This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          TjtoFYLVjDKHOnXgxpoAj5688l9ZqOR2EwmGuN23pr0=
Subject key identifier:   C8:A9:9C:B0:35:93:A0:4C:8D:BC:A0:10:BB:BD:09:5E:68:2A:E2:9F
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       37014135C1FB998D808AF3825607C80710B3A2A6
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 06 Jan 2026 20:50:00 +0000
ROA not before:           Tue 06 Jan 2026 20:45:00 +0000
ROA not after:            Tue 05 Jan 2027 20:50:00 +0000
asID:                     269886
IP address blocks:        45.191.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:01:41:35:c1:fb:99:8d:80:8a:f3:82:56:07:c8:07:10:b3:a2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Jan  6 20:45:00 2026 GMT
            Not After : Jan  5 20:50:00 2027 GMT
        Subject: CN=C8A99CB03593A04C8DBCA010BBBD095E682AE29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:25:cd:2c:fc:5d:25:1e:8d:71:88:e5:ef:
                    8a:ee:f1:ea:9e:ad:76:83:2d:3c:a4:66:c9:06:ef:
                    ba:be:c8:93:8b:f7:99:22:c9:45:b1:65:35:f2:68:
                    25:11:d7:23:59:2b:a0:2f:95:65:64:5a:42:69:14:
                    c7:a3:55:16:73:e5:dc:f3:de:81:b8:70:27:4b:c3:
                    19:0f:8c:a2:26:fb:67:a2:48:5b:d1:1a:3d:8d:de:
                    c2:2c:f4:a6:23:de:65:cb:e0:f8:c1:31:bd:0d:9e:
                    af:e1:85:cb:8f:75:04:69:83:c2:e8:60:50:96:ec:
                    1e:24:10:ea:0b:97:94:af:51:60:56:1c:8b:30:28:
                    a7:34:0c:ae:3e:c6:b1:27:5b:1c:b3:94:7f:b5:76:
                    c9:e3:27:31:ec:4b:65:21:a3:d2:69:ee:02:31:11:
                    07:ca:2e:3e:e5:3b:de:68:74:d3:8e:27:96:e7:67:
                    42:7d:aa:28:56:6e:5b:a8:9e:ba:68:d0:54:fc:ad:
                    d7:cb:18:af:2b:fa:2d:ed:17:8e:73:39:fd:2c:18:
                    1d:33:cc:50:f3:cd:3a:0a:02:18:4e:c6:b6:67:ef:
                    0c:11:ba:64:da:22:d2:9c:3c:f1:ab:76:a4:57:1a:
                    c0:54:64:5b:0b:9e:e8:97:2a:78:bd:1a:cc:b3:2b:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A9:9C:B0:35:93:A0:4C:8D:BC:A0:10:BB:BD:09:5E:68:2A:E2:9F
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:a2:4f:35:e9:e7:4f:34:6a:65:1f:ff:02:44:c4:4f:b0:e6:
         99:a5:db:a6:95:99:4f:73:4a:e9:c5:44:bb:cf:d8:4b:07:2d:
         7b:be:4b:ae:0e:c3:2e:0a:d1:3c:7e:17:54:5b:55:7f:54:32:
         d2:8e:89:31:3a:92:93:80:40:88:81:83:0e:3d:9f:fb:08:4a:
         c9:77:ce:b0:25:93:ac:d0:16:9c:31:35:d1:c6:eb:50:06:5d:
         b7:09:72:29:c2:7e:c8:4b:ab:5e:ee:9f:53:4f:92:f8:5b:0f:
         02:94:b4:bc:cc:47:0c:ab:20:e7:07:5f:aa:ab:87:3a:60:39:
         51:b7:9a:3e:ce:4d:15:8a:61:ac:c3:b7:9b:b6:8f:46:8b:df:
         d8:97:19:3b:58:d4:3d:5b:6a:24:9f:13:c9:8a:d8:7a:32:72:
         8a:a9:1c:b0:56:36:25:41:b0:de:1a:fc:69:34:80:d7:84:0b:
         a1:82:8a:d7:80:22:15:0e:25:a3:96:f2:11:89:e0:43:ec:41:
         03:0b:e9:b0:1a:7b:f1:b7:99:ec:e9:e7:e7:ea:e9:1b:be:4f:
         a0:54:74:8e:a4:9e:8d:35:12:12:84:82:97:55:ba:8f:e9:0e:
         85:fe:88:4d:eb:17:34:3c:12:ff:d1:20:84:af:a5:e9:ca:15:
         e6:23:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:40 2026 by rpki-client