This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa
File:                     34352e3137372e35332e302f32342d3234203d3e203139343239.roa (raw, json)
Hash identifier:          UCiCAxbqO2JxqDv2SDw8DdGTxruCkS2DUxSm0slDPO0=
Subject key identifier:   FA:F7:DE:9E:6C:19:BB:EE:A7:78:94:F2:4C:40:A9:15:BC:A0:56:77
Certificate issuer:       /CN=8E7AB1B5E5771F4EEC756C6277874B6227101C79
Certificate serial:       0EFF345D3F39C6ADBABAAC4E18F60F253C3BE73A
Authority key identifier: 8E:7A:B1:B5:E5:77:1F:4E:EC:75:6C:62:77:87:4B:62:27:10:1C:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa
Signing time:             Tue 06 Jan 2026 19:33:20 +0000
ROA not before:           Tue 06 Jan 2026 19:28:20 +0000
ROA not after:            Tue 05 Jan 2027 19:33:20 +0000
asID:                     19429
IP address blocks:        45.177.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ff:34:5d:3f:39:c6:ad:ba:ba:ac:4e:18:f6:0f:25:3c:3b:e7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7AB1B5E5771F4EEC756C6277874B6227101C79
        Validity
            Not Before: Jan  6 19:28:20 2026 GMT
            Not After : Jan  5 19:33:20 2027 GMT
        Subject: CN=FAF7DE9E6C19BBEEA77894F24C40A915BCA05677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:3d:04:1b:1c:b8:23:34:1e:76:3b:3c:13:
                    7a:1a:71:99:f0:ab:c3:51:90:e5:02:87:20:fb:31:
                    27:1e:42:83:6f:d7:6b:b7:fe:2b:30:20:0a:0c:29:
                    96:1b:2d:4e:13:57:82:7e:44:d4:d4:97:32:f7:63:
                    2f:00:ed:60:ce:37:99:97:81:d3:e5:f0:62:20:c4:
                    f5:ef:67:fa:50:6e:fd:04:83:90:c1:0f:5f:be:a9:
                    a0:a8:ed:d3:eb:f9:4c:9d:76:a7:8c:38:d5:c1:d9:
                    c9:84:a5:54:56:8f:52:dd:2a:ae:33:07:03:90:e7:
                    48:c1:4a:c4:0d:67:64:55:08:b6:f2:06:cf:98:6a:
                    9a:e2:ff:71:a0:d0:52:dd:38:ac:88:24:68:59:b4:
                    32:b2:c6:78:e8:f1:94:db:b4:02:03:1f:59:79:c9:
                    c9:d0:93:f8:13:b8:5d:a7:78:6e:b6:83:68:b2:1b:
                    24:8a:cf:5d:68:9c:dc:9d:5b:ce:c7:aa:51:07:b8:
                    7a:5d:d3:f7:d6:c7:2f:3b:07:b4:18:e4:39:62:2c:
                    d5:b6:4f:c5:4a:1e:40:1f:06:21:ea:9f:92:b5:c0:
                    30:43:e0:4b:d8:c2:a1:90:b3:ac:21:f1:b0:68:64:
                    c8:fe:a5:c0:02:5f:86:85:17:9a:fe:cb:a3:98:12:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F7:DE:9E:6C:19:BB:EE:A7:78:94:F2:4C:40:A9:15:BC:A0:56:77
            X509v3 Authority Key Identifier:
                keyid:8E:7A:B1:B5:E5:77:1F:4E:EC:75:6C:62:77:87:4B:62:27:10:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:41:9a:85:07:09:0c:13:51:42:52:8f:67:af:db:cd:a4:6d:
         a4:09:bd:db:e8:a0:c5:29:e3:de:3f:f7:98:1b:ad:a1:c1:9d:
         22:6a:96:42:fc:1c:99:ca:92:d7:0d:b1:2f:45:73:de:f0:c6:
         ae:1e:6f:b8:83:09:63:38:6d:b5:7f:19:74:84:e0:e2:1b:ce:
         74:c3:62:79:e2:0a:99:21:22:86:f5:ae:08:67:c6:92:c9:40:
         45:c6:02:d7:e5:8e:87:76:35:b1:66:04:ab:7a:97:ca:71:7d:
         3e:b8:23:17:8f:85:d6:ee:54:8c:60:f6:aa:2a:d1:e7:a2:b9:
         ea:db:41:06:83:1f:79:dc:c8:80:9e:dc:93:61:b6:b6:83:fe:
         c7:a3:20:e3:07:2a:5d:89:f8:07:63:27:ee:89:37:a3:be:fa:
         f3:d9:1d:36:47:4a:98:be:47:f7:64:d2:19:89:90:98:99:aa:
         76:50:46:d2:d2:39:db:01:44:c0:15:1d:bf:7e:01:9e:54:a5:
         61:48:40:ed:37:2d:b3:7a:a4:b4:b0:a6:34:01:6d:40:12:42:
         9b:73:89:79:fd:73:f7:20:74:0f:58:4f:84:86:90:9f:90:b1:
         0c:f9:ae:12:dc:45:b2:fd:df:d9:90:b4:8a:9a:13:34:37:f7:
         27:d6:d8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:42:57 2026 by rpki-client