This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
File:                     34352e342e3230342e302f32332d3233203d3e20313938363336.roa (raw, json)
Hash identifier:          fRq7/M0OaPyQNmOI9hA3+nL270qcPSsxzgFcXbPNV/g=
Subject key identifier:   A3:8B:EB:22:CA:E9:70:62:B7:01:5A:E5:CE:F7:EC:C8:C0:CF:78:F3
Certificate issuer:       /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial:       5914BD3F784188642C99AB20D44F8A6106A4CDEA
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
Signing time:             Tue 06 Jan 2026 19:17:39 +0000
ROA not before:           Tue 06 Jan 2026 19:12:39 +0000
ROA not after:            Tue 05 Jan 2027 19:17:39 +0000
asID:                     198636
IP address blocks:        45.4.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:14:bd:3f:78:41:88:64:2c:99:ab:20:d4:4f:8a:61:06:a4:cd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
        Validity
            Not Before: Jan  6 19:12:39 2026 GMT
            Not After : Jan  5 19:17:39 2027 GMT
        Subject: CN=A38BEB22CAE97062B7015AE5CEF7ECC8C0CF78F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:2c:cd:49:04:d8:bc:55:65:37:cb:5c:17:
                    c0:83:5b:6b:9c:96:f8:6c:16:8b:b2:64:8b:0d:7a:
                    0e:52:9a:9e:93:25:2a:6e:7f:44:c2:32:b4:83:ca:
                    2e:5e:db:be:e6:ee:05:55:8a:92:29:04:c3:ea:16:
                    9b:a4:63:f5:ea:44:c6:e5:2d:19:1b:05:12:8b:96:
                    55:05:e4:a1:e6:96:04:4b:7a:64:8a:53:10:66:e5:
                    3b:99:67:93:bd:45:2a:7d:af:ee:41:1f:aa:8d:e4:
                    e4:77:66:5c:33:31:26:c2:20:5b:58:aa:67:3f:2c:
                    03:20:c5:df:ca:02:4b:4c:90:11:24:c0:3a:02:66:
                    33:e2:b5:20:54:36:a1:86:2c:e8:dc:67:e7:0f:44:
                    92:8e:76:e7:f8:ba:dd:bc:20:a6:2a:58:ab:03:91:
                    df:d5:fa:32:3b:2b:dc:7a:24:c0:5f:a2:df:18:38:
                    33:b4:53:c3:a2:d8:2c:c2:3f:08:cb:d4:db:de:23:
                    64:e3:4d:23:85:ea:89:30:25:ea:7a:b5:ea:e9:df:
                    1e:c7:8f:b3:2a:a1:6d:36:03:d2:2c:57:71:63:33:
                    69:e5:1a:7c:5d:1a:fb:0b:50:13:a5:81:d3:f3:4d:
                    ef:e6:ef:6e:ae:be:c2:8f:5d:cf:e7:15:7f:e1:a7:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:EB:22:CA:E9:70:62:B7:01:5A:E5:CE:F7:EC:C8:C0:CF:78:F3
            X509v3 Authority Key Identifier:
                keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:dd:4d:25:e9:fc:1f:22:05:d8:6d:d5:f8:92:c3:b0:56:
         24:6f:0c:d3:35:b9:63:3e:df:be:2f:1e:af:7c:9d:db:cb:96:
         85:cf:d0:68:56:97:87:dd:db:f5:62:73:de:76:c3:af:1f:b8:
         8f:5f:24:7d:4c:a7:55:12:e7:76:77:c3:80:74:74:b0:f2:28:
         49:f2:a1:c6:95:d4:71:eb:00:c1:00:8a:1a:37:76:89:bd:fe:
         96:9f:00:d4:63:95:b4:6b:3b:4e:2a:ed:67:a8:8f:2a:e0:c5:
         11:d0:0b:95:95:1c:66:74:35:e1:14:30:82:5d:13:2e:68:f7:
         b5:e7:f0:7b:22:e4:73:9d:80:8d:f5:4f:39:49:ca:63:0b:48:
         cd:d7:e4:6e:a8:77:c2:49:78:24:37:45:70:d4:b8:4b:77:73:
         60:18:42:f0:a4:89:2e:1c:db:3b:56:0f:f1:51:74:0c:17:58:
         17:63:05:8d:42:33:f7:c2:2f:e2:99:ad:84:4e:67:ce:56:9d:
         ca:69:40:bb:1b:a2:82:6a:ea:55:f6:5f:ce:62:9e:33:b4:93:
         65:03:48:5b:bd:65:ee:7f:60:ad:c7:82:26:d0:1b:9b:a5:01:
         62:fe:b5:a0:ea:56:6c:70:8e:00:ed:63:93:76:77:68:73:f5:
         20:93:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:54 2026 by rpki-client