This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa
File:                     34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa (raw, json)
Hash identifier:          /I9ROJ+EYoMkn4WU523wpgLYDK8R8q95y02oRQ0WESs=
Subject key identifier:   0B:67:5B:BC:D2:E2:A3:BF:A7:1F:DD:73:E2:31:E0:0E:65:AA:14:B4
Certificate issuer:       /CN=A21FE834C0EE69DF7913D5ED884800CC38D73955
Certificate serial:       2D436B08E85E517BFE3DE3B313139FDD5100A0E2
Authority key identifier: A2:1F:E8:34:C0:EE:69:DF:79:13:D5:ED:88:48:00:CC:38:D7:39:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa
Signing time:             Tue 06 Jan 2026 18:58:39 +0000
ROA not before:           Tue 06 Jan 2026 18:53:39 +0000
ROA not after:            Tue 05 Jan 2027 18:58:39 +0000
asID:                     269741
IP address blocks:        45.181.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:43:6b:08:e8:5e:51:7b:fe:3d:e3:b3:13:13:9f:dd:51:00:a0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21FE834C0EE69DF7913D5ED884800CC38D73955
        Validity
            Not Before: Jan  6 18:53:39 2026 GMT
            Not After : Jan  5 18:58:39 2027 GMT
        Subject: CN=0B675BBCD2E2A3BFA71FDD73E231E00E65AA14B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:04:99:1e:95:33:b0:24:f5:b8:57:e9:28:
                    0f:ab:93:05:55:94:44:1c:86:4c:cb:db:69:0f:02:
                    52:dc:9f:f8:6e:f4:df:11:6e:8e:b2:cb:c5:16:8c:
                    17:d9:4c:6d:3e:82:3e:68:9d:b2:fc:7b:a0:55:ac:
                    51:55:ae:e2:5f:9b:49:e4:e9:4c:03:56:d0:2d:72:
                    c3:ff:b9:b0:6e:08:00:fd:e2:0a:50:ae:d6:3b:c6:
                    2e:5c:a8:f6:3b:f9:55:2a:ac:dd:ef:91:96:55:fd:
                    67:59:47:dd:b7:47:d8:42:ab:a7:de:cb:23:07:28:
                    c8:2f:5a:11:09:13:46:e8:15:63:e1:57:14:0a:28:
                    00:ea:c8:30:85:6a:ba:17:dc:dc:17:a9:b3:c6:79:
                    74:6c:a1:ca:d7:68:5e:05:07:6e:03:13:46:bf:8e:
                    6c:19:83:c5:42:af:76:31:f1:c1:f5:de:34:23:b1:
                    a7:69:4c:a8:89:1e:f1:d9:27:0f:c0:11:93:20:91:
                    3e:0a:03:80:8c:94:84:f1:3a:3e:87:f4:6a:11:25:
                    25:b3:9c:40:e5:1b:29:99:9a:08:28:ed:5c:36:0f:
                    aa:ff:bf:02:47:c9:20:d1:e9:d2:e5:f3:d5:55:0e:
                    2d:43:8d:ef:c8:b6:eb:47:bb:eb:f9:f0:ec:f2:7b:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:5B:BC:D2:E2:A3:BF:A7:1F:DD:73:E2:31:E0:0E:65:AA:14:B4
            X509v3 Authority Key Identifier:
                keyid:A2:1F:E8:34:C0:EE:69:DF:79:13:D5:ED:88:48:00:CC:38:D7:39:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:27:f2:ed:bb:f1:42:05:cf:66:eb:0b:f6:59:ba:2d:c8:
         2c:ca:a1:51:d5:0e:8d:46:af:0a:45:47:28:a5:fa:c8:3e:2e:
         c5:dc:95:7f:83:5d:c9:45:89:e4:c0:63:9c:59:e7:09:5d:f2:
         81:99:b4:97:82:77:b8:73:98:69:e5:07:a4:ee:1d:dd:77:c3:
         d5:0e:25:c4:17:f9:88:98:bb:41:95:91:b7:ca:b4:62:a1:5d:
         11:a4:80:0e:87:da:40:5a:74:da:1d:78:04:9b:f2:02:3d:6a:
         66:59:4c:f0:a1:3d:d3:cf:0c:e0:6d:b9:17:63:1d:38:79:30:
         65:83:e4:05:63:f3:8f:51:11:e3:51:81:f6:cb:3e:ab:f3:7a:
         e4:a4:3c:a4:dd:42:39:0c:0c:85:7e:01:b7:76:fc:ff:6e:d8:
         a7:58:46:89:bd:7f:b5:32:ad:26:50:35:bb:a7:09:2e:e0:ea:
         bf:2f:95:4e:41:cd:0a:a1:4d:d8:b9:9a:e3:a2:5d:4f:44:4e:
         18:cd:51:97:60:bc:93:de:3d:44:94:3b:bd:dd:da:a0:bc:22:
         c5:c1:f1:a9:e5:58:29:fa:dc:82:76:25:ff:00:be:94:64:af:
         4b:43:e1:3b:7d:6b:49:39:2a:ae:c4:3e:19:34:ec:97:1c:ff:
         e2:1f:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:08:42 2026 by rpki-client