This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138312e302f32342d3234203d3e20323632313836.roa
File:                     34352e37312e3138312e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          DcJp9YWphfk5LhtVj4kwd6jZf5zqefstl9ZdsBRyTMU=
Subject key identifier:   43:68:6D:F4:49:94:AF:2A:DD:94:F2:A5:10:3C:A8:72:17:87:FD:C0
Certificate issuer:       /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial:       A685310281232FDEA04BA1903AB4E55C3AFA3C
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138312e302f32342d3234203d3e20323632313836.roa
Signing time:             Tue 06 Jan 2026 19:44:26 +0000
ROA not before:           Tue 06 Jan 2026 19:39:26 +0000
ROA not after:            Tue 05 Jan 2027 19:44:26 +0000
asID:                     262186
IP address blocks:        45.71.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a6:85:31:02:81:23:2f:de:a0:4b:a1:90:3a:b4:e5:5c:3a:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
        Validity
            Not Before: Jan  6 19:39:26 2026 GMT
            Not After : Jan  5 19:44:26 2027 GMT
        Subject: CN=43686DF44994AF2ADD94F2A5103CA8721787FDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:d9:cb:d3:b9:00:3a:1c:05:62:c5:89:33:
                    ab:bf:11:99:d0:57:35:a9:4f:92:ca:6b:ec:e5:7e:
                    42:7d:b3:67:10:62:9e:38:8f:18:41:c2:c6:b0:57:
                    7a:3b:ad:2d:55:fd:aa:9d:69:ce:c9:50:8d:05:c4:
                    a7:07:cb:6d:a5:62:5d:dd:83:52:90:ec:a7:d2:77:
                    2e:b4:6b:1d:60:b2:c3:86:88:63:3d:6c:19:94:92:
                    25:6a:cc:2d:6c:ae:30:23:29:0c:79:9a:3b:78:71:
                    23:d0:46:1d:19:2f:79:06:24:fc:73:11:cb:ba:9c:
                    98:a7:ff:56:8c:63:5b:5d:25:89:21:5c:07:d4:03:
                    6e:86:39:56:bd:c2:63:c8:86:33:40:d2:b3:e0:a0:
                    1d:2e:f1:5e:79:b9:d4:53:65:58:f3:8d:a7:ed:dc:
                    09:64:be:70:a2:2e:12:bc:ab:87:58:0e:a7:47:dc:
                    df:f2:cd:33:c2:bc:65:84:56:26:78:68:4a:64:68:
                    e8:a4:60:c8:63:16:1c:21:04:b6:9d:1e:ef:ff:8c:
                    40:76:17:fa:b8:86:93:a6:1c:81:ac:e4:1f:02:fa:
                    57:85:be:43:51:8b:16:fa:48:86:a4:25:9c:79:2a:
                    6e:de:d9:20:3a:28:2f:a4:19:8b:da:75:4a:a8:ff:
                    01:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:6D:F4:49:94:AF:2A:DD:94:F2:A5:10:3C:A8:72:17:87:FD:C0
            X509v3 Authority Key Identifier:
                keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138312e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:7e:82:4f:cd:ee:bc:b7:f7:a6:b3:3f:ea:20:d2:40:73:
