This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
File:                     34352e342e3230362e302f32332d3233203d3e20323635363731.roa (raw, json)
Hash identifier:          JIDRRk8Y0W2gblZtnCR2Ap80cb7BipBcZtSvTXdCyZo=
Subject key identifier:   15:EE:BB:6A:FF:F8:E5:FE:5B:9C:48:CB:80:ED:74:EC:6C:EE:30:9C
Certificate issuer:       /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial:       3C7FE27FEBFE6C378DA995AA7B4D4D21E74697A9
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
Signing time:             Tue 06 Jan 2026 19:17:38 +0000
ROA not before:           Tue 06 Jan 2026 19:12:38 +0000
ROA not after:            Tue 05 Jan 2027 19:17:38 +0000
asID:                     265671
IP address blocks:        45.4.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7f:e2:7f:eb:fe:6c:37:8d:a9:95:aa:7b:4d:4d:21:e7:46:97:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
        Validity
            Not Before: Jan  6 19:12:38 2026 GMT
            Not After : Jan  5 19:17:38 2027 GMT
        Subject: CN=15EEBB6AFFF8E5FE5B9C48CB80ED74EC6CEE309C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:2f:c2:44:56:91:d5:8d:69:9f:43:04:78:
                    f1:aa:c8:fa:7e:7f:e6:84:f0:69:68:11:1c:87:c0:
                    cb:19:36:04:00:fc:91:a9:7c:a9:73:6b:06:ea:7e:
                    85:d0:ec:4c:fd:5a:5c:3f:1e:54:68:66:e8:87:f6:
                    6a:26:47:d9:0e:4e:c4:42:e5:ef:7e:11:56:1c:f5:
                    84:f2:a0:c9:67:86:57:e0:3a:36:fc:27:d9:72:97:
                    b0:4f:4e:a2:ae:f4:60:16:c1:35:e1:60:0a:80:dd:
                    f0:87:36:eb:a7:bb:53:8a:2b:9e:a1:d4:44:34:4a:
                    a2:c4:e4:e2:19:cc:49:0b:31:f4:17:42:00:3e:fd:
                    01:ab:b5:7f:ac:82:08:5d:9b:24:dd:d7:bf:6e:4a:
                    27:e4:84:51:d7:d5:b9:4d:81:a1:ee:09:fd:33:1d:
                    7c:3c:b2:1a:35:ad:ad:a8:12:97:b6:22:96:70:2c:
                    c0:7b:14:c3:c7:ee:20:32:9c:94:b8:2e:e2:c6:40:
                    14:9d:05:5f:3d:bb:d7:91:b8:b7:69:76:6a:42:a5:
                    91:42:fb:6b:b8:8b:63:5a:32:0f:0c:88:e0:9f:a7:
                    2f:f3:ff:79:d0:ef:b3:d4:07:fd:46:af:5a:97:4b:
                    df:ec:6a:ee:f6:f7:31:83:65:0d:94:40:ce:f9:22:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EE:BB:6A:FF:F8:E5:FE:5B:9C:48:CB:80:ED:74:EC:6C:EE:30:9C
            X509v3 Authority Key Identifier:
                keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:62:2a:f5:d6:e2:f6:58:07:fb:b8:cf:74:95:73:bd:94:6f:
         ef:3d:a4:fe:a6:e9:c4:bf:73:52:cb:06:72:b5:f1:70:96:63:
         30:98:54:2a:ab:c1:48:00:70:85:f7:c9:a6:ad:0a:0e:6d:c0:
         80:41:b9:0a:91:2e:95:dc:b2:bc:88:16:e4:fa:da:fd:ee:17:
         14:a2:71:7a:32:00:eb:af:65:51:f2:57:fd:f3:d1:ff:d0:5c:
         f1:20:d8:c4:94:c7:38:22:14:f9:8c:92:25:9a:51:bc:cf:96:
         11:1d:57:e7:e8:9f:a0:7c:40:0f:06:0e:57:44:77:a1:ec:e4:
         55:80:88:56:2f:06:a3:d6:92:9f:52:ea:db:9b:58:81:35:ae:
         76:13:94:69:d0:42:4d:29:31:08:f7:aa:64:59:73:2f:d4:73:
         8f:85:e5:c1:ab:11:da:4e:c5:3a:94:77:88:d2:fc:60:2b:2c:
         61:f7:c0:72:63:26:53:b9:aa:9c:12:48:c8:5d:39:91:68:ea:
         8c:54:60:de:85:8c:fe:96:99:e0:27:eb:cf:1a:44:71:7b:fd:
         ed:05:36:a4:ba:77:2a:1c:53:1e:39:7b:57:c9:77:e9:83:60:
         8d:51:9c:7c:3e:0a:57:01:d8:bc:fb:c7:07:56:4d:a3:db:21:
         6d:37:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:03:51 2026 by rpki-client