This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32332d3233203d3e20323639373832.roa
File:                     34352e3138342e3234382e302f32332d3233203d3e20323639373832.roa (raw, json)
Hash identifier:          3gaQ8rLEqrA5h36Xdn1jW/d1Uio3MOW0u+T4VwMdB2s=
Subject key identifier:   A5:4B:F2:6F:BC:74:84:53:5F:15:6E:AE:9A:D1:2C:4E:C9:15:11:A7
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       2959176F5A504438E69619C6E755AAB9C2CE0C2D
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32332d3233203d3e20323639373832.roa
Signing time:             Tue 06 Jan 2026 19:12:28 +0000
ROA not before:           Tue 06 Jan 2026 19:07:28 +0000
ROA not after:            Tue 05 Jan 2027 19:12:28 +0000
asID:                     269782
IP address blocks:        45.184.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:17:6f:5a:50:44:38:e6:96:19:c6:e7:55:aa:b9:c2:ce:0c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Jan  6 19:07:28 2026 GMT
            Not After : Jan  5 19:12:28 2027 GMT
        Subject: CN=A54BF26FBC7484535F156EAE9AD12C4EC91511A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:01:64:c7:1d:36:ac:93:d4:51:8d:73:d4:
                    14:72:34:e6:3f:01:cf:b3:4f:66:cf:da:62:e8:82:
                    6c:74:5f:ca:70:70:e4:02:5a:38:b1:f0:28:d3:e5:
                    fb:c6:bb:8a:db:61:d7:8f:2f:d3:d8:7d:62:68:38:
                    4e:8f:e0:f4:14:ca:54:1a:b2:f0:62:16:b1:72:f9:
                    ba:c8:08:18:8e:50:8b:0d:41:09:af:f0:2b:a1:35:
                    66:53:92:16:6a:d6:e7:d0:8d:dc:0d:9f:4c:a7:77:
                    81:77:96:8e:48:58:90:30:30:56:13:b0:c5:53:cb:
                    8a:8f:f8:86:e5:fc:b8:4d:80:44:d9:f2:58:9b:98:
                    41:a0:08:88:ec:4e:e5:0a:a3:13:96:51:9f:51:c9:
                    9a:49:6c:23:48:de:83:95:67:2f:30:98:b2:c3:0d:
                    cb:27:f0:e6:5e:ec:10:b1:51:f0:ff:55:20:80:7c:
                    66:86:ce:36:ab:56:5b:f8:41:77:da:5c:13:42:79:
                    43:82:b5:6d:88:32:9c:d1:fd:41:b9:e7:7c:17:49:
                    2a:c4:da:fe:d3:c3:36:4d:c2:6d:b7:84:15:70:b9:
                    bb:31:5b:48:d2:29:51:5d:b4:9d:11:5d:17:4a:41:
                    88:d6:92:07:4a:18:56:f2:28:78:d4:c5:7b:08:b3:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:F2:6F:BC:74:84:53:5F:15:6E:AE:9A:D1:2C:4E:C9:15:11:A7
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32332d3233203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:12:8b:db:0e:29:28:77:aa:be:38:05:fe:70:30:c8:86:
         e2:4b:57:a9:0a:6f:49:05:83:c6:ee:ae:60:2d:46:69:8e:3c:
         f8:b7:83:48:16:83:8e:b9:34:78:c1:d3:f3:b0:5c:04:09:4a:
         d8:1c:6f:37:64:c6:79:33:50:cf:d4:a9:21:8a:08:33:62:a4:
         c0:a5:e3:97:2d:aa:b4:9c:51:7f:37:ae:f8:2e:2b:59:ce:b3:
         0e:b1:90:1b:08:58:6f:9a:c5:44:76:d2:fc:e1:63:46:a2:65:
         35:f8:ae:af:34:a4:75:10:44:4a:82:34:ce:b8:26:6b:4f:d6:
         df:2a:32:a4:08:54:f0:df:c4:7a:2c:dc:0b:f4:c2:ba:01:51:
         8b:b1:8a:0a:92:19:2d:2c:a4:38:47:3e:99:cb:62:f1:87:8a:
         01:80:35:f5:70:0c:c2:31:6d:ea:06:79:aa:27:19:30:d6:21:
         be:f7:ed:cf:bf:58:72:7d:be:bd:45:d5:0f:b1:f2:5c:50:52:
         be:c5:e3:e6:54:ba:63:a4:0c:e3:86:2b:07:cd:b2:6a:34:c5:
         ff:d3:74:81:a0:b2:8a:1c:89:de:79:3a:89:3e:c2:9f:bc:44:
         66:de:58:72:ce:8c:63:7e:24:23:df:e0:17:d9:77:6b:5d:4b:
         00:c8:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:40 2026 by rpki-client