This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/34352e372e3235322e302f32322d3234203d3e20323635373339.roa
File:                     34352e372e3235322e302f32322d3234203d3e20323635373339.roa (raw, json)
Hash identifier:          OMJEZFekQ8UXoZWHGUZCT61hMTLJIrxdPqyDSm2LEV8=
Subject key identifier:   D0:6B:64:4F:97:6E:40:DF:02:35:43:B8:58:84:12:45:4C:98:12:D6
Certificate issuer:       /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Certificate serial:       1A8D0C78B30DF3887FC9B6B13CE96266C4EB826E
Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/34352e372e3235322e302f32322d3234203d3e20323635373339.roa
Signing time:             Tue 06 Jan 2026 19:48:04 +0000
ROA not before:           Tue 06 Jan 2026 19:43:04 +0000
ROA not after:            Tue 05 Jan 2027 19:48:04 +0000
asID:                     265739
IP address blocks:        45.7.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:0c:78:b3:0d:f3:88:7f:c9:b6:b1:3c:e9:62:66:c4:eb:82:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
        Validity
            Not Before: Jan  6 19:43:04 2026 GMT
            Not After : Jan  5 19:48:04 2027 GMT
        Subject: CN=D06B644F976E40DF023543B8588412454C9812D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:67:42:a7:62:4c:65:1e:fc:c9:aa:e7:74:
                    dd:3b:8f:38:b6:4f:c6:31:dd:27:26:30:0e:42:aa:
                    97:c5:de:0a:3d:34:1c:13:ca:f2:5b:03:ee:5e:af:
                    0f:37:d2:b0:aa:c6:a8:fb:72:ee:9f:e5:9e:50:a4:
                    37:27:b1:d5:3a:12:23:70:72:9d:14:a1:dc:77:4d:
                    cf:0b:71:74:d9:9a:30:c3:b0:2c:e8:8d:07:2a:c6:
                    23:0a:cb:ec:5f:03:8b:61:02:14:be:00:98:86:ff:
                    6d:97:f3:24:14:74:75:09:6d:3d:11:16:91:4e:25:
                    68:81:a6:cd:75:8d:53:2b:12:b5:e8:92:fa:7f:fd:
                    39:e8:49:fb:da:58:9e:ea:5d:65:d8:19:09:f0:f4:
                    d2:62:94:e4:e0:32:bd:53:2c:03:ea:a4:95:46:d9:
                    39:94:bd:b9:bd:79:df:d6:c2:2b:83:b8:29:04:32:
                    c9:92:f6:cd:8d:d1:38:cb:60:95:08:8e:45:4a:0d:
                    dc:32:06:56:a0:6c:af:4f:95:d5:1e:41:34:3f:f0:
                    05:fe:25:83:c4:b0:b8:fc:b6:c1:31:27:e3:a6:87:
                    c4:4d:f6:d6:87:7c:ff:b7:a6:3a:4b:54:5f:fa:38:
                    8c:bf:d9:1d:dd:40:b6:e7:88:c3:c8:af:f9:0a:d6:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6B:64:4F:97:6E:40:DF:02:35:43:B8:58:84:12:45:4C:98:12:D6
            X509v3 Authority Key Identifier:
                keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/34352e372e3235322e302f32322d3234203d3e20323635373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:30:61:1b:44:fc:e7:08:70:08:71:2d:f3:2a:5a:e0:1e:37:
         3a:46:26:b8:e1:09:c7:74:fe:34:73:e0:12:19:f7:81:18:97:
         f5:88:c9:ed:3d:4b:4a:9d:e4:b6:33:4e:1e:c5:14:cd:b9:46:
         3f:cd:33:ad:77:57:9e:65:4c:ee:7b:a3:2c:0c:a9:51:1e:1e:
         bc:5d:5f:03:02:50:b0:f0:fc:70:16:f1:52:ab:21:2b:2c:4a:
         5f:83:2e:35:d4:32:17:0e:21:2c:d5:14:58:f0:c3:df:c7:a2:
         2d:df:92:a5:e4:89:89:55:c8:00:7d:ba:2b:f3:e6:13:0c:fc:
         f3:4a:a6:52:2b:a4:89:80:00:06:63:82:e9:c2:08:32:b9:96:
         49:e9:1a:23:5f:3c:ea:b3:58:82:64:1a:d0:bb:fd:35:b5:c9:
         05:25:4b:b5:56:52:6b:04:b9:b9:b7:1c:94:da:b7:3c:a1:01:
         a6:5d:da:3f:e9:c7:f3:48:57:1d:fe:ef:99:b4:2e:51:d7:c6:
         d4:c2:9e:17:26:b1:d4:12:06:2f:8b:e8:7c:31:a8:92:30:15:
         99:be:62:66:c5:17:da:0a:12:73:1e:b9:68:47:70:3b:53:be:
         2e:1a:44:c8:10:31:bb:a4:7e:7e:44:85:eb:90:bc:7f:37:3f:
         a9:04:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:38:59 2026 by rpki-client