This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa
File:                     34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa (raw, json)
Hash identifier:          H6Vibe0nx6v/6OUwnj7+ZlwgmPO2m1yuud3efzPmaZE=
Subject key identifier:   D1:B5:96:56:61:0B:60:83:F2:60:A3:B3:6D:B9:99:C9:37:FC:72:AF
Certificate issuer:       /CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
Certificate serial:       5F8C6CA0B011A15875330E5C427F17ED478158A1
Authority key identifier: C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa
Signing time:             Tue 06 Jan 2026 19:31:57 +0000
ROA not before:           Tue 06 Jan 2026 19:26:57 +0000
ROA not after:            Tue 05 Jan 2027 19:31:57 +0000
asID:                     265607
IP address blocks:        45.188.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8c:6c:a0:b0:11:a1:58:75:33:0e:5c:42:7f:17:ed:47:81:58:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
        Validity
            Not Before: Jan  6 19:26:57 2026 GMT
            Not After : Jan  5 19:31:57 2027 GMT
        Subject: CN=D1B59656610B6083F260A3B36DB999C937FC72AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:a7:33:be:76:bd:b2:0b:bb:f8:16:3c:c2:
                    b0:3b:00:79:f9:14:e6:12:87:39:87:a7:d7:f5:95:
                    b4:10:3f:2e:31:91:31:d7:45:50:69:18:46:81:33:
                    09:af:d8:d0:f4:fe:b2:0d:ce:6e:79:08:bd:81:d3:
                    b3:a8:10:62:eb:c5:3a:07:48:a7:5f:7b:0f:54:46:
                    db:b6:b8:d1:a3:11:a6:39:04:85:a9:93:44:be:45:
                    b4:83:0f:a7:1c:6a:a4:c0:75:3b:d7:d7:53:43:6b:
                    ae:8a:3f:ee:5d:30:20:ec:af:37:2d:59:07:61:0e:
                    2e:b5:2b:77:88:9f:9f:d0:54:96:dc:a9:e3:77:a1:
                    d8:48:12:0f:36:ac:a8:ad:53:51:95:84:3a:9d:b4:
                    c3:d8:f8:6b:a7:2c:a6:07:ed:54:bc:b4:fe:a4:9d:
                    76:71:c5:10:69:d1:b4:ac:a4:bf:dc:83:4d:39:6d:
                    b3:fb:45:88:8e:e2:9a:f9:3c:6f:31:e4:cf:2d:60:
                    e7:d5:a3:98:6e:bc:5d:b5:51:54:6c:67:40:9e:c3:
                    ae:49:1f:01:c1:50:b1:a2:55:49:e7:61:a1:67:f9:
                    ff:23:96:2e:4a:c3:b1:44:12:1c:90:8b:91:81:bb:
                    1b:bb:98:15:1e:fb:63:0a:fc:42:bd:c7:f0:5e:fb:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:96:56:61:0B:60:83:F2:60:A3:B3:6D:B9:99:C9:37:FC:72:AF
            X509v3 Authority Key Identifier:
                keyid:C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:da:3b:d8:a5:9b:63:0b:f8:2e:6c:8e:07:66:79:1f:ac:
         c0:15:36:66:0c:0d:db:76:93:e4:7c:1c:99:d3:3c:0a:e9:c7:
         70:73:bc:9c:6d:f7:2c:91:91:1c:d1:87:5b:08:02:36:10:f4:
         71:f7:9e:a5:7c:3f:11:e4:62:68:10:39:26:db:8b:ec:51:b1:
         27:22:d9:a1:9a:da:b2:b2:3a:50:5f:29:98:60:53:8b:6f:c3:
         fe:fc:5c:67:10:4f:7f:64:4b:4b:f1:30:97:3b:40:e7:64:3d:
         ff:5a:e1:3b:0b:04:c7:a5:0f:ab:1e:f8:b2:5f:b5:89:1a:1d:
         16:56:3a:08:f5:84:d5:23:31:43:30:0f:e7:af:73:0f:59:e4:
         ea:cb:4c:bc:a7:fe:6d:b9:86:a3:df:d0:21:97:cc:f1:ff:24:
         e1:a4:2e:ef:bb:58:5a:f9:b1:cb:5d:01:42:73:59:9c:1e:31:
         ba:55:f5:07:c4:9a:43:ab:87:08:74:0f:fb:6b:d2:d0:ea:c9:
         00:1c:21:22:ba:68:3d:b6:e9:30:08:12:d9:a7:52:e2:bc:9a:
         cf:e5:c8:1d:f5:ce:69:08:65:51:f7:f6:cf:40:e8:1a:c4:74:
         cd:5b:52:bc:fe:f9:35:16:46:8e:a1:d7:38:06:72:43:11:19:
         7b:4c:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:39:37 2026 by rpki-client