This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa
File:                     34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa (raw, json)
Hash identifier:          S8a8poJpa9u1/Ifya3ZCvWoizOK8Dj22NmyS16VNzp8=
Subject key identifier:   94:2E:4A:3C:C8:52:63:24:80:60:05:04:DE:50:4D:8A:A4:2E:E3:96
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       7F1AF3C815039C5E855079458434EC483383CBBB
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa
Signing time:             Tue 06 Jan 2026 19:22:45 +0000
ROA not before:           Tue 06 Jan 2026 19:17:45 +0000
ROA not after:            Tue 05 Jan 2027 19:22:45 +0000
asID:                     269746
IP address blocks:        45.181.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1a:f3:c8:15:03:9c:5e:85:50:79:45:84:34:ec:48:33:83:cb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Jan  6 19:17:45 2026 GMT
            Not After : Jan  5 19:22:45 2027 GMT
        Subject: CN=942E4A3CC852632480600504DE504D8AA42EE396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:83:85:c6:81:b9:26:e7:53:87:fb:f7:ce:
                    d1:ca:90:c9:be:32:d9:b7:5e:f4:63:c4:cb:c6:6f:
                    d5:4b:77:65:35:64:1b:f9:c8:0e:1d:f0:35:2a:85:
                    cb:c9:13:1b:bf:21:63:ba:65:ec:ca:ff:11:82:ca:
                    d0:fa:f3:54:89:f3:5a:9b:b6:ec:ee:51:42:37:e6:
                    3c:2e:55:04:3d:57:98:f9:2c:f9:8a:c8:4f:97:c8:
                    6d:7a:45:21:cb:7a:19:eb:ac:39:96:f6:90:50:5d:
                    aa:63:df:a2:85:b5:f3:7e:80:7d:55:05:d4:29:9d:
                    5d:33:5a:9e:99:13:ed:e0:6f:21:56:cc:91:1a:a9:
                    bc:c6:6f:62:5c:f1:e7:b3:25:f8:c0:6c:02:79:8a:
                    29:e0:4e:6c:d8:e7:f8:a5:91:2c:89:fc:c5:7d:75:
                    62:4b:4b:ec:13:8c:2f:d0:4e:90:41:17:a7:b2:47:
                    d1:84:af:39:dd:28:e1:39:a2:ec:55:df:79:98:b9:
                    11:8c:7e:ab:19:4b:82:fa:80:dc:37:07:fc:86:07:
                    11:91:7e:c5:46:88:d5:3b:5c:98:36:69:f6:79:b8:
                    33:ea:34:a1:67:36:98:e6:a8:d6:94:bc:49:ea:a6:
                    2b:22:df:e1:23:49:8d:27:09:4e:c0:78:b6:e0:d5:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2E:4A:3C:C8:52:63:24:80:60:05:04:DE:50:4D:8A:A4:2E:E3:96
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:0b:f9:1a:ac:5d:b2:bf:c8:75:1f:1b:2c:af:69:49:40:
         a1:58:65:55:44:8f:b4:4d:c5:98:50:4c:92:d8:4b:6e:59:30:
         2d:b3:11:80:31:0a:54:8f:e2:2b:9d:bb:fc:6b:0a:fc:f3:9a:
         72:c6:d0:d2:37:ce:95:14:3b:70:21:ae:91:6d:9a:82:3e:a4:
         37:71:2d:e7:67:67:52:8d:4f:93:1c:58:c4:60:c7:d9:c9:65:
         0c:33:fb:97:34:63:55:9b:c3:33:0d:b4:b1:7f:e5:40:05:39:
         51:a6:b1:3a:82:56:e9:e1:7b:38:11:21:92:91:7a:f4:1b:aa:
         90:8c:d3:4f:06:6b:33:18:58:16:70:63:b7:ac:36:38:fd:a1:
         7b:6d:58:b7:3e:e6:4f:d7:dd:9b:a8:80:32:8d:e9:38:f1:94:
         2b:04:4b:3b:0f:e6:91:93:7e:57:82:95:24:6f:04:25:a1:0d:
         0d:4d:b1:51:db:43:d4:b8:45:bf:d1:40:8a:45:a4:bb:3f:83:
         2b:be:d1:70:75:c5:ed:32:a2:c4:00:ac:fc:b2:4e:07:6a:ff:
         de:f6:d8:86:93:7a:3a:8b:e5:48:a8:91:85:be:71:93:91:ad:
         25:21:9b:22:36:63:ae:67:f8:cd:7c:e4:5c:fe:24:7b:78:82:
         7f:68:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:22:14 2026 by rpki-client