This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/34352e3137332e3230342e302f32322d3234203d3e203238303037.roa
File:                     34352e3137332e3230342e302f32322d3234203d3e203238303037.roa (raw, json)
Hash identifier:          DiPZnOEOUdiPyf1L/cKd+ZBL4ua/qB9Sl/g7n30zovU=
Subject key identifier:   65:80:EC:25:2A:11:D7:C8:4F:34:8A:C0:2F:17:98:C6:12:B9:A6:B0
Certificate issuer:       /CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
Certificate serial:       541E75DE367AEB99712C288B1CD38C12BBE32FB6
Authority key identifier: 4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/34352e3137332e3230342e302f32322d3234203d3e203238303037.roa
Signing time:             Tue 06 Jan 2026 19:36:58 +0000
ROA not before:           Tue 06 Jan 2026 19:31:58 +0000
ROA not after:            Tue 05 Jan 2027 19:36:58 +0000
asID:                     28007
IP address blocks:        45.173.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1e:75:de:36:7a:eb:99:71:2c:28:8b:1c:d3:8c:12:bb:e3:2f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
        Validity
            Not Before: Jan  6 19:31:58 2026 GMT
            Not After : Jan  5 19:36:58 2027 GMT
        Subject: CN=6580EC252A11D7C84F348AC02F1798C612B9A6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:c8:8c:c6:b9:72:e8:19:81:7c:c2:a3:31:
                    6f:dd:b4:a7:78:a5:00:df:a8:3d:ec:56:43:ae:f5:
                    ba:e5:26:d9:2b:91:f7:78:fb:b2:ea:05:9a:dd:e3:
                    bd:fc:be:13:5b:2d:9c:29:e7:42:81:f8:15:ba:cf:
                    6c:aa:18:89:b2:fd:33:be:5f:27:c5:52:c0:30:74:
                    f0:a6:32:1f:58:95:87:53:11:c3:5a:83:a4:19:11:
                    34:51:f1:9d:93:c8:59:be:31:0d:bd:2f:85:ac:d7:
                    4b:af:b4:7d:71:a8:0f:f1:0b:24:18:0e:40:dc:f6:
                    7d:ad:bd:15:32:3f:7c:2a:02:20:50:a1:2e:d1:8d:
                    f1:22:3e:d9:ac:b9:d0:46:2a:97:2e:91:98:3c:64:
                    2c:d1:85:36:86:c7:94:90:d4:30:bc:93:60:f3:bb:
                    17:22:70:fc:22:40:e1:dc:19:74:ad:99:60:84:3d:
                    19:f5:7e:7d:71:0e:34:3a:30:6b:f7:68:ba:86:95:
                    9d:23:85:0c:66:3d:88:95:cc:85:55:39:d9:e0:2e:
                    d6:f0:83:28:5a:3b:18:ae:98:dd:70:71:80:d0:8c:
                    8b:88:bd:c9:a4:f9:79:3a:88:0c:67:57:fb:e0:2d:
                    f8:5f:a9:35:c4:2f:02:c7:2f:9d:a3:fe:f9:ef:f2:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:80:EC:25:2A:11:D7:C8:4F:34:8A:C0:2F:17:98:C6:12:B9:A6:B0
            X509v3 Authority Key Identifier:
                keyid:4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/34352e3137332e3230342e302f32322d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:19:47:c6:5a:42:d2:96:c7:72:98:86:60:45:1f:fe:73:
         70:6f:ad:f4:93:5c:6e:ed:77:dc:cc:fb:02:4b:bd:e4:19:e8:
         f8:50:72:8d:eb:0b:6d:77:0a:79:e2:57:67:50:fa:44:0e:69:
         78:16:09:4a:d6:1b:d5:9d:dc:f7:77:81:a2:52:a5:02:bd:95:
         d9:c5:73:b3:88:0d:73:8e:42:a9:a8:af:d8:13:a5:6d:20:b4:
         23:0f:25:29:5c:ed:75:1a:2d:ed:98:10:a4:36:d0:87:bd:1e:
         84:40:37:4e:fd:27:cd:b0:3b:5d:fe:cb:cf:3f:bb:ef:c6:f4:
         c3:81:e3:fb:bc:01:73:59:ce:69:7c:2d:aa:a9:5c:64:cb:c2:
         64:15:f4:76:cc:ae:4a:00:90:c9:dc:4b:19:0d:ff:c9:aa:6c:
         52:db:c7:8c:bd:7d:2e:4f:9e:4d:69:c8:f9:f6:a7:20:6c:c7:
         0a:36:2b:c3:54:3d:45:44:df:d3:b9:3f:86:fb:55:d8:11:49:
         6a:32:9a:07:c4:ae:cb:16:94:b2:6a:e0:86:89:d7:13:82:5a:
         c9:20:e1:4f:5f:dc:c7:e3:01:d8:50:09:23:e5:0c:50:0d:cd:
         63:12:45:4b:ed:bd:f3:b6:56:da:29:0d:9b:76:28:12:57:b5:
         03:83:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:01 2026 by rpki-client