA8
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:15 2026 by rpki-client