This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e37312e33322e302f32322d3234203d3e20323731383630.roa
File:                     34352e37312e33322e302f32322d3234203d3e20323731383630.roa (raw, json)
Hash identifier:          am8D5EbHEVYafgQGRKzeYvyGDm9i208zoprPen9SBb0=
Subject key identifier:   D0:15:AA:6B:9D:51:CC:01:5C:78:65:15:3B:D3:A4:DF:47:E6:4C:21
Certificate issuer:       /CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
Certificate serial:       2BDA9230EE8B931E79224AD1308778ECDE05A0AF
Authority key identifier: 8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e37312e33322e302f32322d3234203d3e20323731383630.roa
Signing time:             Tue 13 Jan 2026 17:00:19 +0000
ROA not before:           Tue 13 Jan 2026 16:55:19 +0000
ROA not after:            Tue 12 Jan 2027 17:00:19 +0000
asID:                     271860
IP address blocks:        45.71.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:da:92:30:ee:8b:93:1e:79:22:4a:d1:30:87:78:ec:de:05:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
        Validity
            Not Before: Jan 13 16:55:19 2026 GMT
            Not After : Jan 12 17:00:19 2027 GMT
        Subject: CN=D015AA6B9D51CC015C7865153BD3A4DF47E64C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:40:ca:a6:2e:6c:6a:73:2e:8f:52:09:8d:
                    86:56:cb:39:e7:58:00:2c:a4:16:de:4b:11:4c:8f:
                    f4:e1:2a:6d:03:d2:8f:54:18:fd:fe:a6:33:71:51:
                    d3:c8:b2:5b:5a:08:5f:ca:5a:e7:a2:c1:32:3c:d7:
                    44:2f:d6:05:c9:15:7a:a1:2f:a9:94:42:c6:d9:8f:
                    0e:25:c7:04:ff:d0:04:19:2e:1c:8f:eb:cb:08:af:
                    43:c5:55:04:5a:7d:2e:7b:ee:e9:b2:c9:ab:8a:b9:
                    c8:56:68:b9:e8:5c:cd:dc:41:38:23:b0:27:09:83:
                    70:5e:d1:08:2f:98:14:c9:19:0b:1b:ae:fd:d5:36:
                    74:1a:8e:b6:d4:b9:cf:91:13:09:26:d2:f2:04:84:
                    fe:78:b3:de:1c:e1:0e:64:76:43:4d:0f:c4:bc:70:
                    2e:c2:17:70:4b:7b:e2:49:ff:8c:8b:8b:97:ab:ab:
                    d1:a7:87:7e:05:21:94:57:07:2d:2a:0c:7b:2f:f8:
                    a7:4b:a0:25:86:06:f1:14:58:ca:54:31:a5:67:f3:
                    fd:59:5d:54:70:5c:5a:0e:86:51:c4:74:7d:6d:26:
                    f0:51:23:4b:70:0b:a6:29:44:98:46:e6:f3:e9:b5:
                    0e:e4:3c:76:35:37:40:68:01:6f:58:9d:fb:de:ae:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:15:AA:6B:9D:51:CC:01:5C:78:65:15:3B:D3:A4:DF:47:E6:4C:21
            X509v3 Authority Key Identifier:
                keyid:8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e37312e33322e302f32322d3234203d3e20323731383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:6e:78:cc:8b:77:5c:20:12:e5:ce:b3:fe:75:f2:56:b9:
         44:06:93:14:84:af:bc:4b:54:72:be:d4:30:c1:2f:3c:cf:0f:
         9b:e5:28:9f:13:11:6b:f2:30:f3:7c:e7:e2:0f:82:83:bc:1d:
         72:db:c4:60:3e:01:d2:7d:88:b7:1d:ab:75:fb:ac:fa:37:e5:
         26:b4:ba:f4:3b:9d:62:70:79:e1:ac:77:98:54:ac:38:02:b2:
         ba:66:dc:24:e0:1b:a9:30:fb:62:6f:62:11:cd:05:60:77:5e:
         4b:4b:50:7e:df:c5:8d:4a:75:69:ce:c5:c7:d0:1d:b5:e4:31:
         cb:ec:df:d0:49:93:9f:0d:ed:49:7f:1a:b0:4c:69:d7:47:76:
         dd:e2:18:e3:5e:b9:a7:7d:cb:89:6d:82:5d:cf:2d:90:ad:3e:
         c9:0b:6c:32:b7:2d:c8:f6:ce:97:5a:aa:94:98:4b:04:b6:96:
         5e:7a:11:2f:fb:81:fe:80:2e:a3:a2:06:0c:a9:3a:d7:9a:55:
         ea:c0:66:07:f8:6b:5b:2f:44:d6:ec:ad:f6:d2:66:f6:01:f4:
         ce:6c:47:8a:ab:26:c2:ee:15:15:be:0d:d4:dc:51:a3:71:42:
         ea:d4:66:6d:53:66:c3:45:99:cd:60:1c:20:5f:23:a8:12:27:
         21:29:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:32 2026 by rpki-client