This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37342e302f32342d3234203d3e20323639383933.roa
File:                     34352e3139312e37342e302f32342d3234203d3e20323639383933.roa (raw, json)
Hash identifier:          B/Ox1zS5yM075zvAaehmN+ybnmAPywyW0pzAkatYAqo=
Subject key identifier:   1F:E0:8F:76:BA:40:91:84:91:4B:58:E9:59:2F:71:56:48:44:8D:A3
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       7A7D0E80FBBE10EF7028115609450F9A81880887
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37342e302f32342d3234203d3e20323639383933.roa
Signing time:             Tue 06 Jan 2026 20:56:58 +0000
ROA not before:           Tue 06 Jan 2026 20:51:58 +0000
ROA not after:            Tue 05 Jan 2027 20:56:58 +0000
asID:                     269893
IP address blocks:        45.191.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7d:0e:80:fb:be:10:ef:70:28:11:56:09:45:0f:9a:81:88:08:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Jan  6 20:51:58 2026 GMT
            Not After : Jan  5 20:56:58 2027 GMT
        Subject: CN=1FE08F76BA409184914B58E9592F715648448DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:4a:ad:99:33:0f:d1:02:d7:43:5a:36:4a:
                    fd:16:fe:68:0b:4c:14:57:46:b8:59:c8:a9:3d:e0:
                    08:2b:d4:e0:ec:c5:10:08:ec:a4:03:01:a0:0b:75:
                    2e:5a:a5:76:6b:f6:6c:5f:5e:52:e5:90:9c:99:ab:
                    19:3e:8b:97:7c:d8:7e:59:73:0e:eb:08:78:66:62:
                    bd:2f:9b:57:17:eb:55:5b:6b:5d:c6:67:81:42:3b:
                    c1:3a:3f:50:91:8e:a5:e6:28:73:72:74:32:99:5a:
                    dd:40:38:51:a8:da:69:a2:a4:2b:f4:b3:49:41:77:
                    f9:52:2c:14:84:fc:a1:f8:8d:07:d6:2c:19:2d:8c:
                    ae:70:ad:ea:84:76:dc:dc:45:60:49:ab:19:36:b2:
                    39:16:c5:25:3f:61:7f:dc:da:e7:3d:b4:6a:f4:29:
                    a2:89:ca:35:38:06:34:01:86:fb:25:aa:c1:68:12:
                    23:c5:ae:f7:dc:d4:e7:58:6f:c3:3c:a6:97:8b:a9:
                    ff:0f:a1:89:24:96:9f:20:22:fd:a3:69:3f:1e:42:
                    fa:3d:ea:ed:58:e3:fd:16:f1:3d:79:f2:81:12:6a:
                    ab:73:8f:13:ab:6f:fe:63:cc:d2:7a:c5:1b:01:3a:
                    df:47:40:61:25:e6:38:a1:e4:45:a0:4d:60:b5:10:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E0:8F:76:BA:40:91:84:91:4B:58:E9:59:2F:71:56:48:44:8D:A3
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37342e302f32342d3234203d3e20323639383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:c9:e9:9a:ed:42:5d:2f:b6:18:92:e1:5a:a6:56:36:d3:f5:
         91:54:47:4e:dd:e9:6d:c1:e6:c3:6e:d7:dd:a5:55:e7:ef:13:
