This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3234382e302f32322d3234203d3e203631343638.roa
File:                     3134332e3235352e3234382e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          pHRd55ElNGyaGTIYXoJU9hz2DoWOQHM/UJkJSuzNa0U=
Subject key identifier:   84:83:B3:19:62:BD:61:8D:45:A6:57:F2:88:88:4B:95:F3:55:6A:4A
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       6012CCD8A418D0425E7D9652E6231286B64CD3AB
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3234382e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:12:39 +0000
ROA not before:           Tue 06 Jan 2026 19:07:39 +0000
ROA not after:            Tue 05 Jan 2027 19:12:39 +0000
asID:                     61468
IP address blocks:        143.255.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:12:cc:d8:a4:18:d0:42:5e:7d:96:52:e6:23:12:86:b6:4c:d3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Jan  6 19:07:39 2026 GMT
            Not After : Jan  5 19:12:39 2027 GMT
        Subject: CN=8483B31962BD618D45A657F288884B95F3556A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:ba:8a:a3:b2:53:b7:73:65:57:e4:a1:bc:
                    0b:b4:c1:96:1e:f8:5a:01:89:9d:be:1c:22:23:06:
                    16:9b:60:79:75:a0:79:da:d4:54:cf:59:18:00:ac:
                    6d:b9:a1:f2:ad:8d:b2:31:13:c8:83:af:8c:86:60:
                    57:0f:46:a3:c5:aa:25:33:e1:fe:94:e8:42:44:b5:
                    7d:ec:f9:74:c3:71:d4:24:c0:cb:58:3c:fe:2f:bf:
                    bd:28:a4:c8:e5:a1:28:6f:ab:27:47:d6:4d:eb:3e:
                    b4:60:c2:d4:db:a6:e8:40:1f:56:ce:77:55:2a:3c:
                    fa:7a:e6:34:70:fe:ce:d9:5d:bd:c7:63:f0:0a:7a:
                    d4:f1:ae:65:1d:22:6c:7c:60:dd:25:9d:f7:37:0e:
                    82:06:ce:e1:06:10:c7:00:dd:db:d7:d0:1a:52:45:
                    d5:09:86:d6:f9:b6:89:d8:b5:94:fb:3a:9e:f0:6b:
                    23:5a:0c:a5:fd:3a:d5:ad:08:86:65:91:6b:fb:72:
                    06:36:39:a5:f4:9c:f4:3e:05:19:9d:f4:b7:4f:d6:
                    8a:c1:3b:9b:73:69:f0:be:7a:c7:15:93:50:29:8a:
                    29:e7:14:67:22:bc:41:7a:ed:2c:cc:db:f0:1c:4c:
                    26:82:ce:a2:b2:dd:e6:0b:4e:1a:28:08:24:3c:0a:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:B3:19:62:BD:61:8D:45:A6:57:F2:88:88:4B:95:F3:55:6A:4A
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3134332e3235352e3234382e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:11:e8:0d:bb:e0:1f:7d:a5:4f:c5:98:a6:4c:43:7c:cf:
         22:65:46:9b:d8:f1:cb:68:8f:c4:35:28:6e:80:0b:a0:b7:b1:
         c7:7d:7c:bf:2d:b3:f5:0b:15:46:5a:15:d1:58:03:06:9e:87:
         45:95:5d:56:a0:da:35:4d:f4:5f:85:fd:62:d1:59:4b:40:3c:
         a6:83:b9:f8:59:d5:a7:d8:5d:d6:54:ff:76:53:09:10:e0:b6:
         a1:7f:96:9d:52:0b:5e:b8:9c:12:d9:fa:c2:0b:86:6b:c2:ea:
         a1:a9:94:fd:ee:e4:65:df:02:0a:37:e3:be:e6:25:66:86:e6:
         74:b3:05:8e:0d:75:67:5c:c3:37:d8:e2:5b:c4:bf:ab:a4:df:
         2f:d4:be:4f:bc:d8:5d:ff:c7:db:ad:25:3b:39:27:89:0f:7d:
         d1:96:b1:92:4e:c9:ba:88:44:78:07:e6:eb:48:0d:9d:18:b5:
         12:27:e8:dc:a9:0f:16:75:ed:50:78:35:c1:d9:1d:5f:e9:a0:
         85:5c:6b:d9:3f:f6:d7:66:e6:83:1d:c8:dc:aa:1a:d9:d0:92:
         0e:89:cd:62:10:7a:be:0c:3f:6a:ee:f5:ff:7f:d5:58:d2:81:
         17:bf:78:2b:93:35:cd:7d:a4:28:a5:9b:57:d4:d1:f1:2f:83:
         be:c6:12:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:26:22 2026 by rpki-client