This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32332d3234203d3e20323637383934.roa
File:                     34352e3137362e3136342e302f32332d3234203d3e20323637383934.roa (raw, json)
Hash identifier:          hRoyQ7R2CpiQirfoFU1k/mRfDE0hPA3+mr6fzQl3Wc8=
Subject key identifier:   B9:E8:87:D4:1E:5F:BC:41:E6:92:6A:EF:0D:77:E6:8F:89:79:87:5B
Certificate issuer:       /CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Certificate serial:       60EEC32C11151AD4FF428C940E8196797D7BC3D2
Authority key identifier: AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32332d3234203d3e20323637383934.roa
Signing time:             Tue 06 Jan 2026 20:51:04 +0000
ROA not before:           Tue 06 Jan 2026 20:46:04 +0000
ROA not after:            Tue 05 Jan 2027 20:51:04 +0000
asID:                     267894
IP address blocks:        45.176.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ee:c3:2c:11:15:1a:d4:ff:42:8c:94:0e:81:96:79:7d:7b:c3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF5961CE89F38C3B4D8403327DF504436CE78585
        Validity
            Not Before: Jan  6 20:46:04 2026 GMT
            Not After : Jan  5 20:51:04 2027 GMT
        Subject: CN=B9E887D41E5FBC41E6926AEF0D77E68F8979875B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:3a:e2:26:5d:6c:75:40:73:d5:5f:f7:e6:
                    6c:c8:23:7b:17:eb:80:47:d9:d7:85:70:11:5d:e9:
                    40:c1:05:ec:ee:26:4d:c9:e3:61:63:8a:44:f4:15:
                    40:47:3c:5a:e6:41:d8:7d:d2:9e:82:64:1a:3d:81:
                    95:2c:9b:2a:b5:97:f8:e6:60:1b:94:79:10:6c:8f:
                    b2:c5:3c:88:c6:6c:b6:2f:0e:78:49:67:57:fe:f4:
                    4f:c1:71:10:2e:81:bc:18:b5:cc:e9:37:bd:b6:b0:
                    db:74:67:d3:76:e1:61:04:1d:de:07:a0:64:25:69:
                    1f:93:c4:a4:39:36:9a:12:26:e3:54:6f:12:66:bf:
                    b6:2a:b0:c9:57:25:54:82:f9:7f:c6:1b:4d:ac:38:
                    38:20:af:1a:7c:cc:04:80:ac:a6:8d:6f:86:ab:e0:
                    37:75:2a:15:21:8c:3a:ad:d5:c0:8d:ba:8e:ee:76:
                    e4:d8:e9:53:99:45:f4:37:07:ec:ee:77:f1:1a:7c:
                    18:ab:1e:40:07:78:25:bd:ab:0a:6e:3f:82:2d:3c:
                    ee:a9:a5:67:f3:15:6f:cb:c4:cd:56:ab:03:52:0f:
                    bf:4e:0b:e1:ba:ad:2a:81:52:63:58:67:bd:36:d6:
                    5b:7e:db:be:43:2e:d9:6a:34:b7:f9:e4:10:b9:98:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:87:D4:1E:5F:BC:41:E6:92:6A:EF:0D:77:E6:8F:89:79:87:5B
            X509v3 Authority Key Identifier:
                keyid:AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32332d3234203d3e20323637383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:c7:2a:86:93:84:90:46:4e:13:63:80:fe:e0:1f:0a:8b:
         f6:3e:cb:4d:da:44:2d:7a:b1:aa:ef:89:90:22:5a:33:69:7a:
         4a:ba:b8:37:8b:b3:96:ee:20:e7:97:f5:e3:0d:25:55:0a:2d:
         e2:4d:0c:fb:86:fd:e6:3b:15:cc:67:49:fc:0b:5b:02:0b:15:
         ad:69:7e:c5:4a:fb:89:85:9f:b2:04:89:fd:9b:8e:b4:70:c5:
         3c:59:5f:36:d2:b5:0d:70:c0:20:d7:0b:98:11:d2:88:64:3f:
         88:dd:35:8b:13:13:1f:d4:83:f6:b2:cd:83:09:83:ed:2c:2a:
         df:92:63:56:dc:de:a1:a0:e7:dd:16:64:72:37:b7:f0:bb:35:
         9f:f3:23:66:b1:c3:b3:c4:b9:da:93:5b:75:45:53:a8:7d:ba:
         d7:01:93:1d:e2:51:47:06:4f:a3:61:e0:a8:bf:81:ad:cf:5e:
         19:c2:d4:f7:cd:1d:ec:dd:d9:2e:f9:e4:d2:1d:3d:ff:ce:ee:
         76:7c:90:be:bb:72:91:36:4b:67:9a:f9:9b:41:04:68:8b:a0:
         6f:01:33:4b:5d:fe:78:b1:52:31:0d:2e:4a:39:3c:0d:9a:bb:
         7c:b7:03:0d:46:17:44:4d:77:f2:a1:03:3f:6e:ae:6d:02:e8:
         de:d5:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:28 2026 by rpki-client