This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa
File:                     34352e3139312e37352e302f32342d3234203d3e20323732393432.roa (raw, json)
Hash identifier:          5jpqVFMtVnnMmoejdtvSDr53lBzkyeuqhUvSjih6v6g=
Subject key identifier:   E1:71:56:1D:EC:8F:10:AF:39:B1:99:77:07:AE:32:61:6A:DF:EB:32
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       0928BDA0C8830250E2DF0943A28416F5E3AC0F57
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa
Signing time:             Tue 06 Jan 2026 20:56:59 +0000
ROA not before:           Tue 06 Jan 2026 20:51:59 +0000
ROA not after:            Tue 05 Jan 2027 20:56:59 +0000
asID:                     272942
IP address blocks:        45.191.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:28:bd:a0:c8:83:02:50:e2:df:09:43:a2:84:16:f5:e3:ac:0f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Jan  6 20:51:59 2026 GMT
            Not After : Jan  5 20:56:59 2027 GMT
        Subject: CN=E171561DEC8F10AF39B1997707AE32616ADFEB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:dc:5e:ac:86:8e:fd:54:1e:aa:10:b9:b8:
                    01:81:cf:c1:7a:a5:62:67:f6:38:e3:e9:0c:55:da:
                    b2:81:b1:10:c2:7f:b6:39:ec:04:13:5f:e3:7b:68:
                    27:f4:44:56:b6:4e:f2:6d:c9:ad:67:8e:cb:7d:1a:
                    ad:98:a8:16:8d:22:22:a4:88:69:6c:b8:af:0e:a8:
                    ca:de:6e:05:d2:d9:c7:5e:b3:49:70:3e:04:97:84:
                    08:97:0c:73:b7:a5:cc:d9:2e:aa:8e:e9:8b:0f:dc:
                    7f:c3:0c:36:6f:d2:12:61:69:7e:c5:e4:67:85:eb:
                    7b:06:c6:f3:79:e2:6e:9a:2e:74:2e:a8:d3:e9:e5:
                    60:e9:91:db:fc:3f:31:0b:74:c1:b1:22:e4:be:36:
                    51:cc:cb:36:94:03:8a:e3:df:71:ec:09:3f:17:f3:
                    b2:f5:f0:fd:22:82:80:1b:02:4f:88:f8:f7:63:60:
                    b3:e8:53:b8:1f:a5:80:9b:04:d2:88:d7:62:a3:0c:
                    a3:dd:f0:18:62:2a:fd:7d:e6:c7:14:3f:28:76:76:
                    31:e6:39:a3:88:6d:a8:33:1a:e8:02:42:bc:05:6a:
                    b9:28:93:a5:e0:9d:e8:fd:e1:9e:a8:24:6c:be:2f:
                    d4:e2:99:95:8c:33:8c:30:81:c9:65:b7:f7:64:41:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:56:1D:EC:8F:10:AF:39:B1:99:77:07:AE:32:61:6A:DF:EB:32
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:28:60:92:e6:b6:07:2e:8a:75:6e:53:b0:9f:8a:69:af:
         98:2a:28:65:1d:b5:fd:8c:54:45:b7:56:62:ef:50:31:ee:0d:
         9e:a2:2b:a0:59:8c:77:2a:ce:e2:b0:3c:22:18:78:e1:4b:88:
         d2:2f:36:c3:25:32:b4:b0:5d:9f:93:e6:51:3b:5c:e2:17:d2:
         cf:90:21:6a:90:fa:8e:9d:5b:97:b6:6b:65:aa:15:46:22:b4:
         e9:fb:d7:cc:8f:9f:8e:4b:19:7b:16:b1:6e:92:ee:9a:f3:af:
         85:5e:6e:61:0e:e8:ec:cf:f2:0f:b5:63:63:f7:d1:ee:72:0a:
         0c:8a:20:a5:7f:31:ab:01:52:bc:87:d4:d2:6c:aa:6a:02:05:
         48:78:0c:7e:a5:ea:07:f1:72:d7:e1:4f:80:ac:5d:1a:0a:01:
         ff:3c:87:31:21:4f:c5:20:2c:fd:ea:10:27:42:79:2b:85:72:
         62:fb:e6:d2:c1:bc:6c:da:db:91:a3:ef:34:15:5e:08:74:23:
         cf:3b:1a:84:3d:df:d5:4d:ff:d4:55:d5:aa:f2:57:be:c6:64:
         c7:96:b9:dc:fe:37:17:ec:b5:ec:54:9f:09:57:35:9e:ce:ee:
         22:19:cf:f7:2f:91:4b:b9:27:8a:a3:ba:3b:34:64:d6:82:bb:
         5c:2e:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:47 2026 by rpki-client