This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa
File:                     34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa (raw, json)
Hash identifier:          8tbcAkgj+c2CBGzkPPgUjbnxguCHPrszcPShnNIriqA=
Subject key identifier:   07:CD:3D:87:D4:D6:F4:33:93:DC:46:D9:BA:F4:BA:0C:5C:90:4B:2B
Certificate issuer:       /CN=4470F62467DDCEB1FB33F608BFE49A945C530595
Certificate serial:       3D6A2E69B80E8D8945617024C5511F692A4AB9B7
Authority key identifier: 44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa
Signing time:             Tue 06 Jan 2026 19:17:28 +0000
ROA not before:           Tue 06 Jan 2026 19:12:28 +0000
ROA not after:            Tue 05 Jan 2027 19:17:28 +0000
asID:                     266783
IP address blocks:        45.189.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6a:2e:69:b8:0e:8d:89:45:61:70:24:c5:51:1f:69:2a:4a:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4470F62467DDCEB1FB33F608BFE49A945C530595
        Validity
            Not Before: Jan  6 19:12:28 2026 GMT
            Not After : Jan  5 19:17:28 2027 GMT
        Subject: CN=07CD3D87D4D6F43393DC46D9BAF4BA0C5C904B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:1c:d5:cc:a9:16:1c:4f:6d:a4:25:bf:bb:
                    1f:d9:9a:79:66:01:b3:d8:2b:25:14:e9:e9:c9:b2:
                    6d:ac:a3:4a:cd:b9:bd:f0:4a:27:03:e0:14:86:ed:
                    1b:ed:b6:fc:a4:2b:68:46:52:ab:29:d6:74:21:d4:
                    3d:a2:b7:c0:f0:d6:95:07:03:54:f7:b7:89:a8:03:
                    5a:83:a7:88:e5:cd:ae:3e:37:ba:27:8c:e1:a0:57:
                    84:01:6a:05:4f:f6:8b:c8:65:62:18:2f:a4:72:bb:
                    31:f7:9c:90:a5:43:0f:3d:7d:1b:29:05:8a:40:1f:
                    1e:b4:98:d8:e1:be:ff:0b:ef:4c:27:c0:e5:31:20:
                    e0:1f:12:35:ee:4c:3f:74:99:c8:18:1d:34:ae:72:
                    9d:b6:0d:2c:fc:fb:25:1a:fc:46:2e:96:c1:05:95:
                    e9:4c:ba:02:9a:92:60:f5:ab:d6:e8:8b:89:90:71:
                    88:71:02:c1:81:30:24:6e:1a:5f:80:db:36:80:94:
                    6f:8b:51:bd:20:8f:ed:e3:b2:b5:82:b7:13:51:0c:
                    e5:fc:25:ac:ef:4f:99:a5:7b:20:ef:50:80:42:57:
                    30:f8:ea:56:eb:8a:c6:9c:e5:bc:b7:c5:50:96:b6:
                    49:37:23:bf:fe:02:06:01:09:0b:01:b7:40:d0:fa:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CD:3D:87:D4:D6:F4:33:93:DC:46:D9:BA:F4:BA:0C:5C:90:4B:2B
            X509v3 Authority Key Identifier:
                keyid:44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:e4:05:18:c3:5f:75:fd:01:15:61:5c:53:9a:b0:58:ad:
         40:bd:8f:e5:bf:68:93:83:f9:29:58:8b:d3:50:ff:4f:3f:b7:
         96:40:45:a0:28:86:fc:59:23:71:d4:2c:97:9b:23:4b:87:76:
         97:ab:8d:3d:7c:b3:f2:26:21:9b:ee:80:ab:20:df:16:87:64:
         9b:ed:da:fc:ab:bc:77:98:bd:f3:c8:c8:2a:60:5e:59:d2:e7:
         dc:44:a2:92:ba:69:88:aa:16:26:83:34:3d:de:d3:c6:a2:a7:
         8e:51:51:32:75:da:72:7d:91:0f:6f:37:ff:3a:54:54:d0:12:
         57:e2:4b:c5:ba:e4:8e:c5:80:13:7f:dd:01:e4:b8:e1:3f:5a:
         fd:5b:31:1a:d3:20:b1:12:98:66:4d:fe:90:8d:42:0e:c1:88:
         d1:be:32:03:ba:6e:9d:e9:a0:b5:be:5b:fb:c5:e2:23:ef:cc:
         c8:a8:1c:44:28:a0:80:3b:cb:5a:b9:b2:f0:bd:cb:d8:62:e1:
         18:11:b0:23:66:5c:a3:a2:0c:76:32:c4:56:63:da:fd:a4:1d:
         0d:56:33:20:d3:3e:6f:cb:38:42:ce:ac:59:aa:1d:23:30:e6:
         e8:00:60:19:34:61:d0:e1:b6:09:5e:62:c9:2a:c8:7e:04:a9:
         04:88:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:22 2026 by rpki-client