This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa
File:                     34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa (raw, json)
Hash identifier:          mw0dZMYZKWginOkdJIJ7xKNYPF2wco2uXGz7fQFODcc=
Subject key identifier:   5C:D9:67:31:10:33:E9:CD:84:56:6B:B8:26:63:F6:B4:3A:3F:11:5A
Certificate issuer:       /CN=9644ECC99A7803741A541FDFD8422B9726740EA2
Certificate serial:       2096EB6E9B573B1EB854A56FB5593FED44A2D026
Authority key identifier: 96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa
Signing time:             Tue 06 Jan 2026 19:39:40 +0000
ROA not before:           Tue 06 Jan 2026 19:34:40 +0000
ROA not after:            Tue 05 Jan 2027 19:39:40 +0000
asID:                     267801
IP address blocks:        45.172.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:96:eb:6e:9b:57:3b:1e:b8:54:a5:6f:b5:59:3f:ed:44:a2:d0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9644ECC99A7803741A541FDFD8422B9726740EA2
        Validity
            Not Before: Jan  6 19:34:40 2026 GMT
            Not After : Jan  5 19:39:40 2027 GMT
        Subject: CN=5CD967311033E9CD84566BB82663F6B43A3F115A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:35:ba:2f:74:5f:fe:08:13:9d:c7:98:25:
                    bf:f9:ff:db:6e:fe:ec:6b:60:30:52:18:75:aa:49:
                    dd:45:8c:4a:e1:f2:68:8e:4b:06:62:a1:6c:31:dc:
                    0f:f4:a7:cb:9f:0f:c0:17:ad:57:2a:64:ca:fc:e7:
                    08:60:e7:ee:f2:82:c1:66:e7:47:df:a8:04:f9:04:
                    c1:29:96:c1:2b:06:ca:24:78:af:8c:0b:6a:0a:9d:
                    04:21:f3:af:1d:6b:45:68:c6:18:25:02:48:5d:9a:
                    12:db:87:c4:26:4e:37:66:ef:3c:e3:d6:63:5d:56:
                    c1:32:3b:1a:74:a9:9f:52:be:ae:16:cb:cd:e3:14:
                    ce:20:0c:5e:39:4a:cb:f2:14:be:ec:ec:e3:59:46:
                    a0:15:ed:28:3f:de:94:4e:2f:db:0e:5f:57:b2:c4:
                    5f:86:32:ea:18:ba:47:9b:fc:c0:a2:9d:ab:e4:56:
                    ab:d9:59:10:d1:6e:15:b1:fb:ee:b6:02:18:1c:ea:
                    47:b4:43:d6:5e:35:5f:e6:67:8f:44:23:67:d7:22:
                    f6:68:c5:1a:45:46:9b:e6:18:9e:39:90:4d:40:ea:
                    9f:31:37:40:7f:36:68:66:f7:0d:d6:15:7b:67:c7:
                    28:ed:8a:f0:fb:0c:44:b8:2e:5a:28:f7:7f:3e:f2:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D9:67:31:10:33:E9:CD:84:56:6B:B8:26:63:F6:B4:3A:3F:11:5A
            X509v3 Authority Key Identifier:
                keyid:96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:0d:ee:50:ca:44:81:77:8c:2c:fd:f8:72:9a:4e:c5:d8:35:
         b9:a6:0b:59:4c:e4:b2:b3:6e:1e:20:63:ef:06:f5:39:a7:c1:
         a3:cd:65:90:83:db:29:16:f2:b1:ea:18:d1:28:9c:c8:99:23:
         50:60:a4:8b:31:34:eb:92:ca:93:d7:5f:60:47:c3:e1:1d:70:
         e1:6b:d3:b0:a4:a3:e2:0b:32:e2:8a:5a:51:fb:f9:5d:ab:40:
         7e:80:23:b0:86:4c:6f:40:8b:f0:a2:38:0c:1a:8e:8a:21:7c:
         b9:a5:3c:2b:0c:57:a3:3f:77:1d:5f:13:7a:e3:89:cd:f8:fc:
         e0:21:f0:3d:ab:d8:a2:a5:87:f2:a1:6a:78:55:51:99:bd:f1:
         54:84:b2:bb:c4:6d:25:e6:30:6d:b0:6a:fe:10:ce:6d:7c:32:
         d1:b4:eb:ff:3b:31:b4:38:a9:3b:56:7d:a3:af:cd:a9:f2:c8:
         ff:fb:d8:1d:5e:d8:5f:b1:9d:ea:83:5e:22:bd:43:a1:92:ae:
         17:c9:02:82:a1:5a:f6:35:2a:ca:b5:63:48:f5:c4:61:c6:99:
         cf:cd:89:41:7b:f9:20:cb:e6:c3:b8:c3:25:08:4e:5e:33:71:
         ad:0b:a7:38:71:9f:49:47:05:2d:94:2e:f4:03:db:29:c6:f4:
         4b:c5:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:17 2026 by rpki-client