This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
File:                     34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa (raw, json)
Hash identifier:          bYPhgor/xShNjLVv/0VEZkMvKJ10XKowzmFkhzb8bQw=
Subject key identifier:   A0:CF:BE:8E:A9:63:BF:8E:99:5F:90:67:E1:43:F3:27:EB:C3:B4:56
Certificate issuer:       /CN=5EBCF17E06528C616B6957551981653EE0748D3C
Certificate serial:       55D09742CDA2629A8A368764B3C0014584745E88
Authority key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
Signing time:             Tue 06 Jan 2026 19:29:03 +0000
ROA not before:           Tue 06 Jan 2026 19:24:03 +0000
ROA not after:            Tue 05 Jan 2027 19:29:03 +0000
asID:                     267854
IP address blocks:        45.176.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d0:97:42:cd:a2:62:9a:8a:36:87:64:b3:c0:01:45:84:74:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBCF17E06528C616B6957551981653EE0748D3C
        Validity
            Not Before: Jan  6 19:24:03 2026 GMT
            Not After : Jan  5 19:29:03 2027 GMT
        Subject: CN=A0CFBE8EA963BF8E995F9067E143F327EBC3B456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:82:a1:57:5d:a1:c0:f5:5a:08:a0:81:a0:
                    96:da:6f:a1:33:00:12:e9:79:91:65:0c:4b:c9:95:
                    4e:c6:04:f1:7a:32:c8:01:cb:e7:f2:2e:49:26:b2:
                    48:37:41:e1:44:5d:89:30:cb:95:92:cc:84:fa:7a:
                    99:db:15:a7:9f:23:cd:82:c0:5d:de:b7:98:f0:8f:
                    15:95:d1:d4:14:49:e5:98:75:44:d6:94:fe:6b:e6:
                    e8:7e:44:33:9e:0c:9e:ec:48:30:8a:fa:e7:9b:d6:
                    bf:b8:28:03:96:ad:86:4a:8a:bb:ef:5c:34:db:f5:
                    4d:f5:fa:45:ce:8a:23:79:a9:c6:75:71:60:76:89:
                    6a:0a:78:aa:dc:c2:07:45:01:bc:85:b7:f7:99:2a:
                    c1:82:4f:1c:ab:27:e6:d0:87:ba:0a:35:84:1e:36:
                    14:13:ca:d0:21:32:41:c5:cb:60:46:df:e9:d8:55:
                    3c:14:1f:26:b8:65:78:85:a9:64:bd:9c:34:51:69:
                    45:d0:f6:82:f2:b5:1a:4e:b0:79:54:ea:db:fc:81:
                    ed:7d:25:81:af:13:f6:62:f7:6b:f5:98:81:98:57:
                    5b:12:40:aa:17:8f:e7:e3:11:2f:f0:1f:ce:14:47:
                    96:bb:dc:03:0b:cf:91:67:f8:91:eb:f3:94:7b:e2:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:BE:8E:A9:63:BF:8E:99:5F:90:67:E1:43:F3:27:EB:C3:B4:56
            X509v3 Authority Key Identifier:
                keyid:5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:7c:f3:33:c6:44:f9:75:84:5b:bf:8c:d2:3b:21:fd:fb:
         d4:ee:8a:55:72:12:8e:8b:28:dc:0c:6e:dd:33:97:bd:53:7d:
         6c:3b:14:14:48:4c:9a:1c:98:e7:b9:41:7a:56:a6:ee:36:6d:
         17:6b:e5:5a:3e:2e:88:cd:d4:53:d2:83:6d:4e:ff:de:da:12:
         41:7f:f3:bc:5d:05:c3:11:f9:06:4c:bd:44:fb:29:96:96:05:
         69:33:e2:d8:1b:6a:9a:df:54:58:8e:66:a9:c8:65:c1:fe:aa:
         5a:b3:b6:75:11:d0:e5:b5:be:06:90:a0:e8:74:31:db:69:63:
         1d:39:3e:11:8b:32:ca:c1:72:15:17:e0:e0:b0:e6:dd:d3:b8:
         2a:12:49:69:6b:2c:f0:00:50:f6:36:89:aa:8a:1d:5e:9b:38:
         50:78:53:02:56:1e:4d:db:c2:04:da:9c:a7:7c:3a:e7:be:be:
         87:e1:57:49:24:b0:ff:d4:d7:49:7b:e7:4e:b0:bd:bd:3a:21:
         cd:49:20:a8:8c:a5:e9:58:95:b1:6a:ca:f1:6e:9f:c1:08:9f:
         5e:eb:23:b5:94:9b:96:6b:3e:bb:bb:1c:2a:40:f3:98:0b:8d:
         d8:6e:2d:7e:75:d3:d1:3c:9b:1b:77:02:a6:a6:1f:55:cb:5f:
         d9:e3:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:47 2026 by rpki-client