This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/34352e3136352e35322e302f32332d3233203d3e20323637373233.roa
File:                     34352e3136352e35322e302f32332d3233203d3e20323637373233.roa (raw, json)
Hash identifier:          28KaEnUPwu4P93FhXjIp4xqzy6FEVUEasSLtBlv0bkM=
Subject key identifier:   4E:91:4D:04:E6:C0:EA:5E:AF:FC:B4:23:93:D8:BD:93:DE:61:16:C5
Certificate issuer:       /CN=79920871C4F8C9DC7FBBECDA508379522770C786
Certificate serial:       65EC992FCFFB8E54064E81BDFDC6DD14F2E6B9E6
Authority key identifier: 79:92:08:71:C4:F8:C9:DC:7F:BB:EC:DA:50:83:79:52:27:70:C7:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79920871C4F8C9DC7FBBECDA508379522770C786.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/34352e3136352e35322e302f32332d3233203d3e20323637373233.roa
Signing time:             Tue 06 Jan 2026 19:37:48 +0000
ROA not before:           Tue 06 Jan 2026 19:32:48 +0000
ROA not after:            Tue 05 Jan 2027 19:37:48 +0000
asID:                     267723
IP address blocks:        45.165.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/79920871C4F8C9DC7FBBECDA508379522770C786.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/79920871C4F8C9DC7FBBECDA508379522770C786.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79920871C4F8C9DC7FBBECDA508379522770C786.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ec:99:2f:cf:fb:8e:54:06:4e:81:bd:fd:c6:dd:14:f2:e6:b9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79920871C4F8C9DC7FBBECDA508379522770C786
        Validity
            Not Before: Jan  6 19:32:48 2026 GMT
            Not After : Jan  5 19:37:48 2027 GMT
        Subject: CN=4E914D04E6C0EA5EAFFCB42393D8BD93DE6116C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:cd:59:32:90:39:40:01:b2:02:df:43:be:
                    22:d5:9f:8b:2c:70:86:8b:27:fb:03:ff:16:11:5f:
                    ae:64:7f:a9:71:93:bf:4d:ef:93:6e:7e:0e:57:0e:
                    bd:5b:60:d1:69:12:8a:60:4b:3d:08:8a:02:c8:2e:
                    41:ec:f5:18:ae:5e:2f:b4:17:ce:17:b1:b5:82:11:
                    b2:d3:f3:dc:34:5e:e3:63:1a:a8:81:d1:1a:71:26:
                    e3:50:59:1c:8f:bb:e6:54:5d:5a:b9:86:32:60:e0:
                    92:be:a4:e7:38:49:57:01:6c:60:23:12:29:eb:3d:
                    36:be:c6:df:78:31:4c:5f:62:4b:34:76:64:25:ce:
                    b6:fd:51:70:b3:67:22:28:1c:dd:6a:40:00:a8:2b:
                    07:d9:fd:75:96:70:4f:1f:1e:85:39:53:e2:39:de:
                    c6:4e:8d:f1:99:ee:11:b9:49:28:d8:1b:5e:6a:75:
                    27:e7:66:0b:ce:22:cd:dd:4a:a2:26:80:63:a9:08:
                    02:4d:54:2c:38:c1:7f:d3:0b:1e:3b:54:20:f0:3d:
                    03:75:f6:a0:a0:03:16:5b:c6:8a:7d:46:18:14:f6:
                    64:8f:35:8f:c5:f2:d2:b6:c5:46:29:bd:45:04:e8:
                    66:1c:fb:42:14:e3:e0:f1:ae:f1:de:6f:22:fd:7a:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:91:4D:04:E6:C0:EA:5E:AF:FC:B4:23:93:D8:BD:93:DE:61:16:C5
            X509v3 Authority Key Identifier:
                keyid:79:92:08:71:C4:F8:C9:DC:7F:BB:EC:DA:50:83:79:52:27:70:C7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/79920871C4F8C9DC7FBBECDA508379522770C786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79920871C4F8C9DC7FBBECDA508379522770C786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2EA8871A2030BE25545361B95A25513AB9DEFC8480302E5633BC41188FB80C/0/34352e3136352e35322e302f32332d3233203d3e20323637373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:eb:fa:21:0d:ab:4d:63:03:62:e3:ef:9b:e4:d2:c2:12:39:
         62:02:df:7e:ef:9f:40:ef:1a:ea:ed:fa:0f:c3:62:db:15:f0:
         21:c4:17:5b:fd:5a:01:51:29:4d:34:25:ba:f9:7b:ee:ee:90:
         ab:93:39:3b:52:08:b1:84:58:94:0e:a7:e0:c0:58:ae:42:1f:
         7e:2d:73:b7:f2:cd:f2:06:79:4a:fa:5d:95:82:88:91:a1:47:
         6f:5f:f0:8e:ca:18:b3:06:a2:70:7b:80:84:97:ce:e7:c8:42:
         bf:31:3c:95:03:4f:3b:3d:c3:51:d5:f1:14:6a:94:05:e9:77:
         c0:c6:42:26:bd:a1:49:54:9c:a1:42:4e:82:54:f9:ec:90:70:
         37:ff:35:16:b3:d0:22:dd:db:24:9c:85:ff:80:8c:11:82:24:
         48:18:4b:86:04:e9:40:1f:7c:40:73:12:2b:79:3f:71:29:44:
         d8:92:6c:77:2b:42:5a:a8:34:4c:89:71:f0:a2:19:fa:a4:4c:
         38:de:ae:c8:8b:90:f4:06:b5:61:1c:1e:93:2b:44:a0:30:68:
         b0:ed:62:11:1b:96:13:7e:ab:7c:5c:22:f9:46:41:ea:a7:c7:
         6f:cb:58:2f:91:89:16:a4:da:88:62:d0:31:b7:fe:3e:ac:a3:
         59:d4:9d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:48 2026 by rpki-client