This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130302e302f32342d3234203d3e20323635363733.roa
File:                     34352e342e3130302e302f32342d3234203d3e20323635363733.roa (raw, json)
Hash identifier:          9tOXOuDQGkRRoMyTYnswZu43G5XiR22EQ6LZHdKU67U=
Subject key identifier:   A7:50:42:18:C5:DB:0D:E9:0D:AA:55:93:81:ED:82:9A:10:9F:48:82
Certificate issuer:       /CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
Certificate serial:       2C70E33A64CB56E8E7D553B114BEBEBE5A6AA536
Authority key identifier: A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130302e302f32342d3234203d3e20323635363733.roa
Signing time:             Tue 06 Jan 2026 19:25:56 +0000
ROA not before:           Tue 06 Jan 2026 19:20:56 +0000
ROA not after:            Tue 05 Jan 2027 19:25:56 +0000
asID:                     265673
IP address blocks:        45.4.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:70:e3:3a:64:cb:56:e8:e7:d5:53:b1:14:be:be:be:5a:6a:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
        Validity
            Not Before: Jan  6 19:20:56 2026 GMT
            Not After : Jan  5 19:25:56 2027 GMT
        Subject: CN=A7504218C5DB0DE90DAA559381ED829A109F4882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:5b:4b:3c:30:b4:a0:d2:71:61:73:fb:e2:
                    be:dc:e4:cd:ca:1b:d4:87:5a:1f:85:2f:46:a3:c9:
                    d4:b4:90:48:bd:fa:f2:5d:75:f0:c1:af:3c:10:c9:
                    ea:9f:e7:20:93:09:66:15:df:44:5d:a6:30:5e:19:
                    03:31:fa:b3:e4:54:45:1f:5f:2d:9d:b7:31:19:ff:
                    f1:9b:3c:39:e5:89:00:02:dd:b7:a6:c3:13:1b:f4:
                    bb:60:e0:7a:d1:4e:50:d1:e0:cf:02:58:64:dd:c4:
                    8d:9b:8a:39:62:51:39:e7:dc:fb:23:d5:3a:43:8c:
                    ec:f3:f2:7f:4d:17:0a:fd:32:2a:a5:46:d6:56:50:
                    4f:63:0c:bd:6f:8c:41:09:61:17:ed:3d:73:23:72:
                    13:d8:93:a6:a7:2c:6d:7f:d9:88:2a:a4:71:ee:85:
                    59:82:b9:be:da:74:33:5b:29:16:1c:a6:53:6b:a0:
                    cc:de:44:40:17:8b:60:61:12:4e:50:f4:79:e4:44:
                    ce:c7:d1:d5:b5:b5:6c:2e:b4:64:72:96:78:0c:cb:
                    75:3f:c8:a6:e5:d2:2a:55:9d:85:52:74:6d:eb:17:
                    e3:40:66:e0:4f:15:cd:0e:3f:fc:0f:fa:40:82:ac:
                    f7:bc:aa:de:c4:bc:85:e2:3d:c3:73:7e:9f:1c:7c:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:42:18:C5:DB:0D:E9:0D:AA:55:93:81:ED:82:9A:10:9F:48:82
            X509v3 Authority Key Identifier:
                keyid:A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130302e302f32342d3234203d3e20323635363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:94:7c:d6:e9:3f:5f:a2:dd:f1:39:cb:99:8d:12:f0:8e:
         99:6e:c1:9d:b5:53:84:7b:6d:49:a2:ec:17:65:41:fc:88:14:
         9e:7d:ec:d6:39:73:cb:9c:f9:72:d8:17:6a:28:3e:fe:bd:8a:
         4f:81:05:06:14:e9:e4:44:08:86:4d:b7:15:3b:dc:27:c9:62:
         42:33:52:2c:86:b1:29:3d:36:62:b6:ff:6a:42:50:fe:49:a9:
         ca:e3:76:1e:da:99:6c:bc:9b:45:1a:46:dc:7d:0e:75:67:c5:
         fd:68:31:ae:b5:c0:64:e0:d5:c8:2c:fd:5b:9e:b1:1a:a4:84:
         0e:8e:0c:09:c2:a9:83:06:91:08:95:1d:3a:7b:ee:84:d8:0f:
         4e:41:52:20:29:c4:1b:8d:80:33:4a:e3:0d:2b:61:da:a0:dd:
         51:ad:af:a2:60:7b:f4:b4:59:74:11:a5:f7:d4:16:26:d7:f2:
         e1:56:03:5d:1e:3f:ad:7c:ec:81:8a:9b:c7:88:d1:4a:58:fe:
         29:b3:4f:1b:27:78:b8:6d:d4:5c:1d:f0:63:cf:10:84:2a:b6:
         33:51:51:3d:12:71:88:3b:18:f3:f1:fd:f1:b1:88:1e:e5:39:
         ff:8c:38:27:75:99:c2:04:36:26:e2:17:46:e3:24:b3:85:45:
         aa:be:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:49:25 2026 by rpki-client