This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
File:                     34352e3232342e3134342e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          47cHTK/y4dIelVNc8TXfIVT/29SJRmOz3payoFJnxbQ=
Subject key identifier:   AB:14:6B:ED:53:92:6C:B3:73:00:68:21:9D:B5:EA:66:CC:0A:09:18
Certificate issuer:       /CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
Certificate serial:       59246BF71B7DF98AFF53AA6E9F2A0044E4B8479F
Authority key identifier: 8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
Signing time:             Wed 14 Jan 2026 21:00:34 +0000
ROA not before:           Wed 14 Jan 2026 20:55:34 +0000
ROA not after:            Wed 13 Jan 2027 21:00:34 +0000
asID:                     27843
IP address blocks:        45.224.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:24:6b:f7:1b:7d:f9:8a:ff:53:aa:6e:9f:2a:00:44:e4:b8:47:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
        Validity
            Not Before: Jan 14 20:55:34 2026 GMT
            Not After : Jan 13 21:00:34 2027 GMT
        Subject: CN=AB146BED53926CB3730068219DB5EA66CC0A0918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:dc:a5:78:ec:ad:8c:13:4d:a2:09:88:e3:
                    97:73:3b:04:a9:d8:e5:76:30:3e:d3:8f:4e:09:7f:
                    eb:25:6d:9f:cf:08:f6:88:d0:d0:0c:ee:42:6e:48:
                    f3:32:18:be:49:39:88:ec:00:e7:0c:ef:9f:d9:5d:
                    b3:15:83:16:45:3d:12:dd:a7:57:e7:f9:60:21:77:
                    1d:0b:f7:5a:fb:42:71:53:59:3a:a2:c4:d9:fe:07:
                    e4:0b:3c:3d:28:ff:f2:af:97:65:b6:3a:4d:5f:01:
                    5a:b7:db:f1:16:7b:5b:f4:f4:cf:34:47:35:59:27:
                    21:d2:70:c3:43:7c:ae:d6:e2:ef:9e:88:ac:73:5c:
                    23:69:cb:de:9d:8c:81:ef:84:11:ef:8f:d8:6d:d8:
                    d5:d5:9f:a6:d2:a7:db:61:3d:88:e8:5c:7c:af:90:
                    89:38:f4:c5:9b:84:28:77:93:11:86:49:93:cb:9c:
                    77:be:d2:4b:de:80:6a:03:a3:06:84:e7:1a:b7:56:
                    68:24:dc:8b:0d:c1:48:66:fa:a4:83:ec:6b:41:63:
                    41:b9:ee:f8:1e:35:4b:e0:f5:90:26:80:07:f4:9f:
                    f0:90:a0:42:81:e0:c5:ae:6c:fa:a2:f6:b9:9c:5b:
                    43:12:0f:99:1c:ff:43:02:98:b4:f1:25:2e:8b:96:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:14:6B:ED:53:92:6C:B3:73:00:68:21:9D:B5:EA:66:CC:0A:09:18
            X509v3 Authority Key Identifier:
                keyid:8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:10:4f:3d:a7:e5:76:d7:0a:3e:02:82:0d:46:81:b7:f6:c0:
         9b:36:70:8b:0a:a0:b1:17:8e:23:d6:a6:dc:5a:30:64:df:f8:
