This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa
File:                     34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa (raw, json)
Hash identifier:          4r/Ycb2It+axZdCPW4Gpw/M49d95d7cextIQ5hDQMwg=
Subject key identifier:   9C:E8:42:2D:D1:14:B4:72:AE:E1:93:4C:84:4C:69:E4:8D:A6:96:24
Certificate issuer:       /CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
Certificate serial:       3C298AF9C47FC587F085DBDF0DFF8A8AB2FC24E1
Authority key identifier: 2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa
Signing time:             Tue 06 Jan 2026 19:00:57 +0000
ROA not before:           Tue 06 Jan 2026 18:55:57 +0000
ROA not after:            Tue 05 Jan 2027 19:00:57 +0000
asID:                     267707
IP address blocks:        45.163.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:29:8a:f9:c4:7f:c5:87:f0:85:db:df:0d:ff:8a:8a:b2:fc:24:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD
        Validity
            Not Before: Jan  6 18:55:57 2026 GMT
            Not After : Jan  5 19:00:57 2027 GMT
        Subject: CN=9CE8422DD114B472AEE1934C844C69E48DA69624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:7f:84:a5:d5:73:57:a8:2d:18:e1:d1:da:
                    bc:65:e2:44:22:5f:29:06:60:23:30:60:2f:ac:e0:
                    bf:57:3c:37:c2:a7:95:a2:6a:d7:38:52:07:f6:49:
                    35:32:05:45:5e:2f:b4:78:ba:14:fe:39:66:b6:84:
                    91:33:0e:69:60:63:7e:ba:80:21:de:47:db:97:57:
                    b8:69:4c:45:d5:a9:70:68:e2:ae:55:ca:cd:ed:6e:
                    f6:ca:6f:5d:49:43:2d:80:d7:b6:c7:d0:58:26:cb:
                    07:5b:6c:cc:92:f2:be:36:7e:71:e4:33:b4:3c:05:
                    bf:3c:e6:d6:84:ab:05:52:52:50:cb:c7:81:5d:c4:
                    92:f2:c0:c3:f9:eb:0e:ea:5f:01:3e:70:a9:9b:ff:
                    3a:8f:fe:65:4c:3e:ea:d8:32:7f:a1:1e:b5:5f:ae:
                    fc:45:f0:5a:37:67:44:35:3d:94:37:7e:3c:e3:e8:
                    3a:6d:87:76:35:f2:7c:da:fa:87:4f:2c:ed:3b:d9:
                    e2:df:28:6b:23:58:33:96:ab:3c:56:2e:01:fc:66:
                    5b:4a:22:41:ee:a6:e2:11:51:0c:7a:68:2b:d6:4d:
                    4e:db:67:a2:28:1d:75:34:01:05:bd:ef:ea:4c:8f:
                    a4:e3:19:a8:d6:4f:40:69:b5:a5:d3:89:b8:91:4d:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E8:42:2D:D1:14:B4:72:AE:E1:93:4C:84:4C:69:E4:8D:A6:96:24
            X509v3 Authority Key Identifier:
                keyid:2C:D0:A0:8E:07:C5:C1:ED:EA:6B:C3:DC:FD:0F:DF:2D:52:18:8A:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CD0A08E07C5C1EDEA6BC3DCFD0FDF2D52188ABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4893BA43BB764E43040B95B53EA05D9998BF8130A8A4E014E2CA42E026E869E8/0/34352e3136332e3234382e302f32322d3234203d3e20323637373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:6b:40:4f:d9:86:7d:1d:1e:ac:a1:dc:24:58:d7:21:5b:
         d1:2d:86:47:e5:8e:48:3c:5e:63:79:86:7f:6c:5d:18:17:c7:
         13:26:68:37:f8:19:99:be:92:3a:6b:c1:56:99:0e:c4:b0:a6:
         93:d4:78:70:23:ab:d3:75:8c:da:3f:34:a0:11:c5:65:71:3f:
         15:1c:67:92:fd:a5:4f:84:33:ac:e8:34:8d:4a:a4:69:bc:0c:
         d8:c7:6c:e2:1f:ec:3d:81:26:a7:d5:9d:31:2d:0c:f0:a3:81:
         2c:df:31:ca:d4:c7:4b:59:3c:fb:3b:ad:d3:2a:a3:90:21:3f:
         e0:81:89:4f:c2:76:1c:72:77:20:b8:87:f4:7e:ab:2e:9d:9f:
         29:8e:bb:44:47:88:28:d4:53:4d:bb:ba:dd:0a:35:6e:4c:a8:
         fd:85:47:cf:ee:47:d5:00:08:5b:21:68:53:96:a2:31:56:36:
         9f:c0:f1:ae:a6:fb:f3:3c:0c:a5:24:9b:60:fc:95:5c:ea:c9:
         a6:e2:73:e7:0e:ad:92:71:87:33:59:58:4e:1e:68:ae:f8:b6:
         5d:27:64:51:1c:73:c5:6b:ab:af:cd:ce:0d:3a:46:ca:e3:c5:
         a9:0d:aa:8d:da:43:60:5a:5e:c1:14:8e:08:a3:06:65:35:31:
         0b:f5:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:53 2026 by rpki-client