This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e31312e302f32342d3236203d3e20323637383030.roa
File:                     34352e3137322e31312e302f32342d3236203d3e20323637383030.roa (raw, json)
Hash identifier:          yxrazfIVpyYCsKzvkiIm1gVOndPdwJRZEaBCRB5girU=
Subject key identifier:   8D:6A:C4:FC:3B:70:80:89:66:0F:4B:7C:B8:CA:EA:C6:0B:EA:92:FF
Certificate issuer:       /CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8
Certificate serial:       4558F71A913B7D34BFB34341F8F597A6A36C4133
Authority key identifier: 2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e31312e302f32342d3236203d3e20323637383030.roa
Signing time:             Tue 06 Jan 2026 19:10:22 +0000
ROA not before:           Tue 06 Jan 2026 19:05:22 +0000
ROA not after:            Tue 05 Jan 2027 19:10:22 +0000
asID:                     267800
IP address blocks:        45.172.11.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:58:f7:1a:91:3b:7d:34:bf:b3:43:41:f8:f5:97:a6:a3:6c:41:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8
        Validity
            Not Before: Jan  6 19:05:22 2026 GMT
            Not After : Jan  5 19:10:22 2027 GMT
        Subject: CN=8D6AC4FC3B708089660F4B7CB8CAEAC60BEA92FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:35:ff:c5:09:cd:b6:b4:02:d7:56:0a:07:
                    85:7a:07:b6:15:a3:92:1b:ff:83:e9:71:86:1b:08:
                    ba:a0:da:9b:bb:69:72:35:ef:2b:68:7d:8e:a7:71:
                    4f:e0:83:53:29:03:a4:2d:00:89:4e:7a:47:f0:1f:
                    63:5b:aa:b0:e3:d5:ff:53:b8:12:92:7d:3a:b2:47:
                    b8:f7:5d:34:72:39:a6:92:b8:dd:02:fd:eb:90:50:
                    ed:22:2c:e7:cb:8a:20:7f:d7:d7:ad:5f:05:33:c6:
                    82:7d:5b:28:06:40:ec:00:c2:33:76:1d:5b:32:ae:
                    2d:e8:88:14:34:59:ba:fe:43:07:8d:dc:dd:a7:21:
                    56:71:ac:c3:a9:6e:d3:47:bf:a0:bb:05:01:f3:35:
                    1b:70:4c:c3:55:47:31:61:b1:03:6d:b6:07:49:06:
                    04:55:a4:50:25:4b:f2:90:d6:c5:e1:57:99:a9:75:
                    41:0d:f5:c6:a8:ea:61:0b:66:7c:0d:51:07:ee:d0:
                    cb:f6:47:81:72:8b:d5:67:b8:6a:e6:98:9f:93:62:
                    49:36:6e:90:c3:47:cc:5a:44:e1:02:af:bf:15:9f:
                    4c:45:93:58:3e:8b:80:64:1e:3c:49:6d:8b:2e:db:
                    a9:12:5b:c0:21:6f:1c:60:ba:f3:14:b5:c2:9a:ca:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:C4:FC:3B:70:80:89:66:0F:4B:7C:B8:CA:EA:C6:0B:EA:92:FF
            X509v3 Authority Key Identifier:
                keyid:2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e31312e302f32342d3236203d3e20323637383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:09:6d:b6:63:87:dc:bc:04:92:68:f8:e8:19:9e:1a:cb:
         a5:7d:83:b0:04:6c:81:b6:c7:97:f9:51:eb:d3:72:ea:fd:05:
         20:14:d0:4c:20:46:a2:cd:11:e8:ff:85:01:1e:fc:c7:54:a7:
         56:1c:e6:fc:45:c3:09:c3:9a:c9:64:91:b7:b9:df:70:64:22:
         fd:b6:c2:54:99:e7:d0:a4:9c:14:2d:b9:20:b7:f9:2f:72:5d:
         ae:17:f6:d2:33:9b:81:f9:39:08:61:2e:a6:82:e4:58:af:37:
         14:86:bd:e3:43:3b:ac:ef:8b:89:71:d4:28:db:e9:18:51:c5:
         ed:65:c0:0a:3a:f5:57:26:fd:e0:f0:13:64:ea:01:ce:49:d4:
         5f:aa:86:3b:cd:05:f2:ff:79:f7:85:42:df:fe:00:d1:84:41:
         65:c1:b0:0e:0b:6c:4a:ea:cf:27:be:80:e5:1d:8b:4c:8b:98:
         d5:a9:4c:a6:b7:89:67:06:c3:50:98:44:b6:83:22:28:9f:48:
         bd:a5:5b:c0:b9:78:db:8b:1f:cf:89:bc:94:62:60:e8:50:f9:
         bd:ab:42:b4:53:de:55:74:fa:77:53:c9:de:be:ac:0a:ee:79:
         7e:f0:55:0b:b1:c0:50:09:77:f8:16:c8:ed:8a:16:5d:ce:0b:
         e3:da:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:05 2026 by rpki-client