This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
File:                     34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa (raw, json)
Hash identifier:          epmY1qJ0td6a73mefRtpEtLqsWv0AKKNfOKy1levRro=
Subject key identifier:   45:36:25:B2:F1:A1:26:9C:29:AB:FE:37:E8:5B:55:F2:63:6A:DD:AA
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       0D187A956AAC5AF002E0A46CA43883AC83B2E1DB
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
Signing time:             Tue 06 Jan 2026 19:23:20 +0000
ROA not before:           Tue 06 Jan 2026 19:18:20 +0000
ROA not after:            Tue 05 Jan 2027 19:23:20 +0000
asID:                     267914
IP address blocks:        45.179.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:18:7a:95:6a:ac:5a:f0:02:e0:a4:6c:a4:38:83:ac:83:b2:e1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Jan  6 19:18:20 2026 GMT
            Not After : Jan  5 19:23:20 2027 GMT
        Subject: CN=453625B2F1A1269C29ABFE37E85B55F2636ADDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:00:39:37:78:8d:b0:14:4e:3f:1e:b1:f0:
                    7d:03:08:50:85:95:e3:f2:01:4b:88:92:ee:af:0b:
                    24:a3:20:2b:89:1c:b9:7b:50:b0:bf:3d:fa:c6:af:
                    61:ce:42:87:ab:7b:f6:a5:10:85:8f:0b:ad:eb:6b:
                    ba:db:e3:a0:0b:05:a8:2f:eb:a2:6a:59:90:c0:8c:
                    71:36:90:9f:80:4c:1c:f6:75:27:31:4e:d5:ee:e9:
                    c3:41:6a:3c:2a:f8:9b:22:7f:88:2d:f0:3b:9e:68:
                    bb:e5:73:04:03:b3:cf:1e:79:a5:5a:ad:7f:d1:fb:
                    c5:e5:14:9d:5a:03:98:02:a1:97:fa:06:1d:87:76:
                    c9:7e:0c:77:ba:c3:9b:79:4e:0e:ea:f2:82:59:56:
                    dd:38:a1:ad:4f:10:dd:e1:fd:ea:e0:48:f6:d7:a9:
                    67:9f:e0:69:6a:44:b6:43:bc:fc:f2:ef:f4:b0:f1:
                    2b:1d:47:79:14:49:1d:71:b3:fc:93:09:d7:89:06:
                    1e:7a:5f:5b:e5:7b:f3:4b:35:45:98:a1:71:e8:c8:
                    fe:93:a7:c3:9b:85:af:d4:f8:48:bd:23:d9:16:d9:
                    58:a5:60:ff:c4:76:ff:dc:c9:29:8d:8a:96:aa:ea:
                    fd:61:75:1f:c9:29:97:f6:f4:fa:d0:aa:a8:ab:64:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:36:25:B2:F1:A1:26:9C:29:AB:FE:37:E8:5B:55:F2:63:6A:DD:AA
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:99:35:2c:85:ba:3e:e0:97:4d:b3:f7:68:08:a5:a1:0f:2c:
         56:ae:03:e0:fa:d6:37:6f:01:63:9c:4f:00:04:13:59:4a:d6:
         e0:db:e0:f0:cb:59:eb:12:df:5f:ba:a4:3e:34:a9:6f:02:03:
         ff:dd:61:e6:4f:ef:00:6d:c2:a6:5c:09:51:2f:bf:d1:8b:77:
         43:46:f7:d3:2c:45:96:30:54:6c:64:af:0b:87:db:9b:b0:ad:
         51:42:66:81:c3:8b:ea:98:4b:89:7c:ca:81:0c:2e:67:d6:d8:
         49:24:db:f6:8d:09:65:5f:b7:1e:80:37:47:4a:83:46:0d:5a:
         f5:d5:b2:9b:42:6b:9b:0d:1a:cf:df:c4:b6:e4:21:db:02:9e:
         d2:22:b3:0a:f4:17:77:f2:7b:09:d6:97:4e:4c:aa:e8:07:b7:
         f6:4f:5d:a5:2d:77:31:6a:24:e1:45:0e:2e:e2:90:e1:91:3b:
         00:3b:1c:ab:b5:95:1d:d0:8a:2a:8c:e4:1a:36:7a:80:98:ee:
         b1:a3:cc:14:5e:e8:77:e7:3c:30:4b:47:93:2e:45:8f:fe:37:
         c0:07:ef:8a:35:03:c9:ef:bd:df:bf:db:7d:0a:8a:6c:e3:fe:
         49:60:19:65:96:02:a2:f3:c8:78:d4:ec:b1:20:87:f3:3c:96:
         a0:0a:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:57 2026 by rpki-client