This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa
File:                     34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa (raw, json)
Hash identifier:          hrTOlZ+8zlg5mJnjW/azp9/TXuGtjlE7RDq33hkljtA=
Subject key identifier:   3C:49:40:9E:CA:6C:D4:BF:3F:DD:EB:2F:FE:9D:D5:A1:BF:E3:E1:4A
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       3BA71852554ADE65A18F680A595F50C7BECDDC25
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa
Signing time:             Wed 07 Jan 2026 17:59:12 +0000
ROA not before:           Wed 07 Jan 2026 17:54:12 +0000
ROA not after:            Wed 06 Jan 2027 17:59:12 +0000
asID:                     269843
IP address blocks:        45.189.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a7:18:52:55:4a:de:65:a1:8f:68:0a:59:5f:50:c7:be:cd:dc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Jan  7 17:54:12 2026 GMT
            Not After : Jan  6 17:59:12 2027 GMT
        Subject: CN=3C49409ECA6CD4BF3FDDEB2FFE9DD5A1BFE3E14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:ea:37:6c:32:ba:1b:21:b1:84:91:7b:35:
                    9a:64:94:f8:e5:22:38:a7:50:9a:a9:d7:63:81:88:
                    23:e2:ba:f4:dc:55:09:b5:e2:de:70:4c:45:09:90:
                    fc:94:50:a2:b3:1b:90:75:95:a6:aa:30:80:95:6c:
                    d6:61:ee:9b:55:07:65:7e:2d:65:c4:10:50:17:2e:
                    1b:42:36:1c:1b:23:41:51:16:7b:a5:54:0e:01:15:
                    a5:25:97:7d:8a:59:23:60:88:bd:6f:c5:57:54:2d:
                    27:ed:2e:e4:2d:22:f7:e1:c7:15:7a:56:f5:61:f6:
                    a5:0f:6c:42:fb:3b:fb:64:08:38:f4:76:5d:54:67:
                    de:6b:97:6d:4c:77:56:2b:2c:e2:79:c4:50:2f:1e:
                    ff:2a:42:7b:ee:8e:97:dd:c4:58:73:1e:a9:c2:39:
                    18:28:cb:23:05:94:02:16:c6:44:22:b3:be:28:5a:
                    da:bc:2e:18:c5:94:cd:96:a5:ef:5c:c1:79:c3:ab:
                    8e:98:f7:b4:9c:70:ad:e0:39:95:c7:93:47:08:d4:
                    a0:dc:29:20:7a:03:7e:ee:99:55:19:60:f3:04:33:
                    4a:df:8a:e3:1b:81:8e:24:8c:4d:21:cb:07:02:5b:
                    be:62:1e:a9:6f:88:f1:ca:b5:da:2d:42:ca:67:00:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:49:40:9E:CA:6C:D4:BF:3F:DD:EB:2F:FE:9D:D5:A1:BF:E3:E1:4A
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130392e302f32342d3234203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:13:9b:3e:7e:86:96:93:e3:37:08:99:45:08:fd:54:d2:7f:
         6a:56:8e:15:f3:61:b2:18:c8:3c:d8:3f:4c:66:09:27:0d:93:
         17:cd:a1:22:b1:e4:76:a6:ac:ec:89:10:9e:76:67:18:89:0c:
         c8:8a:85:68:cd:56:7d:9b:4f:f7:81:bf:ce:f6:ab:fe:72:d8:
         09:a6:d0:57:f5:da:fc:95:13:64:79:e8:07:51:37:b7:d8:41:
         1a:99:03:f2:d7:26:14:7a:91:e5:c1:e8:45:af:59:13:10:f9:
         63:1e:7a:3e:13:c8:e0:f4:1d:15:38:d3:2d:f3:4d:c2:28:97:
         93:bc:6b:f7:15:76:fb:0f:3b:4f:8a:db:8a:1d:0c:86:f8:ac:
         65:85:eb:03:f4:ff:0a:bf:ad:08:60:b5:ba:b4:99:7c:a6:82:
         bd:25:58:35:0a:0e:5c:9b:1b:17:1a:1c:1b:52:59:fd:cf:d0:
         94:ae:82:f0:11:1c:aa:64:36:72:02:5b:c1:10:54:e5:65:11:
         a4:16:4c:fe:7f:46:cd:ed:0a:ca:04:de:89:b5:96:c1:40:ce:
         fd:5e:76:67:00:49:98:df:5f:9f:02:f1:b7:ac:b5:82:be:16:
         aa:f6:29:3a:86:17:dd:0e:01:20:37:ad:ee:9a:17:a8:49:0f:
         24:1e:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:14 2026 by rpki-client