This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa
File:                     34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa (raw, json)
Hash identifier:          A7rIxpUX1b6wkWtP1jUDuP6BfjwLaIPcLdal0XTLrQI=
Subject key identifier:   29:93:E2:E1:FD:96:AA:F5:69:FF:AA:F7:4F:A1:A8:72:53:B6:6F:26
Certificate issuer:       /CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
Certificate serial:       30CE629F7A3E3D537E9465B890B53E7ED84D837C
Authority key identifier: 55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa
Signing time:             Tue 06 Jan 2026 19:12:18 +0000
ROA not before:           Tue 06 Jan 2026 19:07:18 +0000
ROA not after:            Tue 05 Jan 2027 19:12:18 +0000
asID:                     267833
IP address blocks:        45.175.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ce:62:9f:7a:3e:3d:53:7e:94:65:b8:90:b5:3e:7e:d8:4d:83:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
        Validity
            Not Before: Jan  6 19:07:18 2026 GMT
            Not After : Jan  5 19:12:18 2027 GMT
        Subject: CN=2993E2E1FD96AAF569FFAAF74FA1A87253B66F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:88:00:de:e9:61:73:b3:31:ad:80:50:c4:
                    8c:a7:9b:c1:ee:61:98:83:bf:73:a7:53:2b:57:23:
                    8e:91:a4:8b:35:4e:22:f5:9a:88:1e:2c:fd:1f:7f:
                    ce:06:2e:47:96:b5:e4:11:db:70:ec:d4:03:e4:c5:
                    e4:15:d3:86:96:2e:24:74:a4:44:87:bb:3e:df:26:
                    ff:cf:fd:3a:d7:de:27:7e:72:ab:97:69:0d:c1:d6:
                    25:a1:b1:d8:09:58:6b:25:dd:6d:eb:15:4c:61:08:
                    24:08:7a:53:81:03:ca:ad:89:c6:37:4a:72:8d:19:
                    db:9b:60:de:fc:60:b5:1d:d5:b4:d3:54:eb:0d:2f:
                    df:b2:a8:4f:b0:d1:5c:57:5d:2d:ba:a1:bd:0a:58:
                    8d:a2:b0:ef:0c:15:60:e4:ff:10:6e:0f:39:02:1a:
                    d9:5a:52:07:6c:dc:54:30:c9:76:68:8a:4d:30:a2:
                    4c:f0:33:9b:03:2e:07:3d:57:fe:55:2a:b8:42:20:
                    dd:1b:89:e9:4c:da:00:6e:a7:8e:e3:e1:4d:63:73:
                    9f:cb:31:af:67:4a:fb:71:e4:13:b5:02:1e:e4:4f:
                    a8:ae:ab:b9:23:8b:c6:fa:24:b2:28:4b:54:cf:86:
                    7c:79:e8:35:ef:66:5b:66:75:a3:27:7e:a0:cb:c5:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:E2:E1:FD:96:AA:F5:69:FF:AA:F7:4F:A1:A8:72:53:B6:6F:26
            X509v3 Authority Key Identifier:
                keyid:55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:4a:67:d5:45:de:01:83:8f:7d:4f:b3:a5:48:a6:36:48:32:
         7a:72:a5:f8:9e:1a:65:f2:83:6f:00:d1:55:30:1a:03:19:34:
