This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
File:                     34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa (raw, json)
Hash identifier:          NIxPqdDe1fWQyN3JV9HUR7jNinj9B5RJZ4svaxMHbvw=
Subject key identifier:   48:28:80:1B:C4:69:6E:A8:39:25:8A:3C:B7:1B:85:95:8A:48:3D:00
Certificate issuer:       /CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Certificate serial:       04867FA479D5815C500BFA535BAAE15A070A8EE5
Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa
Signing time:             Tue 06 Jan 2026 20:56:28 +0000
ROA not before:           Tue 06 Jan 2026 20:51:28 +0000
ROA not after:            Tue 05 Jan 2027 20:56:28 +0000
asID:                     267820
IP address blocks:        45.174.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:86:7f:a4:79:d5:81:5c:50:0b:fa:53:5b:aa:e1:5a:07:0a:8e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617
        Validity
            Not Before: Jan  6 20:51:28 2026 GMT
            Not After : Jan  5 20:56:28 2027 GMT
        Subject: CN=4828801BC4696EA839258A3CB71B85958A483D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:45:cd:0f:12:ea:c3:57:b7:59:a5:26:cf:
                    a4:6f:e9:30:20:28:ab:c6:2c:75:71:4a:d5:fd:9e:
                    b5:49:61:7c:16:87:f1:19:97:bc:db:e3:d6:4d:89:
                    33:12:58:1c:e5:52:79:60:57:77:83:eb:45:d9:00:
                    89:7c:3e:b3:10:62:48:1d:12:e1:a6:47:80:56:82:
                    ec:46:be:56:84:8a:92:b5:a3:68:75:67:7b:35:f3:
                    a1:bb:62:88:1f:0e:91:49:cf:f2:aa:bf:ad:0c:8f:
                    a3:4a:73:23:bd:16:8e:15:26:9c:38:1b:e9:ac:73:
                    21:f5:d0:7d:be:5e:13:ea:a1:82:df:db:18:58:bf:
                    66:93:4f:e0:65:95:93:de:9f:74:42:47:b0:86:b2:
                    57:8f:63:b7:9d:44:30:ad:0e:98:88:c8:89:1a:0e:
                    5f:cd:d1:a2:fb:92:63:f1:87:b9:de:dc:34:ea:9f:
                    f4:ac:a8:b7:0e:99:f0:e9:68:17:36:8c:62:83:95:
                    a2:f1:05:fc:8c:c0:9e:ed:81:ae:ac:d3:79:1d:91:
                    e8:d2:9e:d8:b7:31:fc:76:e2:07:5e:39:5c:7a:98:
                    09:45:51:6e:96:d7:f7:89:2f:fe:58:7c:e7:8a:9c:
                    07:8c:ad:7d:d5:4b:11:f1:3f:bb:f2:17:3b:2e:30:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:28:80:1B:C4:69:6E:A8:39:25:8A:3C:B7:1B:85:95:8A:48:3D:00
            X509v3 Authority Key Identifier:
                keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3132392e302f32342d3234203d3e20323637383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:b0:5c:45:94:bd:83:84:38:3a:8b:24:0b:9c:bd:7f:c2:
         ee:59:a0:66:50:14:92:d8:31:74:5b:1f:22:95:69:30:96:7e:
         a2:7e:a0:45:90:1d:fa:a9:71:74:1b:77:2e:1c:e3:da:cf:45:
         59:95:c2:99:a0:3a:92:bb:c3:10:c7:ed:3f:1c:23:9c:fb:8d:
         f5:5b:97:4e:9c:b0:ff:81:e1:de:b2:c5:29:5a:df:13:dd:62:
         52:7b:67:1c:4b:6f:7a:76:a6:f7:74:d3:4f:e8:93:9f:25:23:
         83:00:f8:c2:a5:31:88:e4:1a:aa:3e:05:37:57:44:8b:b4:24:
         e8:1d:23:3b:dd:65:ea:db:dc:18:d8:42:19:53:4e:8e:7f:a3:
         8d:b2:4b:3c:26:3b:99:81:67:2b:ef:82:ac:3b:ae:b7:3c:d4:
         c5:92:4d:2c:fd:96:88:0e:46:b7:0d:f8:3c:84:2e:86:48:b8:
         c7:40:19:21:56:1e:1f:07:82:c3:ae:18:47:92:68:33:e8:fe:
         bc:33:43:b7:e7:79:ff:5b:fd:b4:50:63:5a:b4:4d:78:be:43:
         aa:6a:b7:98:4c:7a:5a:cb:ef:f2:7d:8e:5d:f7:8f:d1:a0:1d:
         db:8b:be:c0:22:07:d9:3e:80:22:e4:d1:eb:16:2b:dc:25:98:
         de:95:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:13 2026 by rpki-client