This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130372e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e3130372e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          Pn7GLBUSNl7LI62cWle/ZgsfKFEwSxyuKG/XLv9ShJE=
Subject key identifier:   6C:57:E6:FF:E1:BF:9A:B9:B9:A3:60:26:C6:17:16:28:20:79:C9:BA
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       45F02BFBC0FCED73374C05DCB1376212B23D438F
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130372e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 06 Jan 2026 19:36:10 +0000
ROA not before:           Tue 06 Jan 2026 19:31:10 +0000
ROA not after:            Tue 05 Jan 2027 19:36:10 +0000
asID:                     21575
IP address blocks:        148.102.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f0:2b:fb:c0:fc:ed:73:37:4c:05:dc:b1:37:62:12:b2:3d:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Jan  6 19:31:10 2026 GMT
            Not After : Jan  5 19:36:10 2027 GMT
        Subject: CN=6C57E6FFE1BF9AB9B9A36026C61716282079C9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:40:92:1a:55:fe:c0:b1:c4:e7:bb:2f:c5:
                    f7:52:df:28:ea:bd:bb:d6:f6:3f:19:4e:8c:67:57:
                    66:6e:4a:77:0d:61:80:ba:c0:28:97:9d:17:50:13:
                    aa:74:94:fd:e6:e6:bd:a2:ba:ac:2f:2f:f7:1f:51:
                    95:d9:99:7d:9b:af:ab:b5:b3:68:a5:7e:5f:d5:63:
                    4a:f1:7c:47:29:78:93:70:c8:33:9c:64:e1:4e:a6:
                    e1:4b:f0:a3:3c:ee:5b:28:b6:7a:6f:43:98:65:cf:
                    71:58:cd:20:ce:1e:d4:83:8c:e6:18:48:09:cd:ed:
                    41:8c:e4:d1:e9:84:71:a8:66:33:c7:db:3c:b8:e6:
                    c3:00:ca:ec:86:71:54:0a:1f:80:3f:78:d7:64:71:
                    ff:53:88:ca:4c:21:85:ed:f4:9f:38:98:f9:3f:87:
                    0d:89:e1:a3:8a:8c:04:2d:de:56:f5:73:73:d9:e2:
                    af:ba:20:33:f3:ab:0b:88:26:71:c9:97:8d:85:aa:
                    9e:83:c6:dc:c9:bc:35:2c:af:a2:8c:b0:68:a8:a5:
                    95:a6:8c:3c:81:6c:cc:4c:56:8c:e0:56:0d:94:1b:
                    ee:17:fd:b7:e3:34:5b:78:c9:73:1c:6b:75:f6:ea:
                    b2:bb:9c:3d:9f:50:d2:44:3c:79:ae:0e:b2:0b:ff:
                    52:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:57:E6:FF:E1:BF:9A:B9:B9:A3:60:26:C6:17:16:28:20:79:C9:BA
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3130372e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:80:8e:e7:e0:fc:e0:b0:a5:f4:0f:cb:4e:67:c6:ea:5c:
         04:74:57:2b:9e:22:ce:54:80:68:a4:6e:14:51:7a:82:9f:52:
         71:22:67:5b:1e:66:17:30:30:4e:fd:5f:df:e7:97:3d:5a:d8:
         d6:ee:b7:18:14:52:1d:98:31:66:ad:d4:0c:1b:be:a2:b1:af:
         d4:ba:e8:a8:a5:ab:c9:f8:e1:a1:9b:21:80:47:06:16:6f:a4:
         90:a5:b4:be:0a:b8:c2:c2:78:7f:5a:40:97:0c:79:08:f2:24:
         1f:11:80:b5:44:bc:13:63:ed:f1:94:79:34:a2:12:09:87:b5:
         e7:ff:71:24:8a:f0:92:e1:dc:e3:66:e8:cb:44:7f:c9:01:e0:
         53:6d:f9:b0:b5:8a:ed:fe:93:ed:8f:cd:ef:f2:a1:0b:5f:5b:
         6e:3b:b8:6b:8a:31:21:1a:86:3f:a4:75:e8:fb:0c:09:26:f9:
         0f:7d:f0:c7:08:33:b4:a1:95:14:bd:78:8f:9a:47:09:fa:56:
         c6:0c:ab:fb:2c:88:0e:ca:ea:4a:58:85:ce:18:de:ce:f3:31:
         c9:2a:bc:3a:17:37:47:6b:49:e0:a5:99:35:ee:92:34:17:78:
         cf:df:b8:e0:33:a0:4a:d4:fa:98:81:cc:64:7f:64:72:cd:bd:
         1d:99:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 18:04:08 2026 by rpki-client