This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
File:                     34352e372e36372e302f32342d3234203d3e20323730313433.roa (raw, json)
Hash identifier:          KLnRjJ8wal6L8BCEte/zqAL3pj8mtKMx6i6v+5TtuyU=
Subject key identifier:   82:AA:17:A8:F4:04:B0:74:AC:C2:D5:09:90:9B:B8:F9:A9:3F:37:56
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       490297BBDC267A78381C2CE54F2CBAF0BF5EC29F
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
Signing time:             Tue 06 Jan 2026 19:38:53 +0000
ROA not before:           Tue 06 Jan 2026 19:33:53 +0000
ROA not after:            Tue 05 Jan 2027 19:38:53 +0000
asID:                     270143
IP address blocks:        45.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:02:97:bb:dc:26:7a:78:38:1c:2c:e5:4f:2c:ba:f0:bf:5e:c2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Jan  6 19:33:53 2026 GMT
            Not After : Jan  5 19:38:53 2027 GMT
        Subject: CN=82AA17A8F404B074ACC2D509909BB8F9A93F3756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:b0:66:34:64:15:d9:ec:58:54:f8:50:fd:
                    9e:c8:b4:b6:41:6d:5b:d0:4f:62:c7:68:54:04:b0:
                    aa:14:ee:86:38:78:5a:4d:e4:96:7e:e3:7e:82:67:
                    2e:a9:a3:1a:28:b4:03:24:64:02:72:c6:cc:03:dc:
                    be:db:6e:01:d1:2d:f1:15:49:4f:b0:9c:a8:39:a3:
                    a1:af:95:0b:b9:bb:7c:b7:63:dc:9f:af:a5:a7:b7:
                    72:4e:16:30:48:13:f2:95:1d:ff:34:c4:61:1e:9e:
                    7d:d4:73:66:df:7d:47:4a:75:95:cc:4f:11:30:07:
                    35:17:23:38:0e:0c:6e:3c:46:a7:bc:ae:35:7b:04:
                    47:e1:8e:85:7c:42:2a:ff:4e:bb:a5:8f:65:5f:f5:
                    cd:42:40:70:b0:3d:0c:6c:1b:72:10:da:cc:59:ef:
                    33:cb:c7:79:7f:cb:29:aa:c6:50:38:93:aa:eb:0f:
                    29:10:61:1b:c2:89:ba:a5:42:3e:4d:89:8b:30:b6:
                    c2:53:db:c2:bb:e2:29:cd:3c:f5:39:0f:ee:b2:47:
                    f4:9b:3e:9a:b8:c0:4d:0c:b0:d2:a0:1d:a3:a4:4c:
                    8b:67:a7:27:69:b3:0a:1a:7a:99:7c:ff:3a:8c:62:
                    8f:93:2d:69:2c:d8:a2:e2:bf:ca:5a:b7:94:ba:e5:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AA:17:A8:F4:04:B0:74:AC:C2:D5:09:90:9B:B8:F9:A9:3F:37:56
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:fe:b2:e6:45:00:a0:71:8e:e4:aa:01:de:34:1d:8e:8c:
         f2:d1:bf:a2:77:88:31:eb:0a:ef:7b:cc:24:0a:fa:b9:54:57:
         10:3c:30:79:c6:7e:9c:b0:d0:76:da:3d:06:d9:7d:33:ca:da:
         34:72:1f:cc:c4:c6:52:4e:a1:05:06:3e:11:fd:c5:c7:53:22:
         6d:dd:f4:1e:8e:57:18:b1:94:20:1a:e9:0c:a7:19:cf:30:3e:
         67:f0:f7:d1:73:d0:44:26:a7:f6:37:d7:1c:b2:c8:88:46:c5:
         69:b5:bc:44:dd:b3:79:97:13:cc:c0:83:3b:ba:45:fa:a4:2b:
         8b:8b:48:ec:7c:70:cd:73:35:64:53:78:0a:fa:27:72:47:0c:
         8b:e4:2f:32:90:4a:57:d7:ad:14:71:3e:24:bc:dc:37:28:65:
         5d:46:ef:28:2a:91:90:29:a3:fd:7e:e3:7c:8b:59:f3:25:ff:
         e9:13:78:eb:8c:ae:53:a0:c3:4d:07:b3:43:6d:75:0f:5b:11:
         a6:73:64:3d:0c:9a:35:b7:4c:17:16:a4:a7:40:7b:15:ea:5f:
         a5:dd:24:38:b8:8d:d8:6f:bf:33:54:11:18:ae:a9:03:17:2b:
         92:bb:1b:8a:ad:7d:2e:6c:c3:42:f1:5e:51:8c:af:7a:26:10:
         34:82:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:41:38 2026 by rpki-client