This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa
File:                     3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa (raw, json)
Hash identifier:          2mO5mBSN6LXX7yOiUuhiUsnVWazrmuJDEG28BfHzdLE=
Subject key identifier:   D2:2B:1A:42:4E:A7:48:63:AB:87:FE:63:63:0E:1A:EA:7E:E7:50:54
Certificate issuer:       /CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Certificate serial:       1D5CACCD38A6D01D8F35668269FD954E1E362EF5
Authority key identifier: E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa
Signing time:             Tue 09 Dec 2025 23:54:30 +0000
ROA not before:           Tue 09 Dec 2025 23:49:30 +0000
ROA not after:            Tue 08 Dec 2026 23:54:30 +0000
asID:                     272882
IP address blocks:        148.222.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Dec 2025 15:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5c:ac:cd:38:a6:d0:1d:8f:35:66:82:69:fd:95:4e:1e:36:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
        Validity
            Not Before: Dec  9 23:49:30 2025 GMT
            Not After : Dec  8 23:54:30 2026 GMT
        Subject: CN=D22B1A424EA74863AB87FE63630E1AEA7EE75054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:cb:10:5f:62:ab:e5:86:04:e3:9e:2d:51:
                    69:d9:ee:3e:a1:33:e8:b9:c2:f5:f6:34:c6:3f:cc:
                    48:30:8d:08:61:b3:d2:eb:c9:77:e5:bc:f2:97:c8:
                    ab:3f:a7:ee:43:72:7e:46:6d:f6:37:30:72:27:55:
                    de:8f:b6:46:9f:b8:38:44:e5:ad:f3:bc:91:af:f4:
                    c9:b8:9a:64:25:67:8e:e8:f3:ee:38:d8:04:4b:80:
                    17:ea:af:56:f6:b7:a1:dd:88:2f:91:69:83:79:13:
                    34:8b:0a:82:53:88:d5:65:a6:56:f4:1c:d9:29:6a:
                    86:25:ea:08:bb:a9:4e:25:ba:9a:31:e7:3e:94:86:
                    43:d3:8c:0c:06:e8:fa:f9:57:e9:c2:29:a8:28:b8:
                    0c:a7:ed:0f:6b:1f:69:56:44:97:a1:b8:7b:ab:64:
                    a6:ee:63:00:5d:2a:5a:df:ac:25:de:fd:d8:94:64:
                    f3:08:78:6b:9e:1a:57:5e:ef:17:b6:8b:79:c1:39:
                    59:82:fb:62:ad:99:39:01:09:9c:59:d3:8e:26:46:
                    25:95:d7:0a:e3:1d:b1:3e:3f:51:cf:5f:eb:be:f9:
                    28:74:05:dc:3f:bb:d4:50:73:fa:e0:1c:39:c7:75:
                    74:5a:03:1e:f2:5b:ad:0a:33:0d:d2:1d:4a:08:0a:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2B:1A:42:4E:A7:48:63:AB:87:FE:63:63:0E:1A:EA:7E:E7:50:54
            X509v3 Authority Key Identifier:
                keyid:E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:a1:f4:1a:97:1e:62:03:84:69:c7:20:8f:b7:a7:98:70:
         3e:7d:49:dc:ef:37:2c:9d:02:6f:f0:d6:d7:e7:0d:b6:02:25:
         97:2e:7b:21:8e:8c:bc:1c:11:2f:8b:05:2d:2a:0a:eb:cc:77:
         f3:c1:e6:78:65:c2:f8:4b:05:95:3a:79:19:8c:36:21:e1:98:
         ee:29:a6:ce:ac:e8:a2:45:e6:3a:4f:cb:ff:b6:a6:7b:74:0e:
         34:a9:6e:7a:dd:f0:eb:64:1c:9d:0c:ab:6e:49:00:80:3e:33:
         ca:4c:10:e0:7f:3c:53:cd:99:01:c2:aa:d7:4c:47:af:32:ac:
         00:60:0c:e8:d3:42:b4:05:5b:5d:04:1c:35:2b:0f:51:76:6c:
         96:41:15:6e:14:3e:5a:06:68:8b:b9:67:88:df:78:ec:fb:68:
         4a:c8:96:5f:70:6c:42:f7:81:6b:6b:57:23:40:60:4e:14:6b:
         aa:4b:78:07:0a:72:9c:bb:2c:2e:1d:31:76:c9:37:2f:9e:91:
         ad:13:83:ef:27:c3:9a:0c:c8:9c:4d:58:46:90:97:54:48:48:
         f3:48:1c:30:13:38:ed:89:0d:4a:4d:3f:c2:6b:73:31:c1:8d:
         c0:67:e6:81:fd:29:b2:a4:51:41:b0:58:cd:44:15:49:18:43:
         a2:37:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 02:09:50 2025 by rpki-client