This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa
File:                     34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa (raw, json)
Hash identifier:          vp+jPVoesPifVHfi0gxIwqDf6POw1SG/J/HQe69zRLc=
Subject key identifier:   87:E3:4B:CC:47:09:83:4F:0F:9A:95:3A:C9:5E:CB:1B:EB:29:90:9C
Certificate issuer:       /CN=3ADE18BE908E59DAF6EDF98BC507574C686B73FF
Certificate serial:       45D27CE754F57CBF0591CC145147F71D96A33B72
Authority key identifier: 3A:DE:18:BE:90:8E:59:DA:F6:ED:F9:8B:C5:07:57:4C:68:6B:73:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa
Signing time:             Tue 06 Jan 2026 19:41:29 +0000
ROA not before:           Tue 06 Jan 2026 19:36:29 +0000
ROA not after:            Tue 05 Jan 2027 19:41:29 +0000
asID:                     269901
IP address blocks:        45.190.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:7c:e7:54:f5:7c:bf:05:91:cc:14:51:47:f7:1d:96:a3:3b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE18BE908E59DAF6EDF98BC507574C686B73FF
        Validity
            Not Before: Jan  6 19:36:29 2026 GMT
            Not After : Jan  5 19:41:29 2027 GMT
        Subject: CN=87E34BCC4709834F0F9A953AC95ECB1BEB29909C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:20:be:54:15:83:0c:97:27:32:9e:5b:78:
                    41:50:37:26:6a:5c:86:03:93:c5:f9:c2:65:9d:4d:
                    ee:72:24:57:89:5f:69:35:b5:2d:9b:c7:9b:44:15:
                    e8:47:31:1a:54:bb:95:ba:0e:ec:8f:df:b3:07:1a:
                    94:55:8b:bb:cd:e7:92:a9:67:fa:27:24:31:01:e2:
                    4d:c9:27:f4:dc:24:b9:61:1c:1f:61:2d:ed:cb:52:
                    84:3e:f7:cb:eb:d8:22:91:4b:de:4f:db:a5:a7:32:
                    01:2f:23:1e:e9:f8:67:25:25:20:0b:de:dd:7e:e6:
                    a7:3d:a4:4e:37:5f:fc:39:f5:18:95:ba:fa:b2:0c:
                    35:93:f6:6c:96:a0:6a:ec:e6:2b:d7:43:d1:ab:a9:
                    2c:82:d7:ab:48:86:b6:f9:70:7f:aa:16:79:68:80:
                    13:14:08:e3:08:f5:7e:93:c0:c4:fa:a9:a0:02:cc:
                    52:e4:40:c4:2e:e3:ac:aa:1c:68:3d:6f:bf:f5:1a:
                    cb:05:a4:08:d0:b6:8d:ae:e8:dc:24:ee:b3:a3:9c:
                    40:f8:39:e9:91:05:84:44:9f:26:fb:2f:62:db:a0:
                    62:dc:a6:72:27:2a:59:17:4c:ff:b2:24:4c:32:dd:
                    5f:48:da:f1:f3:9f:ca:bc:19:ea:0a:79:18:ec:2e:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:4B:CC:47:09:83:4F:0F:9A:95:3A:C9:5E:CB:1B:EB:29:90:9C
            X509v3 Authority Key Identifier:
                keyid:3A:DE:18:BE:90:8E:59:DA:F6:ED:F9:8B:C5:07:57:4C:68:6B:73:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:6e:75:cc:ac:a4:0e:58:5d:f4:55:e4:78:81:e2:fd:72:4d:
         1c:5d:b5:24:b9:e7:f6:f5:d7:46:f8:7d:92:52:fb:0a:6f:c2:
         6b:3b:56:ff:88:90:8f:76:26:df:8a:b3:65:4e:83:d9:5f:5d:
         71:69:c2:ce:7e:51:be:1e:2b:05:47:ad:9b:4f:9d:2f:b7:89:
         3a:9c:e2:22:83:84:28:ca:be:96:b4:f0:2d:87:42:0e:99:fd:
         43:a9:65:3f:a1:74:b0:2b:52:08:e4:c2:7e:4a:56:95:68:56:
         f3:4e:99:2a:fc:e2:7c:38:b5:c8:6d:e7:7e:32:a7:91:87:e0:
         f9:3a:66:d2:52:43:c9:c1:a6:46:83:f5:10:bb:7a:4b:c6:61:
         9c:8d:e4:aa:93:5d:43:4c:56:ca:b6:55:fb:24:d4:35:95:6f:
         22:94:f3:fd:8b:fa:a3:ca:78:a6:81:55:14:6b:33:64:5b:3e:
         80:4d:b0:c9:a9:6f:a9:88:f1:88:01:9c:aa:6e:30:26:af:74:
         c7:39:fa:a1:d1:10:d3:99:0c:aa:2f:a7:20:99:8b:af:95:49:
         10:dd:30:2a:b1:59:66:89:a9:97:75:79:0e:5f:c8:28:f5:1e:
         9f:36:53:6f:f5:76:37:1e:20:66:bb:0b:ca:09:db:14:02:43:
         6f:de:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:42:28 2026 by rpki-client