This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa
File:                     3134382e3233342e302e302f31362d3136203d3e2033343534.roa (raw, json)
Hash identifier:          4bMmUxCrOD3zvGedc7s/rSm6uz/mN0nGQJqxcvxWGgM=
Subject key identifier:   D0:3A:63:D4:00:20:92:0C:F1:EF:10:C6:DF:6C:7A:A3:C1:09:10:D5
Certificate issuer:       /CN=505673F92F9F900BC9EBDFFB3B022EDD77EC55F1
Certificate serial:       791AB17B75F3E2AEBDF3BE3E3935AF761C847312
Authority key identifier: 50:56:73:F9:2F:9F:90:0B:C9:EB:DF:FB:3B:02:2E:DD:77:EC:55:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa
Signing time:             Tue 06 Jan 2026 19:06:05 +0000
ROA not before:           Tue 06 Jan 2026 19:01:05 +0000
ROA not after:            Tue 05 Jan 2027 19:06:05 +0000
asID:                     3454
IP address blocks:        148.234.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1a:b1:7b:75:f3:e2:ae:bd:f3:be:3e:39:35:af:76:1c:84:73:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505673F92F9F900BC9EBDFFB3B022EDD77EC55F1
        Validity
            Not Before: Jan  6 19:01:05 2026 GMT
            Not After : Jan  5 19:06:05 2027 GMT
        Subject: CN=D03A63D40020920CF1EF10C6DF6C7AA3C10910D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:d0:8c:48:08:1d:c1:68:4d:39:62:73:32:
                    f0:b7:16:7a:d2:f0:fc:8a:eb:cb:40:42:9c:14:d7:
                    c8:a1:28:e7:2b:6e:ed:cc:20:71:bb:b1:67:e1:aa:
                    f1:7c:0d:a5:c8:61:33:23:6d:3a:10:96:49:7d:dc:
                    d6:f6:02:e5:f0:92:69:d0:61:0d:65:21:f7:68:3d:
                    5b:39:1f:a8:6c:8b:c7:e4:0a:a4:5f:a6:d2:33:26:
                    53:72:be:21:b8:1d:e2:00:b2:03:38:9f:3b:06:ea:
                    91:a9:82:12:4b:f5:35:8f:4a:09:43:f4:cb:4a:06:
                    b4:5d:ec:56:19:92:4e:ef:15:b9:0c:55:99:71:0a:
                    68:42:ad:57:d7:d6:ab:7c:04:32:7f:78:cb:b7:fd:
                    4e:dd:96:e4:e9:85:8b:e6:fe:49:0f:2c:9f:ea:30:
                    7b:b1:da:58:a2:aa:c2:3c:87:8c:05:94:1f:db:50:
                    cc:59:c4:b7:4f:ef:0c:33:07:78:b1:f4:35:f1:ed:
                    94:69:dd:fb:78:21:00:e1:99:3f:98:18:cc:5d:6e:
                    2e:2a:c8:fd:c0:5b:2f:d0:53:0a:e0:d2:92:95:74:
                    b7:d1:25:b3:39:64:77:ed:89:26:a6:5c:f0:35:1e:
                    e3:76:07:84:07:1d:82:36:2a:19:63:3e:ef:3e:81:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:63:D4:00:20:92:0C:F1:EF:10:C6:DF:6C:7A:A3:C1:09:10:D5
            X509v3 Authority Key Identifier:
                keyid:50:56:73:F9:2F:9F:90:0B:C9:EB:DF:FB:3B:02:2E:DD:77:EC:55:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:43:67:7b:b3:9b:ce:e2:ee:2e:1a:d2:94:7c:0e:99:6d:9d:
