This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32342d3234203d3e20323634373538.roa
File:                     34352e3137382e36382e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          VNa+tCz8SRw0bsJiyzzFc29YD24wV4iimhmgXd2O0I4=
Subject key identifier:   74:BD:BD:70:97:98:05:B5:9D:CD:20:A6:98:D3:4B:7A:1F:29:E4:EA
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       205AA6E22CD8B359542D004D1AE8AA8CFA67D988
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 06 Jan 2026 19:28:12 +0000
ROA not before:           Tue 06 Jan 2026 19:23:12 +0000
ROA not after:            Tue 05 Jan 2027 19:28:12 +0000
asID:                     264758
IP address blocks:        45.178.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5a:a6:e2:2c:d8:b3:59:54:2d:00:4d:1a:e8:aa:8c:fa:67:d9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Jan  6 19:23:12 2026 GMT
            Not After : Jan  5 19:28:12 2027 GMT
        Subject: CN=74BDBD70979805B59DCD20A698D34B7A1F29E4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:b6:8e:36:06:e2:a8:a6:51:c5:c5:d9:8c:
                    80:e5:07:91:ab:3d:6f:e8:c5:e5:1c:cb:6f:58:ac:
                    11:28:77:3e:0e:19:a0:d4:25:1c:3b:19:1b:7d:bf:
                    96:7b:80:c5:f4:2c:45:a4:3e:7a:de:2a:ae:11:95:
                    64:47:31:52:04:52:26:98:05:ba:3b:b3:29:71:2c:
                    a9:10:ac:d0:6b:9f:2d:f3:f7:37:c8:a8:80:e8:24:
                    8e:fa:01:ac:72:8b:f9:07:af:1d:c7:11:31:f7:31:
                    e6:1f:68:65:cd:2b:3a:20:f6:34:7f:2b:08:62:96:
                    80:03:b8:8a:81:51:81:b0:a9:1e:55:91:d4:e7:79:
                    72:64:35:39:1a:c8:7a:87:ce:e9:96:98:f7:a4:c1:
                    44:37:94:4d:63:a4:e6:95:b2:23:38:58:7a:88:a2:
                    f1:d1:d3:57:9d:f5:fa:69:e8:21:cf:3e:bc:a6:f1:
                    eb:9b:65:41:dd:09:54:2b:94:f8:b4:7e:7b:71:8c:
                    0f:49:cf:3c:90:f2:c1:57:ef:70:7b:0f:b4:83:25:
                    58:05:3e:95:1c:1d:3a:0f:b0:eb:55:3f:76:c8:cc:
                    79:bd:be:72:f4:ad:e5:99:57:78:fc:d5:ee:eb:9d:
                    31:6c:f6:ac:a5:b5:03:74:b7:06:4a:fa:77:80:98:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BD:BD:70:97:98:05:B5:9D:CD:20:A6:98:D3:4B:7A:1F:29:E4:EA
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:af:00:e6:ae:d2:ba:3e:bb:e6:c4:72:1c:d2:87:f9:31:9d:
         11:58:29:e6:37:7b:e1:83:6b:7d:cb:c3:8d:8e:84:13:e5:07:
         c4:38:ba:a0:b3:76:7b:f7:21:4a:90:3d:1d:f5:60:72:da:8c:
         bf:a2:e5:8c:ea:51:a5:aa:ff:a3:2c:ba:1d:2f:5a:41:35:54:
         0e:69:17:ee:51:40:0b:21:5e:f9:a0:72:f8:1d:87:8f:b3:e9:
         4b:47:5c:48:1a:76:be:a9:da:44:ef:d8:31:9d:12:2a:c0:9c:
         38:61:57:5b:9c:fd:87:c2:4f:e0:84:52:2e:42:4c:06:f7:a3:
         cb:c5:fa:57:81:2d:cf:f6:03:77:d8:1f:c1:8f:b2:23:aa:44:
         2e:93:a9:d7:52:8f:a0:f9:eb:61:27:47:38:dd:10:9f:28:f3:
         33:44:9e:fe:cf:f5:5a:58:d3:fd:40:89:7a:e4:a7:b1:e2:99:
         92:6a:d4:8d:c7:50:8f:9c:3b:57:53:81:8f:ce:60:b1:8e:98:
         c4:aa:92:7c:5e:20:9a:d9:d3:7c:21:3f:de:2c:91:07:ec:f7:
         5d:65:6d:62:e1:e8:ad:be:b1:6a:17:57:2c:ca:f0:91:38:16:
         16:d5:a7:5c:b8:61:ee:23:38:de:b6:8a:d5:07:41:13:42:04:
         70:8f:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:38 2026 by rpki-client