This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37392e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37392e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          7SWnjBLEgvF79/hg7TcbYIBq2/3NZPNbzP96OeIvRxE=
Subject key identifier:   57:AC:84:EF:6D:EE:33:71:D8:24:92:E3:43:91:86:C6:F9:A3:92:BC
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       4A154CE1DDF8ECB3FE480C8F43BDE4C61D9F05C8
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37392e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 06 Jan 2026 19:04:48 +0000
ROA not before:           Tue 06 Jan 2026 18:59:48 +0000
ROA not after:            Tue 05 Jan 2027 19:04:48 +0000
asID:                     263157
IP address blocks:        45.239.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:15:4c:e1:dd:f8:ec:b3:fe:48:0c:8f:43:bd:e4:c6:1d:9f:05:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Jan  6 18:59:48 2026 GMT
            Not After : Jan  5 19:04:48 2027 GMT
        Subject: CN=57AC84EF6DEE3371D82492E3439186C6F9A392BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:38:51:70:82:96:b7:de:37:60:7a:82:6c:
                    d4:cc:00:d1:1a:04:ee:b4:b4:39:93:43:29:a8:80:
                    fd:8f:e4:82:36:f3:d8:ed:14:63:a9:e6:f5:bf:49:
                    5c:97:ea:fb:7b:74:9f:7d:ba:1a:c7:62:3b:ea:20:
                    ab:3d:1d:dc:79:5f:58:fa:f3:c5:21:8b:0b:0f:ab:
                    61:bb:ee:60:db:61:cb:66:a6:1b:64:36:2e:dc:30:
                    c0:8e:28:4d:6a:63:b9:bc:03:5e:76:59:f9:54:92:
                    67:78:ad:5a:70:ee:a0:a5:c3:fa:e7:46:82:33:9e:
                    57:b5:62:d7:71:4d:37:5c:9e:88:03:ea:09:33:ef:
                    58:bc:09:52:0e:2d:43:71:a6:75:4c:95:3e:46:14:
                    bb:39:4c:45:c7:b6:93:a1:c2:4e:24:e3:2c:91:8c:
                    14:7e:e1:0e:7a:44:53:b4:ff:a0:39:3c:40:54:24:
                    da:5b:98:21:08:c2:c8:ef:18:7b:8f:09:c9:3d:57:
                    fc:bd:d3:24:72:a8:be:79:69:e9:55:6a:09:f8:af:
                    db:01:79:60:cd:31:a5:fd:0d:09:be:4e:a1:08:b5:
                    d2:7c:2b:50:5f:93:49:10:41:b4:71:a2:45:e8:f9:
                    03:b1:c2:f1:91:fe:de:36:4f:34:ec:be:6d:82:28:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:84:EF:6D:EE:33:71:D8:24:92:E3:43:91:86:C6:F9:A3:92:BC
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37392e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:94:87:af:ca:21:79:c7:b9:9a:96:5c:91:71:93:6d:aa:fc:
         25:d5:1d:6a:99:e3:0a:d6:14:10:10:a3:4b:2b:10:fe:20:c9:
         03:44:db:5b:ae:4f:05:5e:ed:a3:be:7e:24:81:14:aa:5b:01:
         83:98:cf:00:a2:2b:e8:72:bb:f6:6f:ad:a3:86:b9:e8:28:eb:
         9d:ce:e3:fa:0e:26:33:4e:d0:65:84:88:fc:12:da:6c:a4:8f:
         b2:ab:b1:3f:8d:e6:fc:cc:31:9a:e8:08:2f:58:84:7d:bf:1e:
         c2:be:94:6b:ee:3f:30:cb:b9:ed:cb:af:5a:fe:c8:86:8e:14:
         37:76:bb:e4:b6:a2:bb:ab:27:4f:aa:6b:d1:ef:f3:10:23:04:
         58:0b:3a:2b:8c:79:22:8e:5c:35:5a:d7:f9:c8:4e:aa:36:6f:
         91:77:bd:46:06:c6:b5:92:b7:a7:2a:99:d3:8c:8a:0e:17:b8:
         d3:d5:64:ff:bd:40:07:c6:60:25:fb:70:f1:0f:6a:8d:7d:00:
         8d:a6:a4:b0:7a:aa:81:10:f9:69:98:a4:eb:ee:cd:1b:9d:bb:
         db:a8:40:47:47:23:1a:8b:55:f3:5b:49:66:e6:28:1a:8e:61:
         21:7e:8c:21:72:bd:da:63:56:f2:98:97:ad:fd:c2:37:37:b7:
         d2:d1:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:39 2026 by rpki-client