         61:7d:3e:35:eb:c5:99:f8:8e:3c:7a:5c:de:d0:b3:53:1d:65:
         51:08:b9:b1:62:a1:10:2c:0f:d2:a6:90:44:8a:12:98:25:e5:
         ca:ae:fc:91:52:dc:06:e6:17:48:95:19:fd:9b:84:94:3a:85:
         35:64:9f:f1:0b:18:da:f5:ef:ab:52:4b:72:df:6e:d3:ef:d9:
         eb:e1:1e:46:7f:43:2d:26:8f:2d:d3:cd:4f:cd:4b:b7:bb:1d:
         88:00:17:d5:d7:3e:32:8e:6f:87:c6:4d:c1:b5:76:4c:d0:c2:
         91:32:69:11:97:95:25:ec:55:96:2d:5c:bd:90:f9:7d:8a:8a:
         c0:7b:fb:87:f3:a5:3d:09:0f:27:24:a8:63:e3:c7:1d:8c:6f:
         41:15:56:27:37:3f:4b:cb:9c:e3:90:01:bb:37:04:4e:c6:9f:
         17:2e:c9:17:5a:68:67:35:1f:92:a6:d8:ec:7d:bb:85:6f:a2:
         b6:1f:87:21:86:6e:a0:0f:2d:17:4b:42:5e:60:91:9d:2a:ef:
         49:ee:7b:54:5b:aa:02:b7:7c:41:c9:65:dd:a0:fa:54:51:01:
         fc:0a:a2:cd:6a:c5:8a:e8:c5:df:0b:94:4c:1b:fd:6a:61:27:
         cc:a9:8c:0a
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUeRqxe3Xz4q69874+OTWvdhyEcxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA1NjczRjkyRjlGOTAwQkM5RUJERkZCM0IwMjJFREQ3
N0VDNTVGMTAeFw0yNjAxMDYxOTAxMDVaFw0yNzAxMDUxOTA2MDVaMDMxMTAvBgNV
BAMTKEQwM0E2M0Q0MDAyMDkyMENGMUVGMTBDNkRGNkM3QUEzQzEwOTEwRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC19CMSAgdwWhNOWJzMvC3FnrS
8PyK68tAQpwU18ihKOcrbu3MIHG7sWfhqvF8DaXIYTMjbToQlkl93Nb2AuXwkmnQ
YQ1lIfdoPVs5H6hsi8fkCqRfptIzJlNyviG4HeIAsgM4nzsG6pGpghJL9TWPSglD
9MtKBrRd7FYZkk7vFbkMVZlxCmhCrVfX1qt8BDJ/eMu3/U7dluTphYvm/kkPLJ/q
MHux2liiqsI8h4wFlB/bUMxZxLdP7wwzB3ix9DXx7ZRp3ft4IQDhmT+YGMxdbi4q
yP3AWy/QUwrg0pKVdLfRJbM5ZHftiSamXPA1HuN2B4QHHYI2KhljPu8+gZMJAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU0Dpj1AAgkgzx7xDG32x6o8EJENUwHwYDVR0j
BBgwFoAUUFZz+S+fkAvJ69/7OwIu3XfsVfEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DQzRCNzY2ODk3QUQ2NjNDMzIwRENFNERBMDdGMUQ4MUVC
QzIwQTJCMjkyOTM4QzBEM0NGODRFRjBDNUZDRUZBLzAvNTA1NjczRjkyRjlGOTAw
QkM5RUJERkZCM0IwMjJFREQ3N0VDNTVGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDU2NzNGOTJGOUY5MDBCQzlF
QkRGRkIzQjAyMkVERDc3RUM1NUYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0M0Qjc2Njg5N0FENjYzQzMyMERDRTREQTA3RjFEODFFQkMyMEEyQjI5
MjkzOEMwRDNDRjg0RUYwQzVGQ0VGQS8wLzMxMzQzODJlMzIzMzM0MmUzMDJlMzAy
ZjMxMzYyZDMxMzYyMDNkM2UyMDMzMzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlOowDQYJKoZI
hvcNAQELBQADggEBAAlDZ3uzm87i7i4a0pR8DpltnWF9PjXrxZn4jjx6XN7Qs1Md
ZVEIubFioRAsD9KmkESKEpgl5cqu/JFS3AbmF0iVGf2bhJQ6hTVkn/ELGNr176tS
S3LfbtPv2evhHkZ/Qy0mjy3TzU/NS7e7HYgAF9XXPjKOb4fGTcG1dkzQwpEyaRGX
lSXsVZYtXL2Q+X2KisB7+4fzpT0JDyckqGPjxx2Mb0EVVic3P0vLnOOQAbs3BE7G
nxcuyRdaaGc1H5Km2Ox9u4VvorYfhyGGbqAPLRdLQl5gkZ0q70nue1RbqgK3fEHJ
Zd2g+lRRAfwKos1qxYroxd8LlEwb/WphJ8ypjAo=
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:01:38 2026 by rpki-client