This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa
File:                     34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa (raw, json)
Hash identifier:          lCe5Q4rwX4cKcdbnQDa9rs5Lk/SPgrcG5zpTPRLaKe0=
Subject key identifier:   60:42:DB:52:1D:B6:75:CA:4F:71:8C:C2:AF:57:08:43:98:55:56:63
Certificate issuer:       /CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
Certificate serial:       39FEF75BACA701921F62D3655295A2860428D808
Authority key identifier: 44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa
Signing time:             Tue 06 Jan 2026 19:18:27 +0000
ROA not before:           Tue 06 Jan 2026 19:13:27 +0000
ROA not after:            Tue 05 Jan 2027 19:18:27 +0000
asID:                     267895
IP address blocks:        45.177.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fe:f7:5b:ac:a7:01:92:1f:62:d3:65:52:95:a2:86:04:28:d8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
        Validity
            Not Before: Jan  6 19:13:27 2026 GMT
            Not After : Jan  5 19:18:27 2027 GMT
        Subject: CN=6042DB521DB675CA4F718CC2AF57084398555663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:94:4c:3d:41:ae:82:a2:df:22:63:d5:8f:
                    78:db:16:66:ee:91:e8:97:35:63:aa:f2:1a:b5:7d:
                    3e:c9:c3:d5:34:a4:e0:e0:2a:b2:f4:39:bc:8b:d0:
                    4a:54:c5:ce:a0:68:00:3c:87:ee:9e:14:af:96:ac:
                    1b:f0:1d:af:d1:c5:eb:ad:48:84:ae:91:f3:cc:51:
                    d7:d6:a9:52:91:8f:cd:6b:4d:83:6b:8d:5e:d8:d1:
                    5a:8d:f5:2e:e6:22:dc:fa:0b:d0:93:99:33:5e:87:
                    6c:e9:cc:32:18:5f:b3:53:45:31:8a:34:cc:e8:e6:
                    0e:04:b7:ba:87:65:bb:e1:46:45:5c:c8:9a:e0:c8:
                    32:d4:45:68:23:0b:da:65:f8:e8:d1:ea:6b:7d:62:
                    80:ad:16:c8:b4:61:b2:a4:f0:3a:93:8d:e5:34:56:
                    68:4f:96:96:47:2b:2f:00:7c:40:63:48:63:cc:77:
                    0b:6a:34:21:84:9a:23:45:34:63:54:03:8d:2e:ad:
                    61:3a:76:2e:d3:3e:c4:62:6f:bc:4d:d4:f6:81:bf:
                    89:0d:9a:c1:f9:8d:d5:0c:fc:76:e4:46:c6:28:25:
                    0e:57:1f:d2:32:da:25:bf:2a:c7:2f:35:85:0d:df:
                    d2:1b:21:2c:29:53:52:37:d9:66:a0:e2:2d:54:85:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:DB:52:1D:B6:75:CA:4F:71:8C:C2:AF:57:08:43:98:55:56:63
            X509v3 Authority Key Identifier:
                keyid:44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/34352e3137372e3132382e302f32322d3234203d3e20323637383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:91:05:ed:40:7f:e0:dc:2a:94:f4:27:0d:1f:d5:d2:26:5b:
         83:8f:3c:0f:e1:52:e1:e8:14:f5:ac:8c:6e:ad:c7:b2:7a:69:
         23:9d:08:ba:80:74:ef:7e:31:3e:34:c9:f8:e7:8a:6d:b9:d5:
         a3:3d:15:dd:92:57:02:41:57:2f:29:ff:48:ea:cb:e4:0e:58:
         a6:65:58:1e:9f:47:5a:c9:a7:46:83:8f:7d:95:4c:f2:e0:9c:
         4e:b4:2d:a3:da:71:f0:78:6e:70:b1:74:b2:64:77:90:89:3d:
         78:8b:70:99:11:fe:33:91:8c:c8:30:1b:32:80:39:a7:e7:a3:
         cd:77:85:80:ec:df:7d:a4:c0:bb:25:4e:ee:14:29:35:9d:2f:
         46:d8:a4:db:0f:0a:bd:68:3d:ae:e7:94:39:91:6b:48:ef:16:
         00:72:3f:34:62:7f:0e:e9:5d:de:d2:91:f8:ca:d8:98:26:2e:
         41:b5:25:86:ff:8b:1f:4a:7c:c8:f9:1c:41:b8:c0:76:6f:86:
         a1:27:6c:0e:b5:d1:af:f8:7a:ba:99:2e:bb:c6:94:a7:49:21:
         66:3c:e4:0d:db:06:d4:65:92:a6:45:15:9d:96:d2:b2:58:d7:
         f2:44:36:f9:c3:36:3b:dd:12:57:50:e6:52:7e:3c:de:5b:54:
         98:86:d3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:57 2026 by rpki-client