This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/34352e3138372e34382e302f32322d3234203d3e20323639383535.roa
File:                     34352e3138372e34382e302f32322d3234203d3e20323639383535.roa (raw, json)
Hash identifier:          ED8+eU0ZYQniz4Pn3Kq26etMqazM/1Y8mPJNNKABCDs=
Subject key identifier:   A5:1F:6D:9B:6C:27:E8:61:E4:5B:98:87:8F:32:37:BD:71:62:5F:63
Certificate issuer:       /CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
Certificate serial:       4BD5358813B245DC90008CBF4778B3E689A66F3A
Authority key identifier: 2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/34352e3138372e34382e302f32322d3234203d3e20323639383535.roa
Signing time:             Tue 06 Jan 2026 19:28:22 +0000
ROA not before:           Tue 06 Jan 2026 19:23:22 +0000
ROA not after:            Tue 05 Jan 2027 19:28:22 +0000
asID:                     269855
IP address blocks:        45.187.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 05:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d5:35:88:13:b2:45:dc:90:00:8c:bf:47:78:b3:e6:89:a6:6f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
        Validity
            Not Before: Jan  6 19:23:22 2026 GMT
            Not After : Jan  5 19:28:22 2027 GMT
        Subject: CN=A51F6D9B6C27E861E45B98878F3237BD71625F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:cb:9a:d3:8d:7b:a9:c1:97:5f:21:cb:80:
                    3e:86:93:22:e9:70:d1:b5:69:80:3d:61:dd:3d:a3:
                    60:44:83:96:d9:06:ea:ea:4d:35:11:17:4f:86:ee:
                    fb:db:5f:10:09:fb:4c:ab:ad:a9:eb:39:8c:e4:2b:
                    aa:22:08:f1:c8:5f:cc:3e:70:ee:50:fb:ae:65:76:
                    4e:af:5e:43:56:78:a4:c4:b5:0a:f8:bb:67:ca:ac:
                    da:41:3b:a9:8a:2f:b6:33:b3:e4:75:e5:b5:63:71:
                    a4:e2:f8:63:3a:71:a6:74:04:77:c7:d9:5f:e5:19:
                    d8:73:93:9d:eb:ab:64:b0:91:11:60:22:d7:96:4a:
                    56:97:49:11:a9:68:bd:9b:3c:cc:8c:76:6f:ed:9f:
                    de:f2:1d:c6:e7:5c:80:68:8c:d8:02:d5:08:a2:6d:
                    71:39:43:93:65:78:05:a0:55:d9:55:07:a5:5b:5f:
                    38:72:d5:11:64:d5:00:02:83:28:66:69:70:d7:22:
                    c7:12:6c:14:5a:03:f1:02:bc:a8:6d:e6:ca:62:91:
                    26:cd:a7:2f:a3:42:41:c9:72:d6:3e:0d:19:64:f9:
                    01:7b:8b:03:f0:da:b4:62:57:63:05:ae:83:4d:f8:
                    e8:a8:18:35:17:46:dc:79:d0:ae:93:4f:23:3a:ef:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1F:6D:9B:6C:27:E8:61:E4:5B:98:87:8F:32:37:BD:71:62:5F:63
            X509v3 Authority Key Identifier:
                keyid:2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/34352e3138372e34382e302f32322d3234203d3e20323639383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:89:83:5d:6e:27:01:62:18:1d:29:81:e0:5b:d8:ae:bd:0f:
         dd:1d:31:b2:47:02:db:9e:a8:94:93:ec:d5:3f:58:79:e6:50:
         6c:f4:a1:95:a4:68:7b:82:c8:b8:17:b3:a8:0e:27:76:bb:3d:
         29:7b:f3:47:86:97:fe:89:a8:c0:d6:77:e8:1c:4a:ad:d5:b1:
         ed:a3:1f:d7:d9:04:27:25:62:ac:9f:80:e7:91:31:8a:c9:23:
         42:1a:28:12:c3:97:5e:71:fa:69:57:de:07:83:eb:b5:a8:2a:
         13:6b:87:60:88:2d:23:6c:63:a9:b3:78:9b:61:21:18:e5:55:
         2f:9d:55:11:f5:b0:a4:2f:49:2a:8f:88:61:e3:bd:4d:4c:44:
         26:9b:28:4f:a0:05:72:de:c5:43:9e:fb:a7:23:ca:a5:00:cf:
         ca:82:50:e5:4b:8b:c5:d5:5d:4c:20:33:e1:5d:35:77:48:82:
         f0:3d:d1:62:d9:9d:a1:6c:27:3d:f3:3f:8d:00:e8:c7:cc:2d:
         6d:dd:a3:95:5b:6a:77:86:35:5e:14:e2:55:7f:b3:15:99:57:
         4e:6e:ff:be:60:fd:b5:48:eb:a0:04:ab:48:62:0a:76:a5:86:
         2c:2f:e6:c4:b8:b5:b5:7f:e8:8b:e1:6d:fc:28:39:7d:30:f7:
         38:02:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:28 2026 by rpki-client