         45:cd:02:c6:09:44:ff:c9:0c:53:e9:84:49:00:01:5d:3c:2d:
         6b:3b:b6:36:0c:67:04:3e:bd:79:84:fe:ec:ed:9c:90:74:31:
         da:0d:be:e2:7f:57:73:22:f9:f5:c6:86:bb:23:1f:77:e5:33:
         5c:da:78:1a:f7:30:8c:22:6e:08:53:c6:13:ec:2a:ed:0b:bc:
         42:0b:ac:a0:0b:bd:0c:43:96:be:07:74:88:51:9f:9e:ba:7b:
         dc:21:da:a6:81:fa:0c:8a:02:9f:9e:4e:ae:dd:df:c5:53:0c:
         28:52:3b:3c:03:d4:c3:ab:99:10:84:50:be:e5:5e:7f:d7:51:
         10:c8:3c:ff:72:a2:2c:80:f8:c8:38:82:6c:82:ae:55:1e:2c:
         a1:04:98:a8:dc:aa:ef:b0:84:32:28:9e:ba:c2:82:42:fe:81:
         b8:c2:a3:54:0b:fe:49:30:6e:3f:e6:8d:1b:c1:9f:76:d5:f3:
         f3:06:10:4a:4e:27:46:a0:26:22:ce:0f:08:04:3d:a1:aa:36:
         79:70:3b:64:69:84:85:a6:eb:63:9c:d5:17:41:2f:38:7f:ab:
         c3:74:6a:13
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMM5in3o+PVN+lGW4kLU+fthNg3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUwQzZCRTc2MEI1REY2MTM1OUYyQ0Q5NTRBMEU5NTM3
MjgzNUYyQzAeFw0yNjAxMDYxOTA3MThaFw0yNzAxMDUxOTEyMThaMDMxMTAvBgNV
BAMTKDI5OTNFMkUxRkQ5NkFBRjU2OUZGQUFGNzRGQTFBODcyNTNCNjZGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZIgA3ulhc7MxrYBQxIynm8Hu
YZiDv3OnUytXI46RpIs1TiL1mogeLP0ff84GLkeWteQR23Ds1APkxeQV04aWLiR0
pESHuz7fJv/P/TrX3id+cquXaQ3B1iWhsdgJWGsl3W3rFUxhCCQIelOBA8qticY3
SnKNGdubYN78YLUd1bTTVOsNL9+yqE+w0VxXXS26ob0KWI2isO8MFWDk/xBuDzkC
GtlaUgds3FQwyXZoik0wokzwM5sDLgc9V/5VKrhCIN0bielM2gBup47j4U1jc5/L
Ma9nSvtx5BO1Ah7kT6iuq7kji8b6JLIoS1TPhnx56DXvZltmdaMnfqDLxdNVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKZPi4f2WqvVp/6r3T6GoclO2byYwHwYDVR0j
BBgwFoAUVQxr52C132E1nyzZVKDpU3KDXywwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QTVEQjI1NEU4NjQzQTVCMUYxRUI4MUU4OUNFMDM5Q0Yz
MzQxQjA3NTRBNDY1MjJCNjVFQjQ0NzdDMzQwMjlELzAvNTUwQzZCRTc2MEI1REY2
MTM1OUYyQ0Q5NTRBMEU5NTM3MjgzNUYyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NTBDNkJFNzYwQjVERjYxMzU5
RjJDRDk1NEEwRTk1MzcyODM1RjJDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUE1REIyNTRFODY0M0E1QjFGMUVCODFFODlDRTAzOUNGMzM0MUIwNzU0
QTQ2NTIyQjY1RUI0NDc3QzM0MDI5RC8wLzM0MzUyZTMxMzczNTJlMzEzMDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzgzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa9k
MA0GCSqGSIb3DQEBCwUAA4IBAQCJSmfVRd4Bg499T7OlSKY2SDJ6cqX4nhpl8oNv
ANFVMBoDGTRFzQLGCUT/yQxT6YRJAAFdPC1rO7Y2DGcEPr15hP7s7ZyQdDHaDb7i
f1dzIvn1xoa7Ix935TNc2nga9zCMIm4IU8YT7CrtC7xCC6ygC70MQ5a+B3SIUZ+e
unvcIdqmgfoMigKfnk6u3d/FUwwoUjs8A9TDq5kQhFC+5V5/11EQyDz/cqIsgPjI
OIJsgq5VHiyhBJio3KrvsIQyKJ66woJC/oG4wqNUC/5JMG4/5o0bwZ921fPzBhBK
TidGoCYizg8IBD2hqjZ5cDtkaYSFputjnNUXQS84f6vDdGoT
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:08:03 2026 by rpki-client