This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa
File:                     34352e352e36302e302f32322d3234203d3e20323632313834.roa (raw, json)
Hash identifier:          ZO112V5XGuXkqa+a071J5evfqbrcYA8fJRIJWR4aeOk=
Subject key identifier:   A8:5F:3B:E9:2F:D4:B9:9E:92:84:D3:0F:80:E0:8B:7A:A0:60:B1:90
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       168E310E4688D7EC88A8A6DAEFEFF320ED182ACC
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa
Signing time:             Tue 06 Jan 2026 20:48:25 +0000
ROA not before:           Tue 06 Jan 2026 20:43:25 +0000
ROA not after:            Tue 05 Jan 2027 20:48:25 +0000
asID:                     262184
IP address blocks:        45.5.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:31:0e:46:88:d7:ec:88:a8:a6:da:ef:ef:f3:20:ed:18:2a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Jan  6 20:43:25 2026 GMT
            Not After : Jan  5 20:48:25 2027 GMT
        Subject: CN=A85F3BE92FD4B99E9284D30F80E08B7AA060B190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:4a:77:29:18:bc:6a:43:fb:02:ad:3b:ea:
                    7d:2a:32:73:4c:b0:f0:23:ed:9f:75:51:f4:54:99:
                    27:59:68:a3:16:80:63:9c:c6:06:a1:9a:c0:48:e6:
                    ab:ae:66:19:fb:7f:b1:8a:ed:a1:29:8f:08:4f:a8:
                    91:3b:c9:5f:dc:04:36:31:b9:10:de:28:de:57:16:
                    8f:f8:af:89:ce:eb:f3:dd:8b:38:28:80:31:44:70:
                    87:23:70:4b:82:55:8b:2b:e6:d9:31:a6:ac:f7:d2:
                    05:af:7c:35:72:68:58:7d:96:08:cc:a3:c5:e3:b2:
                    2e:d7:3d:e9:49:43:8b:b7:d2:fb:3b:e6:ed:a5:e2:
                    7b:c8:7d:c1:53:03:d5:98:5e:10:a4:f9:45:75:87:
                    f1:44:5e:fc:14:0b:da:cc:c4:6f:70:6e:fb:36:11:
                    a9:24:b3:e7:5d:4c:c6:4c:2b:25:e9:c1:cc:18:8c:
                    78:af:fc:5a:59:6f:68:11:ea:c2:60:54:8b:42:05:
                    a2:99:64:83:9e:47:93:8f:04:35:82:2e:51:ef:6a:
                    97:0a:88:db:9b:8e:7f:16:d8:ee:fb:ea:1c:0f:80:
                    6b:5a:c1:fa:37:d9:09:8a:7b:90:ee:db:46:ee:8c:
                    3e:ee:cf:15:73:f1:08:da:02:a0:b5:e4:94:15:b1:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:3B:E9:2F:D4:B9:9E:92:84:D3:0F:80:E0:8B:7A:A0:60:B1:90
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:ec:07:b0:62:07:e6:a9:7b:8f:cf:9a:51:b2:ed:b9:84:d2:
         8b:b6:3e:58:6b:b6:44:e9:75:55:2f:2e:6b:3e:89:9b:5e:17:
         a2:09:1a:f8:49:09:04:96:d3:b8:5e:a5:fd:e1:c4:df:be:50:
         27:30:6f:0a:c4:aa:80:20:af:49:60:35:bf:a1:2e:7a:91:d0:
         b7:99:64:9d:88:65:98:ef:ce:89:69:d6:9b:1b:55:b3:5d:44:
         ff:b0:a9:f1:1b:7b:5b:59:47:81:cd:1c:0e:2e:ec:a9:df:87:
         65:b7:38:e9:a8:d6:5d:a3:01:59:e5:51:dc:9f:3c:f5:01:06:
         c8:15:66:75:9f:7a:be:fc:19:76:5b:25:90:e8:c6:38:76:2f:
         40:d2:a4:0d:70:d4:1b:a6:76:cd:1f:6e:fb:d9:15:07:ef:19:
         65:74:f8:ca:24:d3:22:9d:00:fd:c0:a1:6d:ef:f2:f4:91:24:
         fc:3d:05:fe:86:3f:89:2d:69:00:6d:71:21:52:94:0b:9d:c3:
         db:3e:e1:a4:f5:d4:45:a5:b4:69:fd:20:c4:68:30:d4:a0:36:
         d4:f4:e8:44:53:68:dc:ef:ea:c4:1f:a4:95:d0:34:31:80:1d:
         d2:28:0a:cf:1e:e6:d2:8c:42:da:f1:3a:eb:a2:7a:9f:83:9a:
         9f:78:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:59 2026 by rpki-client