This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa
File:                     34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa (raw, json)
Hash identifier:          HhJcFl/XAD+jdVjSUKx3qt8briyw2dKVtdMQ6tC/8/w=
Subject key identifier:   46:31:9F:F3:41:0A:3D:4A:8B:FE:D5:3E:8C:22:6E:04:43:87:E7:95
Certificate issuer:       /CN=F2D984797761DD64A44525AE66E4144A283AF5A1
Certificate serial:       0C202722B07DB144654044CC631B1435DCA36DE3
Authority key identifier: F2:D9:84:79:77:61:DD:64:A4:45:25:AE:66:E4:14:4A:28:3A:F5:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D984797761DD64A44525AE66E4144A283AF5A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa
Signing time:             Tue 06 Jan 2026 19:00:02 +0000
ROA not before:           Tue 06 Jan 2026 18:55:02 +0000
ROA not after:            Tue 05 Jan 2027 19:00:02 +0000
asID:                     269747
IP address blocks:        45.182.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/F2D984797761DD64A44525AE66E4144A283AF5A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/F2D984797761DD64A44525AE66E4144A283AF5A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D984797761DD64A44525AE66E4144A283AF5A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:27:22:b0:7d:b1:44:65:40:44:cc:63:1b:14:35:dc:a3:6d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D984797761DD64A44525AE66E4144A283AF5A1
        Validity
            Not Before: Jan  6 18:55:02 2026 GMT
            Not After : Jan  5 19:00:02 2027 GMT
        Subject: CN=46319FF3410A3D4A8BFED53E8C226E044387E795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:c6:56:68:45:7f:91:35:8b:b4:9e:28:e5:
                    9e:b9:48:b2:fd:91:f2:0f:dc:0d:cd:00:bb:9f:85:
                    2e:ff:22:60:22:5f:fd:c3:27:8b:2f:2d:1d:f7:6d:
                    fd:76:a5:2d:76:34:49:95:51:89:1c:e1:f7:98:24:
                    8d:08:6f:5d:ee:67:4b:7f:13:46:40:f9:24:dc:17:
                    99:51:6c:46:fd:b7:c3:07:6b:65:90:51:d0:cb:e6:
                    38:fe:23:bc:96:f2:89:dc:84:12:a8:6d:58:d4:15:
                    f7:db:47:d3:a4:16:ad:1e:72:3f:55:52:b5:43:95:
                    f4:01:f8:17:72:ad:42:f6:28:b3:73:68:43:6c:9d:
                    0c:7a:10:4b:17:bb:7d:b1:63:09:eb:97:f9:d6:68:
                    67:90:48:c8:7e:50:1b:3e:ad:e9:9e:49:82:68:21:
                    dc:fb:86:bc:53:f1:be:f5:90:fa:d6:34:aa:af:c9:
                    02:ac:4a:8f:59:ad:38:1e:15:2b:6c:14:98:6a:7a:
                    53:1a:0c:e2:ba:f6:3c:7a:63:a2:94:c3:c3:30:82:
                    3a:8f:0a:14:0d:c1:f8:b6:d6:20:82:9a:c8:dc:5c:
                    cf:32:a1:d6:3a:ef:da:be:8b:cf:9d:f9:f6:84:57:
                    31:cf:fd:dd:24:28:97:c8:28:e5:5b:37:8d:11:b1:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:31:9F:F3:41:0A:3D:4A:8B:FE:D5:3E:8C:22:6E:04:43:87:E7:95
            X509v3 Authority Key Identifier:
                keyid:F2:D9:84:79:77:61:DD:64:A4:45:25:AE:66:E4:14:4A:28:3A:F5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/F2D984797761DD64A44525AE66E4144A283AF5A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D984797761DD64A44525AE66E4144A283AF5A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:5b:87:a7:a6:60:37:52:81:cf:3c:85:58:45:95:67:e3:
         38:d0:0c:55:d6:17:a7:3a:8d:42:e6:a7:31:05:f8:72:07:1a:
         f4:23:76:83:bc:83:b3:49:fd:65:f9:7c:bb:4e:01:3b:c4:43:
         86:64:e1:12:87:4b:06:92:3b:e9:6e:74:c4:08:27:68:35:f4:
         2f:6e:d3:a7:db:bb:5e:08:7a:77:58:7d:85:87:8b:c0:4d:67:
         16:48:39:5b:d7:a2:7f:ae:8f:31:05:eb:c8:d2:94:0d:ac:c5:
         f9:3d:f3:3d:f1:51:d8:9a:52:11:36:f8:ef:19:26:99:2b:95:
         db:76:25:9c:ea:ae:97:70:5c:12:fb:85:e4:46:cf:7b:01:55:
         0b:0f:80:0a:97:4f:8b:69:b4:38:a8:6e:92:a5:82:b4:fa:87:
         f5:10:63:46:05:2b:04:db:f7:77:c8:1b:15:e3:fe:91:38:b3:
         2b:f7:0e:fa:02:4b:49:0f:d9:2c:b5:19:c4:8d:ce:cc:52:cc:
         14:56:3c:9b:16:c7:05:4b:4e:85:24:29:14:52:48:14:81:61:
         4b:6e:a3:f5:3e:49:85:08:9b:44:cd:bc:f0:e5:7a:61:92:a9:
         e1:eb:aa:79:76:2d:b2:64:0b:da:44:e7:98:ed:d2:0b:9a:2b:
         5a:df:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:48 2026 by rpki-client