This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/34352e3137352e3133392e302f32342d3234203d3e20323637383334.roa
File:                     34352e3137352e3133392e302f32342d3234203d3e20323637383334.roa (raw, json)
Hash identifier:          d/Nqm806NsP4Tl6kyCLGHFF0ZGLWVQS9yi0a44Hpc3A=
Subject key identifier:   64:09:A4:E5:92:18:12:E1:71:6B:A4:C0:CF:A0:A7:7E:BE:3B:18:F0
Certificate issuer:       /CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
Certificate serial:       381BE52FDC88CE98F14FB85A999CBF47BD7D106D
Authority key identifier: D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/34352e3137352e3133392e302f32342d3234203d3e20323637383334.roa
Signing time:             Tue 06 Jan 2026 19:25:42 +0000
ROA not before:           Tue 06 Jan 2026 19:20:42 +0000
ROA not after:            Tue 05 Jan 2027 19:25:42 +0000
asID:                     267834
IP address blocks:        45.175.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1b:e5:2f:dc:88:ce:98:f1:4f:b8:5a:99:9c:bf:47:bd:7d:10:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
        Validity
            Not Before: Jan  6 19:20:42 2026 GMT
            Not After : Jan  5 19:25:42 2027 GMT
        Subject: CN=6409A4E5921812E1716BA4C0CFA0A77EBE3B18F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:b7:5a:67:f1:cf:67:64:f1:92:d2:9a:1a:
                    93:13:87:c8:c4:69:4c:4f:f7:5a:55:6d:1b:1e:d0:
                    76:19:2f:22:3d:79:53:6a:04:9f:5c:51:1c:b2:45:
                    d2:36:38:68:9b:58:33:a0:45:d6:37:3d:cb:15:aa:
                    5e:b8:4c:4d:1d:b1:15:f0:f2:43:b9:85:22:56:2e:
                    04:bf:17:6a:be:a6:ce:4b:13:f3:51:dd:6d:6d:c5:
                    b9:05:37:49:40:2c:e3:e2:76:98:77:32:db:4a:84:
                    65:33:4f:ce:9b:b9:dc:bc:b7:1e:1e:98:8a:01:49:
                    d5:bc:c2:e9:91:54:b0:ca:ff:18:94:e8:e5:8c:20:
                    89:e2:24:d3:4c:91:1b:fc:41:72:10:86:07:f3:46:
                    da:00:52:c7:85:8f:f6:5b:84:6a:11:58:bb:bd:0c:
                    05:64:4a:a6:bb:6d:ec:4e:96:35:98:53:9b:b2:de:
                    57:13:77:59:f8:26:77:b8:88:6e:6f:dc:95:f4:9c:
                    7b:f9:9d:a1:4b:88:fa:11:8d:e7:0d:de:af:15:1e:
                    5c:56:40:35:c2:65:60:9a:b5:f6:1d:c8:77:1d:73:
                    f1:af:88:87:7a:f4:3f:eb:7e:cc:c9:34:d4:cc:0b:
                    26:cd:19:c8:cd:3d:a4:14:48:18:4f:c8:a3:09:dc:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:A4:E5:92:18:12:E1:71:6B:A4:C0:CF:A0:A7:7E:BE:3B:18:F0
            X509v3 Authority Key Identifier:
                keyid:D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/34352e3137352e3133392e302f32342d3234203d3e20323637383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:ad:cf:ad:d9:16:af:0b:37:ce:5c:1f:fe:ac:b5:81:9a:
