This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/34352e352e3135322e302f32322d3234203d3e20323635363736.roa
File:                     34352e352e3135322e302f32322d3234203d3e20323635363736.roa (raw, json)
Hash identifier:          zIlF0uGNSvecIY6Rg8F8vulk1TIItT63PugmoaEe2hI=
Subject key identifier:   AA:A3:BC:45:2A:13:BE:F4:51:C7:CF:3F:C6:98:F0:9C:F6:1B:E4:88
Certificate issuer:       /CN=05130B3831C4AB16DBD29530170C5A37C307AEDA
Certificate serial:       5684F667E85AC6CC3E8C5195FB707BEA42A1D48B
Authority key identifier: 05:13:0B:38:31:C4:AB:16:DB:D2:95:30:17:0C:5A:37:C3:07:AE:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/34352e352e3135322e302f32322d3234203d3e20323635363736.roa
Signing time:             Tue 06 Jan 2026 19:42:21 +0000
ROA not before:           Tue 06 Jan 2026 19:37:21 +0000
ROA not after:            Tue 05 Jan 2027 19:42:21 +0000
asID:                     265676
IP address blocks:        45.5.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:f6:67:e8:5a:c6:cc:3e:8c:51:95:fb:70:7b:ea:42:a1:d4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05130B3831C4AB16DBD29530170C5A37C307AEDA
        Validity
            Not Before: Jan  6 19:37:21 2026 GMT
            Not After : Jan  5 19:42:21 2027 GMT
        Subject: CN=AAA3BC452A13BEF451C7CF3FC698F09CF61BE488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:3d:bb:46:9a:31:f8:12:b8:27:98:5c:dd:
                    4b:a2:ce:74:50:84:6e:9d:48:8a:03:97:5f:8a:8e:
                    94:ad:f7:84:4c:5f:13:3f:4d:5f:ec:59:9d:86:92:
                    84:79:1e:51:cb:a0:31:59:34:fb:51:02:fd:ae:fd:
                    07:0a:a7:d0:2d:07:66:9d:e6:6b:bb:e3:a5:6b:22:
                    42:70:31:f3:ef:c5:c7:71:a2:36:5a:c9:2a:7e:65:
                    7f:fc:00:ba:b9:8f:53:bf:e4:27:ea:5b:aa:65:2c:
                    d0:9b:0c:c8:d2:dd:89:b9:81:f6:cc:b1:c6:e8:0c:
                    10:e2:46:fe:ad:da:cf:f6:4b:ca:d8:a6:24:2c:e7:
                    c2:24:5d:7e:d7:7d:f2:18:5c:d7:1d:87:70:14:56:
                    79:f4:52:e9:80:92:1c:48:4c:6c:92:7c:e3:ae:17:
                    3a:0d:11:5c:77:63:fe:4e:05:de:0d:f3:8f:1e:cf:
                    8e:4f:79:2a:85:16:24:db:c0:ef:e6:c9:5d:a1:df:
                    a3:47:45:04:3f:18:9a:9d:91:6c:26:9f:13:bb:10:
                    dd:b5:6b:2b:15:b9:cc:97:d8:76:f1:3d:df:52:3d:
                    49:fa:ae:d0:dc:a2:5c:02:f8:6f:ae:05:b1:f8:8a:
                    c4:af:8b:85:b5:7b:ff:31:c2:d6:43:98:fb:06:9d:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:BC:45:2A:13:BE:F4:51:C7:CF:3F:C6:98:F0:9C:F6:1B:E4:88
            X509v3 Authority Key Identifier:
                keyid:05:13:0B:38:31:C4:AB:16:DB:D2:95:30:17:0C:5A:37:C3:07:AE:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05130B3831C4AB16DBD29530170C5A37C307AEDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C2B881A253DC755A96BA954792F617161862E8A0F26D294C877F38E79CCF4CC/0/34352e352e3135322e302f32322d3234203d3e20323635363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:99:a5:80:3a:8c:fe:61:e2:50:3c:24:e3:7a:ee:d9:46:e3:
         35:7b:e9:c1:d2:f2:c4:92:b1:55:1f:66:81:19:83:13:18:fb:
         30:5a:12:7e:e7:d3:73:96:5b:9b:1a:87:22:a3:30:0b:03:ff:
         f4:42:c2:c1:6c:90:6b:77:61:c2:b7:e6:90:0b:47:08:fd:81:
         d5:f4:59:77:c3:38:11:2d:51:55:cd:9e:b4:72:00:54:64:32:
         c4:b2:ee:6c:82:ef:21:c0:eb:3e:b5:83:fe:30:e2:0e:24:d0:
         68:b9:44:e7:ed:56:8e:dd:6d:d6:b8:1f:bc:32:3a:ce:b9:47:
         bc:77:ea:01:40:86:62:60:d2:96:d4:78:81:ab:f5:2e:12:66:
         e7:3b:c8:60:df:6f:fd:23:64:c4:ed:52:bd:3b:50:d8:6a:fc:
         85:b3:b6:2b:5e:53:7f:f4:ac:a0:ce:71:28:2a:e2:68:d4:45:
         40:b1:0d:c6:27:1d:4e:43:29:79:d7:9d:19:cb:d0:ed:36:62:
         e4:8f:c6:b8:64:c7:02:f2:8a:0c:b5:25:d0:7a:93:0d:69:3c:
         f7:9a:84:e4:43:fa:e4:2f:71:cd:59:49:55:9f:bc:56:d2:08:
         ab:41:b9:1d:aa:ce:fa:e0:63:26:ce:af:b0:b8:76:30:20:96:
         b1:71:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:53:43 2026 by rpki-client