This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/34352e3233372e34382e302f32322d3234203d3e20323636383135.roa
File:                     34352e3233372e34382e302f32322d3234203d3e20323636383135.roa (raw, json)
Hash identifier:          6PqMkEWouPdI+g44eTLuwLO1JXB5Co2ErpKwkXAQg/k=
Subject key identifier:   C2:D9:AB:CA:7A:58:81:C3:62:72:9D:5C:32:71:28:01:C6:E7:A4:ED
Certificate issuer:       /CN=8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251
Certificate serial:       3903494D4210F6BCC04957CD088E7B6F3F352A65
Authority key identifier: 87:16:FC:C1:EC:12:29:F4:CC:E3:91:7A:8A:D7:E8:FF:AD:D5:62:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/34352e3233372e34382e302f32322d3234203d3e20323636383135.roa
Signing time:             Tue 06 Jan 2026 19:06:30 +0000
ROA not before:           Tue 06 Jan 2026 19:01:30 +0000
ROA not after:            Tue 05 Jan 2027 19:06:30 +0000
asID:                     266815
IP address blocks:        45.237.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.crl
                          rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:03:49:4d:42:10:f6:bc:c0:49:57:cd:08:8e:7b:6f:3f:35:2a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251
        Validity
            Not Before: Jan  6 19:01:30 2026 GMT
            Not After : Jan  5 19:06:30 2027 GMT
        Subject: CN=C2D9ABCA7A5881C362729D5C32712801C6E7A4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:1a:f2:69:bb:0a:fb:00:20:0c:68:e4:08:
                    b7:6b:09:8d:7e:5c:24:fe:f3:f3:84:a5:ac:84:51:
                    ac:d8:4a:fc:9f:da:6e:e9:72:58:4f:2f:76:50:ec:
                    20:fa:fb:08:a2:46:3a:9f:9e:f9:29:87:f5:5e:c2:
                    69:a7:6b:ee:82:34:c9:12:9d:1d:00:15:0d:81:a9:
                    b3:f3:9c:c6:d2:95:fd:3f:a0:4d:8b:b7:30:49:5f:
                    60:6a:37:f5:42:a8:9b:57:f9:b4:5c:28:30:8f:f4:
                    1b:f9:55:ba:19:34:49:81:3d:05:85:fa:a9:34:fd:
                    c0:d6:dc:b7:2b:a2:a8:b0:e7:9c:3d:f6:c5:b0:06:
                    71:84:c7:78:b3:f7:87:b6:b6:f1:45:ae:87:7f:a9:
                    0a:3d:fc:1b:fe:58:2b:cb:fb:70:33:ca:3f:ac:19:
                    3a:b5:f1:ab:80:87:f2:6c:a4:6d:a7:a9:83:a1:b0:
                    61:71:68:26:21:68:66:4d:37:18:73:ca:86:6a:6d:
                    7f:e9:f2:65:10:1f:2a:d2:41:45:32:f8:79:91:79:
                    d8:0f:72:12:09:da:ce:43:68:24:a0:8d:76:d4:8f:
                    a0:d5:dc:ec:c8:93:2a:b5:8c:f4:ea:b3:27:fa:ad:
                    96:79:83:6b:8d:52:bd:e1:70:b6:fa:a5:3a:26:f2:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:AB:CA:7A:58:81:C3:62:72:9D:5C:32:71:28:01:C6:E7:A4:ED
            X509v3 Authority Key Identifier:
                keyid:87:16:FC:C1:EC:12:29:F4:CC:E3:91:7A:8A:D7:E8:FF:AD:D5:62:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/34352e3233372e34382e302f32322d3234203d3e20323636383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d1:f8:15:bd:63:43:02:3f:3b:3a:7d:4d:bd:46:51:d3:fd:
         55:a0:2f:2e:32:0d:28:28:73:35:89:03:02:ae:44:87:c1:5b:
         2f:f0:a6:05:5a:09:bd:57:d1:d3:48:de:5a:70:f1:95:45:19:
         f6:12:77:fc:c9:1c:60:ae:c7:20:79:a1:11:6d:60:c0:63:7d:
         64:07:f5:3d:46:6a:cf:76:6d:38:31:09:54:67:01:68:53:69:
         23:2f:65:5e:50:04:e3:a3:19:cd:33:83:b0:b0:ec:a5:78:c4:
         25:0b:c6:5d:8c:e2:04:b7:95:b2:59:78:12:34:75:9a:b3:a5:
         68:89:e2:3b:ef:a5:88:6b:98:db:79:55:5e:b7:c9:a3:b7:8e:
         85:0e:80:ee:3f:93:61:d9:44:c5:a6:56:d4:99:05:c7:8d:37:
         8c:f9:2b:07:d6:14:e0:79:23:82:de:95:75:84:17:28:38:5b:
         77:64:7a:a7:cf:d0:ee:9d:65:14:18:17:e0:99:df:a4:0d:fc:
         3b:66:19:74:77:25:b7:0a:af:8f:62:04:a0:da:8a:26:17:f4:
         c6:d8:2b:7f:e4:44:8a:5f:a7:72:34:5d:ea:14:39:c2:fe:b4:
         af:8b:0c:32:15:0f:0f:97:48:fa:31:69:a1:d2:d5:97:47:58:
         98:9b:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:01 2026 by rpki-client