         c8:1d:c0:97:2c:58:71:76:48:99:7a:0b:17:5e:0f:62:71:d8:
         b9:f3:3e:22:17:31:39:56:11:d6:d6:21:30:77:c5:7c:23:81:
         11:74:16:ae:4a:20:92:2c:f1:f2:5e:15:70:2e:43:8c:b9:35:
         2d:98:7d:94:60:11:d9:0f:dc:fc:7c:7f:b9:8f:b8:e0:5c:a4:
         d6:71:d0:93:4c:81:aa:18:66:fa:80:d1:0f:ec:7b:dc:5c:73:
         ed:bd:9f:c6:e9:3c:27:99:32:ed:ce:8f:d2:3c:6c:f3:b1:fa:
         6b:32:03:44:21:88:03:dc:9c:d5:15:94:96:8b:5b:64:f0:2f:
         6a:c3:f0:cf:fb:3a:a3:7a:5e:a8:db:5c:39:1f:db:53:08:82:
         f1:1f:5a:5a:54:1e:b3:bd:96:08:e7:91:f1:5c:42:f0:08:f9:
         29:4f:ca:f2:d2:89:a4:4f:b9:34:bf:77:cf:c1:c0:14:90:7c:
         d4:5b:94:ee:a3:2b:b7:b8:95:75:5c:69:c5:47:e4:8d:77:bf:
         38:18:79:88:3e:90:fa:5c:22:ba:2a:cc:fc:e0:0c:96:51:f4:
         d2:ff:cc:f6:04:b7:39:84:b7:7d:8b:fb:f2:d4:a3:23:31:8f:
         13:11:3d:0c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAKaFMQKBIy/eoEuhkDq05Vw6+jwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCNzg5MjQ5QzhFNEY2QzA5ODNDNjhDQUI3QjQwRTdE
RjYyN0MzNTAeFw0yNjAxMDYxOTM5MjZaFw0yNzAxMDUxOTQ0MjZaMDMxMTAvBgNV
BAMTKDQzNjg2REY0NDk5NEFGMkFERDk0RjJBNTEwM0NBODcyMTc4N0ZEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyD9nL07kAOhwFYsWJM6u/EZnQ
VzWpT5LKa+zlfkJ9s2cQYp44jxhBwsawV3o7rS1V/aqdac7JUI0FxKcHy22lYl3d
g1KQ7KfSdy60ax1gssOGiGM9bBmUkiVqzC1srjAjKQx5mjt4cSPQRh0ZL3kGJPxz
Ecu6nJin/1aMY1tdJYkhXAfUA26GOVa9wmPIhjNA0rPgoB0u8V55udRTZVjzjaft
3AlkvnCiLhK8q4dYDqdH3N/yzTPCvGWEViZ4aEpkaOikYMhjFhwhBLadHu//jEB2
F/q4hpOmHIGs5B8C+leFvkNRixb6SIakJZx5Km7e2SA6KC+kGYvadUqo/wGlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQ2ht9EmUryrdlPKlEDyocheH/cAwHwYDVR0j
BBgwFoAUU7eJJJyOT2wJg8aMq3tA599ifDUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzBBRUUyQzdBQzlBMzlERDhEOEY3MTc5RUU5NDQyNTEz
NzBBQzQxM0QxRTE3MTM3MzI3MDcxNTY0NzE0RTIwLzAvNTNCNzg5MjQ5QzhFNEY2
QzA5ODNDNjhDQUI3QjQwRTdERjYyN0MzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0I3ODkyNDlDOEU0RjZDMDk4
M0M2OENBQjdCNDBFN0RGNjI3QzM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMwQUVFMkM3QUM5QTM5REQ4RDhGNzE3OUVFOTQ0MjUxMzcwQUM0MTNE
MUUxNzEzNzMyNzA3MTU2NDcxNEUyMC8wLzM0MzUyZTM3MzEyZTMxMzgzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1HtTAN
BgkqhkiG9w0BAQsFAAOCAQEAhN1+gk/N7ry396azP+og0kBzyB3AlyxYcXZImXoL
F14PYnHYufM+IhcxOVYR1tYhMHfFfCOBEXQWrkogkizx8l4VcC5DjLk1LZh9lGAR
2Q/c/Hx/uY+44Fyk1nHQk0yBqhhm+oDRD+x73Fxz7b2fxuk8J5ky7c6P0jxs87H6
azIDRCGIA9yc1RWUlotbZPAvasPwz/s6o3peqNtcOR/bUwiC8R9aWlQes72WCOeR
8VxC8Aj5KU/K8tKJpE+5NL93z8HAFJB81FuU7qMrt7iVdVxpxUfkjXe/OBh5iD6Q
+lwiuirM/OAMllH00v/M9gS3OYS3fYv78tSjIzGPExE9DA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:45 2026 by rpki-client