         1a:31:ec:ee:bc:f9:e9:b8:3c:9e:48:78:3c:5a:d6:5b:7d:21:
         fe:bb:a2:7f:04:27:57:7f:a0:98:3d:de:81:5c:f7:6d:e7:1d:
         a0:da:e4:18:4a:86:45:85:60:e3:61:b1:13:20:fd:ed:5c:79:
         cd:cf:9d:a1:5e:14:65:d1:e3:3a:f2:38:02:42:95:f9:f2:71:
         3e:fc:4d:b2:a5:0b:cd:c1:14:e8:99:c0:d7:4f:07:37:71:6c:
         71:5c:09:af:ee:a2:18:84:48:08:5a:ba:1b:4b:66:64:bf:88:
         be:60:52:d6:e7:09:eb:fc:1f:1e:03:0f:b3:03:6c:98:e7:cc:
         1c:1f:63:88:1f:72:d3:05:ad:0d:09:19:38:b6:62:ec:dd:64:
         2c:80:bb:8d:95:d8:57:0c:9c:6e:ed:05:3d:14:05:29:49:11:
         d0:3f:f2:ea:e1:e5:3d:20:29:c5:b2:ca:b6:16:7e:35:b8:92:
         58:f1:6e:e1:15:f0:24:69:98:83:88:2f:40:b0:ca:2f:a5:55:
         52:1a:91:43:a4:31:fa:d9:f1:30:7b:34:d1:3e:5d:4d:0d:e4:
         6b:9a:e8:b2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWSRr9xt9+Yr/U6punyoAROS4R58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwRTgwMTgxQUNERDA4RTg1NjFFMDNBMkFFOUY0Qzk4
NTk3RTcyRjAeFw0yNjAxMTQyMDU1MzRaFw0yNzAxMTMyMTAwMzRaMDMxMTAvBgNV
BAMTKEFCMTQ2QkVENTM5MjZDQjM3MzAwNjgyMTlEQjVFQTY2Q0MwQTA5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSutyleOytjBNNogmI45dzOwSp
2OV2MD7Tj04Jf+slbZ/PCPaI0NAM7kJuSPMyGL5JOYjsAOcM75/ZXbMVgxZFPRLd
p1fn+WAhdx0L91r7QnFTWTqixNn+B+QLPD0o//Kvl2W2Ok1fAVq32/EWe1v09M80
RzVZJyHScMNDfK7W4u+eiKxzXCNpy96djIHvhBHvj9ht2NXVn6bSp9thPYjoXHyv
kIk49MWbhCh3kxGGSZPLnHe+0kvegGoDowaE5xq3Vmgk3IsNwUhm+qSD7GtBY0G5
7vgeNUvg9ZAmgAf0n/CQoEKB4MWubPqi9rmcW0MSD5kc/0MCmLTxJS6LlpqRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqxRr7VOSbLNzAGghnbXqZswKCRgwHwYDVR0j
BBgwFoAUig6AGBrN0I6FYeA6Kun0yYWX5y8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzNGODYxMzczQzQ1MTYzNkNBQTk4QUNDRjNBREMwRkFE
MDY0NjU4Qzk5RkZGQThDQTZBMzU2MzJBN0I1MDQ5LzAvOEEwRTgwMTgxQUNERDA4
RTg1NjFFMDNBMkFFOUY0Qzk4NTk3RTcyRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTBFODAxODFBQ0REMDhFODU2
MUUwM0EyQUU5RjRDOTg1OTdFNzJGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTczRjg2MTM3M0M0NTE2MzZDQUE5OEFDQ0YzQURDMEZBRDA2NDY1OEM5
OUZGRkE4Q0E2QTM1NjMyQTdCNTA0OS8wLzM0MzUyZTMyMzIzNDJlMzEzNDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzQzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3gkDAN
BgkqhkiG9w0BAQsFAAOCAQEAdxBPPafldtcKPgKCDUaBt/bAmzZwiwqgsReOI9am
3FowZN/4GjHs7rz56bg8nkh4PFrWW30h/ruifwQnV3+gmD3egVz3becdoNrkGEqG
RYVg42GxEyD97Vx5zc+doV4UZdHjOvI4AkKV+fJxPvxNsqULzcEU6JnA108HN3Fs
cVwJr+6iGIRICFq6G0tmZL+IvmBS1ucJ6/wfHgMPswNsmOfMHB9jiB9y0wWtDQkZ
OLZi7N1kLIC7jZXYVwycbu0FPRQFKUkR0D/y6uHlPSApxbLKthZ+NbiSWPFu4RXw
JGmYg4gvQLDKL6VVUhqRQ6Qx+tnxMHs00T5dTQ3ka5rosg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:06 2026 by rpki-client