This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3130342e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e3130342e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          m2Ru4eRpJX5bzl4IrXLlLk4Mx0t3B6WbwUnDFaxbmLg=
Subject key identifier:   B8:05:59:78:C8:6D:F3:66:6F:25:C3:A4:CB:63:F1:8C:70:EB:C5:ED
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       39535851003BD091CD6120773D97F5FF1AF91031
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3130342e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 06 Jan 2026 19:32:39 +0000
ROA not before:           Tue 06 Jan 2026 19:27:39 +0000
ROA not after:            Tue 05 Jan 2027 19:32:39 +0000
asID:                     22122
IP address blocks:        148.209.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:53:58:51:00:3b:d0:91:cd:61:20:77:3d:97:f5:ff:1a:f9:10:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Jan  6 19:27:39 2026 GMT
            Not After : Jan  5 19:32:39 2027 GMT
        Subject: CN=B8055978C86DF3666F25C3A4CB63F18C70EBC5ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:e4:3b:af:94:39:bd:06:9f:3a:4d:68:8c:
                    dd:7d:a7:dd:10:d6:32:56:cf:85:c1:8f:1d:1c:d4:
                    7a:88:8f:72:0d:48:9a:f2:9f:fc:39:42:fb:48:4b:
                    e2:62:24:99:78:6f:2d:cc:0b:ad:32:89:a6:28:bf:
                    5e:db:1b:63:21:f3:7a:7e:fb:03:9a:ae:79:6f:c1:
                    79:0d:8e:6b:31:5e:84:06:0f:5f:4d:8e:eb:30:99:
                    21:f6:8d:17:fa:76:71:0f:ac:01:99:90:08:72:bf:
                    17:87:e6:01:42:c3:ce:c5:1f:de:65:eb:c6:50:c5:
                    80:e9:fb:25:db:5a:58:fe:48:ab:e9:a6:82:c6:8c:
                    45:1c:0e:ab:a6:81:af:6d:3d:54:67:76:8c:73:36:
                    19:6f:c6:76:51:91:5a:c3:f9:b1:44:7f:11:55:93:
                    4c:20:a3:82:2c:86:31:84:1c:11:51:75:11:6b:e8:
                    55:cf:1e:9d:98:ab:39:d5:99:20:69:78:bf:37:98:
                    33:de:52:5d:00:e4:30:e9:f6:79:f3:48:e5:ac:60:
                    76:9d:e9:a5:e3:ab:c9:01:64:b3:88:d7:3d:ff:ce:
                    ad:4b:c1:a4:f3:ba:42:fd:b1:25:70:fb:f9:9f:c3:
                    e1:5b:4c:3a:dd:7e:5d:1b:b4:e6:7c:1a:49:72:fd:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:59:78:C8:6D:F3:66:6F:25:C3:A4:CB:63:F1:8C:70:EB:C5:ED
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3130342e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:2b:2a:61:85:9f:71:a0:28:06:59:d9:a5:3d:fb:2e:91:
         00:22:c7:fc:6a:48:29:d2:d0:df:4d:9a:0a:12:0a:45:25:53:
         84:26:c4:5a:87:73:98:c2:d5:81:a4:3f:d3:ef:4b:82:db:8c:
         35:ca:bc:0d:59:4a:f3:97:29:f9:46:de:5c:00:3f:82:d6:af:
         e1:b3:ed:d1:2e:0a:25:56:a9:3d:53:6d:6e:80:f3:16:33:64:
         ff:42:42:fe:54:bd:fb:cf:5f:9b:33:c4:e3:6b:2d:f0:c1:8e:
         01:76:9f:f9:dd:e0:59:c3:bd:4f:90:35:ba:6a:d1:ff:90:9a:
         94:d6:d5:15:1a:5d:bd:4c:27:f4:d0:b8:95:4e:dd:b6:2b:d2:
         12:ac:27:dd:c2:8d:e0:9d:2a:ec:dc:13:9d:3f:49:53:2c:ac:
         b7:30:06:a5:33:19:5d:4f:19:1a:62:7d:a8:4c:34:d0:b8:d7:
         eb:6f:b7:e5:71:27:39:c2:ae:ba:ed:ed:b8:7d:de:1a:62:49:
         d9:99:83:06:93:fa:61:30:cb:a5:89:e6:de:7e:d9:39:47:9e:
         5f:3c:99:97:72:b5:c4:e5:97:57:f9:c1:62:c1:43:cd:7c:8f:
         15:13:82:17:6d:86:b0:57:f2:d1:bc:9d:57:2f:d6:66:18:71:
         64:6a:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:36 2026 by rpki-client