         78:8a:c3:8b:d3:5b:67:cd:d1:cd:bd:bf:05:3b:f6:61:b0:05:
         ea:36:3d:a9:2a:a9:d3:27:a7:77:bd:9d:1f:41:82:bb:73:dc:
         aa:86:85:44:a6:40:05:af:88:b1:03:dd:94:bb:ce:ac:61:76:
         8b:82:0a:71:2e:09:d1:ca:8c:15:81:05:f2:5d:5f:bd:95:76:
         f6:e0:13:02:b6:fd:a6:ab:55:ff:ec:2d:76:56:af:35:1c:6b:
         f2:c9:9a:92:c4:77:f0:dd:75:73:4c:53:43:13:22:80:8e:cd:
         c3:b4:90:d7:d9:51:64:96:42:58:a8:51:e2:23:37:88:63:49:
         f0:6d:26:41:fd:46:5c:30:87:5b:09:6b:fb:a7:5d:bb:c4:b1:
         19:9f:60:fb:c5:a1:00:46:de:2a:5a:46:85:09:74:51:75:e7:
         0f:8b:4c:21:13:93:5d:b4:58:62:14:90:5f:34:f1:c8:e2:b3:
         17:22:48:67:9e:26:9e:69:92:bd:b8:6b:eb:5d:23:82:55:3a:
         c9:c6:f1:f5:52:fe:06:64:60:75:b4:d3:f2:6a:61:13:e1:fc:
         bd:b5:61:02:7b:54:00:3c:5f:a9:60:1c:75:58:ac:57:04:ff:
         27:3e:85:6a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOBvlL9yIzpjxT7hamZy/R719EG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGN0Y2MTBEQTE2OEZCMUIwQTQ3QjY1RkI5MkJENTM2
NTc3M0IwMzAeFw0yNjAxMDYxOTIwNDJaFw0yNzAxMDUxOTI1NDJaMDMxMTAvBgNV
BAMTKDY0MDlBNEU1OTIxODEyRTE3MTZCQTRDMENGQTBBNzdFQkUzQjE4RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcErdaZ/HPZ2TxktKaGpMTh8jE
aUxP91pVbRse0HYZLyI9eVNqBJ9cURyyRdI2OGibWDOgRdY3PcsVql64TE0dsRXw
8kO5hSJWLgS/F2q+ps5LE/NR3W1txbkFN0lALOPidph3MttKhGUzT86budy8tx4e
mIoBSdW8wumRVLDK/xiU6OWMIIniJNNMkRv8QXIQhgfzRtoAUseFj/ZbhGoRWLu9
DAVkSqa7bexOljWYU5uy3lcTd1n4Jne4iG5v3JX0nHv5naFLiPoRjecN3q8VHlxW
QDXCZWCatfYdyHcdc/GviId69D/rfszJNNTMCybNGcjNPaQUSBhPyKMJ3B67AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZAmk5ZIYEuFxa6TAz6Cnfr47GPAwHwYDVR0j
BBgwFoAU0vf2ENoWj7GwpHtl+5K9U2V3OwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0VBOTk5RjJGRkRFNjU5OEZFQkFCNDhBREJCMUIxQkQ1
QjkwQUU0NDY0NEQzMDM5RjAyNDFDQTFCQTY1OERDLzAvRDJGN0Y2MTBEQTE2OEZC
MUIwQTQ3QjY1RkI5MkJENTM2NTc3M0IwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkY3RjYxMERBMTY4RkIxQjBB
NDdCNjVGQjkyQkQ1MzY1NzczQjAzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdFQTk5OUYyRkZERTY1OThGRUJBQjQ4QURCQjFCMUJENUI5MEFFNDQ2
NDREMzAzOUYwMjQxQ0ExQkE2NThEQy8wLzM0MzUyZTMxMzczNTJlMzEzMzM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+L
MA0GCSqGSIb3DQEBCwUAA4IBAQAwm63PrdkWrws3zlwf/qy1gZp4isOL01tnzdHN
vb8FO/ZhsAXqNj2pKqnTJ6d3vZ0fQYK7c9yqhoVEpkAFr4ixA92Uu86sYXaLggpx
LgnRyowVgQXyXV+9lXb24BMCtv2mq1X/7C12Vq81HGvyyZqSxHfw3XVzTFNDEyKA
js3DtJDX2VFklkJYqFHiIzeIY0nwbSZB/UZcMIdbCWv7p127xLEZn2D7xaEARt4q
WkaFCXRRdecPi0whE5NdtFhiFJBfNPHI4rMXIkhnniaeaZK9uGvrXSOCVTrJxvH1
Uv4GZGB1tNPyamET4fy9tWECe1QAPF+pYBx1WKxXBP8nPoVq
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:55 2026 by rpki-client