         f2:0a:3b:0e:55:50:3d:fd:1d:06:de:97:06:6e:df:94:b2:c6:
         1f:1e:8e:e0:9d:86:48:06:22:05:44:7c:79:24:dd:49:e4:ff:
         8d:c1:8a:76:52:5d:1e:f6:f1:76:58:85:c5:59:f5:0d:a5:32:
         34:8c:5b:79:77:08:c5:a2:e4:22:6b:81:0d:63:ad:4d:4e:08:
         55:c6:dd:94:8a:f1:e1:05:d7:39:88:6c:0b:ac:eb:54:ac:c7:
         84:cb:5b:78:a4:d5:6d:2a:ec:f7:e0:1a:8f:05:6a:8d:4b:cd:
         e2:e9:10:00:7b:44:b0:b5:c5:de:9d:f6:8f:9a:45:ab:bd:ed:
         3e:3e:3c:a1:1c:50:f6:f1:79:85:f5:8b:ec:62:42:2a:b3:b3:
         f8:a9:65:37:8e:c6:ca:0f:8a:01:05:90:c0:a2:9e:ce:db:60:
         44:29:29:7e:de:94:a6:37:85:e1:87:84:81:a0:18:a1:a7:53:
         66:2e:38:e0:69:ff:49:7e:c1:a8:1f:e5:05:30:4f:4e:01:eb:
         3d:5b:4e:d3:a8:ee:55:fa:0d:d6:da:9b:34:5f:1e:a1:eb:20:
         29:64:81:4e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUen0OgPu+EO9wKBFWCUUPmoGICIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4OTlBNDg0OUY1NTFCQkMyRjRGODcwRjBFQ0VBNUE2
NkJCQjdGMTAeFw0yNjAxMDYyMDUxNThaFw0yNzAxMDUyMDU2NThaMDMxMTAvBgNV
BAMTKDFGRTA4Rjc2QkE0MDkxODQ5MTRCNThFOTU5MkY3MTU2NDg0NDhEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdUqtmTMP0QLXQ1o2Sv0W/mgL
TBRXRrhZyKk94Agr1ODsxRAI7KQDAaALdS5apXZr9mxfXlLlkJyZqxk+i5d82H5Z
cw7rCHhmYr0vm1cX61Vba13GZ4FCO8E6P1CRjqXmKHNydDKZWt1AOFGo2mmipCv0
s0lBd/lSLBSE/KH4jQfWLBktjK5wreqEdtzcRWBJqxk2sjkWxSU/YX/c2uc9tGr0
KaKJyjU4BjQBhvslqsFoEiPFrvfc1OdYb8M8ppeLqf8PoYkklp8gIv2jaT8eQvo9
6u1Y4/0W8T158oESaqtzjxOrb/5jzNJ6xRsBOt9HQGEl5jih5EWgTWC1EOL5AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUH+CPdrpAkYSRS1jpWS9xVkhEjaMwHwYDVR0j
BBgwFoAUl4maSEn1UbvC9Phw8OzqWma7t/EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUUwOEFBNzZFRjdBRTRFRjQ3QUI2Q0Y1NjkyNERGOTcw
QUJDMUI0MERGRTM3NEIwMzJEMDVGNkJFQTUwQ0ZCLzAvOTc4OTlBNDg0OUY1NTFC
QkMyRjRGODcwRjBFQ0VBNUE2NkJCQjdGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Nzg5OUE0ODQ5RjU1MUJCQzJG
NEY4NzBGMEVDRUE1QTY2QkJCN0YxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUVFMDhBQTc2RUY3QUU0RUY0N0FCNkNGNTY5MjRERjk3MEFCQzFCNDBE
RkUzNzRCMDMyRDA1RjZCRUE1MENGQi8wLzM0MzUyZTMxMzkzMTJlMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2/SjAN
BgkqhkiG9w0BAQsFAAOCAQEAscnpmu1CXS+2GJLhWqZWNtP1kVRHTt3pbcHmw27X
3aVV5+8T8go7DlVQPf0dBt6XBm7flLLGHx6O4J2GSAYiBUR8eSTdSeT/jcGKdlJd
HvbxdliFxVn1DaUyNIxbeXcIxaLkImuBDWOtTU4IVcbdlIrx4QXXOYhsC6zrVKzH
hMtbeKTVbSrs9+AajwVqjUvN4ukQAHtEsLXF3p32j5pFq73tPj48oRxQ9vF5hfWL
7GJCKrOz+KllN47Gyg+KAQWQwKKezttgRCkpft6UpjeF4YeEgaAYoadTZi444Gn/
SX7BqB/lBTBPTgHrPVtO06juVfoN1tqbNF8eoesgKWSBTg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:00:33 2026 by rpki-client