This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABBB40650557A1F1009DC88C2E7EC092031816BC0792E592429B855AB5123D52/0/34352e3137372e32302e302f32322d3234203d3e20323637383731.roa
File:                     34352e3137372e32302e302f32322d3234203d3e20323637383731.roa (raw, json)
Hash identifier:          A4WhSQwipkAAiO9f0lxbhikMTiFlDAiJPEYU9AaSOxw=
Subject key identifier:   12:70:4A:E6:76:F5:9A:DD:E4:8F:60:99:34:9F:3C:B7:18:56:D2:DA
Certificate issuer:       /CN=73762CB9E953E3DB7FCD492D556ED5750BCE3635
Certificate serial:       2D7EF15B75F77D1474E942AA5BD80175E93DD67E
Authority key identifier: 73:76:2C:B9:E9:53:E3:DB:7F:CD:49:2D:55:6E:D5:75:0B:CE:36:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73762CB9E953E3DB7FCD492D556ED5750BCE3635.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABBB40650557A1F1009DC88C2E7EC092031816BC0792E592429B855AB5123D52/0/34352e3137372e32302e302f32322d3234203d3e20323637383731.roa
Signing time:             Tue 06 Jan 2026 19:07:24 +0000
ROA not before:           Tue 06 Jan 2026 19:02:24 +0000
ROA not after:            Tue 05 Jan 2027 19:07:24 +0000
asID:                     267871
IP address blocks:        45.177.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABBB40650557A1F1009DC88C2E7EC092031816BC0792E592429B855AB5123D52/0/73762CB9E953E3DB7FCD492D556ED5750BCE3635.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABBB40650557A1F1009DC88C2E7EC092031816BC0792E592429B855AB5123D52/0/73762CB9E953E3DB7FCD492D556ED5750BCE3635.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73762CB9E953E3DB7FCD492D556ED5750BCE3635.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7e:f1:5b:75:f7:7d:14:74:e9:42:aa:5b:d8:01:75:e9:3d:d6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73762CB9E953E3DB7FCD492D556ED5750BCE3635
        Validity
            Not Before: Jan  6 19:02:24 2026 GMT
            Not After : Jan  5 19:07:24 2027 GMT
        Subject: CN=12704AE676F59ADDE48F6099349F3CB71856D2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:00:4b:f8:68:76:cc:13:a6:37:02:86:72:
                    ca:d2:b0:00:3e:48:19:c0:1d:25:d5:24:a4:49:48:
                    5c:21:47:92:c2:18:fe:47:89:ec:aa:10:39:1c:ce:
                    ff:58:99:bd:37:c1:6b:23:78:ed:52:17:10:0d:b0:
                    d7:70:5b:f3:8d:b0:37:6b:08:ff:ad:bd:0b:f4:99:
                    d5:bd:05:56:19:9f:57:f8:e8:c9:4a:63:60:f7:7b:
                    4c:9b:87:b5:3e:c1:a1:79:61:b0:5d:07:5f:5c:98:
                    a4:31:84:36:ef:5a:42:2a:96:48:ec:f4:b5:80:cc:
                    dd:87:a1:51:87:0a:68:a6:5f:92:f3:91:fb:32:19:
                    6f:c4:80:e9:40:8f:6e:ae:aa:c2:27:24:93:c7:46:
                    4a:6b:6e:94:93:21:b3:30:97:b1:18:cc:60:37:3c:
                    7d:7e:6c:77:9a:4e:97:d2:31:36:15:04:9b:e8:23:
                    fc:b4:0b:66:8b:7f:61:bf:6c:07:ee:a3:58:0f:98:
                    df:4b:7c:eb:fd:aa:62:58:20:5c:0f:a8:69:7d:79:
                    45:23:fc:aa:36:eb:00:5b:bc:24:33:2c:c5:6c:53:
                    b7:36:75:3e:c4:36:9b:ae:82:0c:e3:33:e6:d0:e3:
                    1c:50:a5:fa:2d:75:52:04:d6:46:a6:d6:4f:6e:cd:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:4A:E6:76:F5:9A:DD:E4:8F:60:99:34:9F:3C:B7:18:56:D2:DA
            X509v3 Authority Key Identifier:
                keyid:73:76:2C:B9:E9:53:E3:DB:7F:CD:49:2D:55:6E:D5:75:0B:CE:36:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABBB40650557A1F1009DC88C2E7EC092031816BC0792E592429B855AB5123D52/0/73762CB9E953E3DB7FCD492D556ED5750BCE3635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73762CB9E953E3DB7FCD492D556ED5750BCE3635.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABBB40650557A1F1009DC88C2E7EC092031816BC0792E592429B855AB5123D52/0/34352e3137372e32302e302f32322d3234203d3e20323637383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:75:95:fa:5a:c7:c0:11:27:fd:8b:fd:f1:0f:19:ee:66:c7:
         15:31:1d:9b:ab:86:29:45:fb:c2:7c:cf:7b:a3:07:51:67:bd:
         58:b8:9c:1f:02:99:bc:c5:57:14:b5:04:2b:16:e2:1e:c2:97:
         89:12:6d:b2:45:f0:b4:81:dc:cb:2a:6e:9d:5f:13:64:0d:cd:
         57:c8:da:04:82:d0:62:fc:a6:9f:07:f5:26:de:bf:ac:f7:f4:
         7d:f8:0d:3f:7b:3a:c0:e9:53:ea:29:0e:8a:83:cf:ae:c5:4f:
         9b:ae:80:13:3e:5f:16:78:46:ad:69:1a:e6:b5:16:d5:9c:db:
         cb:0f:2a:12:6f:03:91:e9:0b:23:05:37:60:c0:14:7d:6d:a3:
         5b:8d:f6:df:61:4d:51:ab:64:fb:b3:c1:ce:80:55:f0:0b:d5:
         74:34:d9:61:12:56:9e:7a:fb:93:d3:67:bc:fb:45:68:23:e7:
         21:75:ab:b1:0d:c6:37:bc:e5:a7:3a:e4:3f:ab:58:cc:00:22:
         4d:10:03:3b:6b:81:3a:ba:d3:38:f6:d0:51:78:15:64:8a:7b:
         98:9e:a7:4f:52:a8:34:81:db:6b:6a:be:6e:ff:50:be:6a:7f:
         5a:a0:41:06:65:18:a3:cf:fe:f9:6b:b5:8b:13:df:01:6b:6a:
         fe:59:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:42:54 2026 by rpki-client