This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa
File:                     34352e372e3133322e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          EdXmh0jHdYZtOAUghFhBqdQXiif4yFGHiGEPOfDvJXE=
Subject key identifier:   4C:ED:07:47:96:9F:14:0B:09:74:DA:21:87:E5:11:96:11:86:F4:13
Certificate issuer:       /CN=04C9538FA5038299A42B9882163AF36632AD588F
Certificate serial:       0ED80019B2E4B24C27312457821C84BBC3BE65C3
Authority key identifier: 04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 06 Jan 2026 19:04:46 +0000
ROA not before:           Tue 06 Jan 2026 18:59:46 +0000
ROA not after:            Tue 05 Jan 2027 19:04:46 +0000
asID:                     267857
IP address blocks:        45.7.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d8:00:19:b2:e4:b2:4c:27:31:24:57:82:1c:84:bb:c3:be:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C9538FA5038299A42B9882163AF36632AD588F
        Validity
            Not Before: Jan  6 18:59:46 2026 GMT
            Not After : Jan  5 19:04:46 2027 GMT
        Subject: CN=4CED0747969F140B0974DA2187E511961186F413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:0c:ad:15:ad:0e:ec:af:ae:c0:85:fb:d0:
                    1f:02:3d:ac:e9:d0:5b:80:a5:37:a3:1d:86:c0:81:
                    fe:83:a3:82:61:42:33:68:d9:e1:5d:35:95:ea:f6:
                    75:51:ca:b4:eb:08:c2:50:4e:e1:e8:b1:a9:e1:ec:
                    5e:55:3f:7b:91:8d:17:df:93:01:f4:36:dc:64:d8:
                    3f:3c:8c:d2:fd:c5:14:bf:c0:74:9c:c0:a1:ce:de:
                    31:18:41:7b:83:44:dd:5b:ce:5d:a4:4f:d0:64:59:
                    51:4c:74:31:c3:dc:0a:e7:49:7c:69:ea:d3:a2:5e:
                    09:c9:0b:71:a6:f9:f6:4b:e2:71:75:f9:98:bd:bf:
                    c0:a6:99:e0:3b:9e:82:57:52:7c:29:a0:41:e5:b5:
                    31:90:67:b3:8e:80:25:f1:82:09:e8:fe:bc:1e:bf:
                    53:f7:fc:5a:74:b1:46:b0:45:37:8a:47:61:ec:a8:
                    71:53:8c:67:5a:3e:02:ba:e7:06:03:15:91:22:e4:
                    f8:83:ad:e8:bd:8f:02:3c:4d:79:74:8f:ba:6a:fa:
                    ce:ca:04:e0:ef:bb:32:51:fd:0d:c4:10:eb:2e:63:
                    ae:3f:16:6b:6d:91:97:a2:cc:57:c3:2b:97:9c:a9:
                    36:2d:52:c3:83:c4:19:83:39:9a:ef:ac:43:6d:b9:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:ED:07:47:96:9F:14:0B:09:74:DA:21:87:E5:11:96:11:86:F4:13
            X509v3 Authority Key Identifier:
                keyid:04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:13:7d:b2:1d:bc:22:30:d1:7c:b3:93:1f:e2:34:ca:ef:71:
         28:3b:a2:01:af:4e:3d:06:34:72:e3:ae:70:66:2a:c3:08:74:
         66:5b:77:53:9f:7f:35:a5:15:da:e0:31:a4:b3:1f:64:fd:f7:
         e3:1e:3c:33:45:68:0b:aa:53:1a:20:40:13:98:ba:d8:70:33:
         15:ec:46:58:a9:21:69:5a:c0:67:55:b4:4f:cf:4f:ca:8b:84:
         69:42:85:31:b2:8c:88:ef:7c:10:6a:60:b8:25:4c:40:6e:ed:
         8c:d7:cd:42:7d:3e:5d:b1:7e:5a:24:df:9b:8d:b5:b2:96:12:
         ce:32:75:68:20:eb:64:1a:0d:2c:0c:90:5f:5d:8a:ef:d9:59:
         ff:54:ab:98:85:4f:64:79:7d:58:47:35:50:2c:7b:18:99:f2:
         90:5c:7c:f4:b5:ac:fa:ef:b5:4c:a8:6f:39:6a:ca:e0:c8:a0:
         33:9d:74:69:39:ab:a6:49:5e:0e:9b:ee:ae:6f:43:34:4f:ed:
         49:7e:b8:40:f8:50:c0:b3:31:dd:a7:95:d1:8d:f9:29:f6:e1:
         7b:58:4a:e5:4b:eb:be:5e:0b:e3:c2:f5:39:24:b5:4b:97:16:
         77:47:35:bf:8f:ba:b1:12:3e:c1:d8:89:90:f7:97:bd:55:91:
         b2:15:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:20 2026 by rpki-client