This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
File:                     34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier:          KFFv25IhN9NBBE1EzJKGbgxFwcJP3A312Qd6rW2YAz0=
Subject key identifier:   AB:95:76:91:3A:F1:F0:1F:28:A7:89:63:C3:02:C7:57:4F:63:2D:0D
Certificate issuer:       /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial:       334DDD334D17AAF6317872C1D6844711C8FE519A
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
Signing time:             Tue 06 Jan 2026 19:46:45 +0000
ROA not before:           Tue 06 Jan 2026 19:41:45 +0000
ROA not after:            Tue 05 Jan 2027 19:46:45 +0000
asID:                     267776
IP address blocks:        45.171.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4d:dd:33:4d:17:aa:f6:31:78:72:c1:d6:84:47:11:c8:fe:51:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
        Validity
            Not Before: Jan  6 19:41:45 2026 GMT
            Not After : Jan  5 19:46:45 2027 GMT
        Subject: CN=AB9576913AF1F01F28A78963C302C7574F632D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:25:a5:29:64:11:70:f6:57:ed:30:4a:44:
                    3e:24:6c:f5:75:78:63:54:ba:c6:49:cf:bf:b9:3f:
                    0e:fb:49:72:4a:60:78:6b:bc:89:3c:f1:de:62:64:
                    a8:fb:14:27:5a:85:ee:f5:42:9e:50:ab:29:97:dd:
                    a3:59:ec:e1:08:19:90:fb:61:7c:75:7f:71:c1:cb:
                    b8:e2:85:1d:94:1f:37:2d:f4:c5:dd:7e:ab:7d:35:
                    43:cb:50:03:0e:eb:8b:e9:32:c2:35:90:4d:57:93:
                    94:8c:d9:0d:00:dc:0c:83:38:d9:17:8d:46:3a:8f:
                    73:6c:0c:85:e3:c6:24:7f:3f:3b:37:62:00:df:f3:
                    20:bb:7f:50:c9:45:e9:12:9f:e9:ef:a8:0d:9b:06:
                    cd:db:ca:92:32:e3:a1:4f:45:a7:24:bd:95:85:18:
                    bd:59:78:7d:2a:bb:45:09:25:de:f5:ed:c1:95:0e:
                    11:4e:5b:fc:0b:b7:04:8f:83:aa:0f:58:2a:d7:9c:
                    a5:6d:a2:c0:7e:8c:c8:4f:5e:c6:ec:c6:8c:91:fd:
                    f3:2d:0c:d7:d3:20:88:61:ec:b2:f6:2b:56:ca:2c:
                    f5:df:cb:6c:85:05:89:25:55:bb:07:ef:2e:59:68:
                    af:e9:af:1d:52:34:43:ad:4c:7f:26:94:44:91:df:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:76:91:3A:F1:F0:1F:28:A7:89:63:C3:02:C7:57:4F:63:2D:0D
            X509v3 Authority Key Identifier:
                keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:83:08:9d:c5:40:a9:c0:53:94:4b:ee:12:d2:39:52:bd:
         f3:36:05:1c:2c:89:3e:1c:f5:d6:f0:64:61:98:96:41:ac:a6:
         0d:4c:e2:1f:5f:63:bf:4b:ba:0c:f2:f8:d4:31:b9:23:7f:29:
         0a:d1:00:30:2b:34:6c:bc:16:5d:fa:21:aa:42:21:0d:a3:fc:
         04:17:e6:73:83:b9:7e:c5:e9:31:de:bc:af:26:1a:10:29:41:
         e3:14:d6:23:cc:0a:e0:49:34:fd:67:91:ff:d1:d2:7a:c0:fa:
         75:02:5b:be:35:0a:44:0c:de:d5:6b:e9:e5:37:24:cb:03:bf:
         ed:89:a4:3c:14:d9:04:54:ca:50:b5:a7:4a:cb:65:b0:59:cf:
         a1:5e:3e:9b:83:b0:06:24:37:62:a7:8b:ae:72:dd:6c:26:d7:
         b8:bd:7b:03:50:fc:8e:8e:8e:93:72:52:f3:c1:2f:e6:e2:e2:
         81:c8:a2:86:0e:f3:22:9d:60:f2:60:c9:d5:16:64:01:a1:8f:
         a7:4a:da:59:da:b3:f5:c5:cf:ed:b2:92:0e:7e:5b:c3:54:b8:
         a0:11:d5:32:ad:19:64:20:f0:b9:5b:bb:91:dc:1c:c1:bc:d6:
         e8:ed:15:88:c0:02:29:b9:63:ce:7c:23:5e:da:65:8b:50:02:
         e1:8a:22:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:06 2026 by rpki-client