This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa
File:                     34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa (raw, json)
Hash identifier:          YbI10qMmpWFdqWZ8b7XH5z+N5dNGy8EgU2Kht+03phE=
Subject key identifier:   C5:47:C9:39:80:6E:5B:88:B2:8C:54:CF:D7:46:F1:06:5D:52:2E:5C
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       7803A441FE5CAAFF67F8690D098D0EA500CF919C
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa
Signing time:             Wed 07 Jan 2026 17:59:12 +0000
ROA not before:           Wed 07 Jan 2026 17:54:12 +0000
ROA not after:            Wed 06 Jan 2027 17:59:12 +0000
asID:                     269843
IP address blocks:        45.189.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:03:a4:41:fe:5c:aa:ff:67:f8:69:0d:09:8d:0e:a5:00:cf:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Jan  7 17:54:12 2026 GMT
            Not After : Jan  6 17:59:12 2027 GMT
        Subject: CN=C547C939806E5B88B28C54CFD746F1065D522E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:50:3a:1c:9e:7f:a5:44:f7:33:5c:29:b9:86:
                    81:c4:5a:c2:84:b1:66:3a:23:cd:43:db:23:40:ec:
                    a4:40:45:b1:d2:6e:80:7a:e4:d0:e7:07:28:7a:6d:
                    57:f3:55:32:05:38:17:a1:98:27:f0:00:fd:d3:d8:
                    22:91:0a:3c:0f:bb:8e:65:0f:d4:d2:be:04:0b:3e:
                    d9:5d:5b:e0:4d:71:6f:d4:e4:e0:de:bf:d1:e7:53:
                    8e:10:7b:31:43:f6:50:64:6e:90:87:8d:ba:55:ea:
                    e6:a2:38:22:68:2f:e2:d5:a0:ac:6e:5f:fc:24:ca:
                    c5:ea:41:f6:16:5b:e2:c2:32:5f:b7:9f:17:85:ba:
                    d8:0f:52:7b:b5:23:33:90:c9:aa:fa:d4:6e:cd:25:
                    20:f9:a7:3f:0f:46:82:97:2b:89:63:4b:04:b7:fd:
                    4e:13:f1:09:91:ea:da:f8:15:90:cf:35:b4:0b:d3:
                    97:6d:f4:bb:00:91:ce:d9:73:76:35:52:4f:b5:64:
                    78:61:98:2f:88:da:98:06:db:88:d3:83:a3:88:64:
                    78:59:13:11:0f:ab:1b:78:0e:0a:4a:b9:03:dc:d5:
                    7f:d0:83:7b:a4:ed:4c:73:0c:24:d9:e6:b7:9b:77:
                    f6:75:b7:92:0d:63:f1:c0:c0:88:28:be:43:b5:38:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:C9:39:80:6E:5B:88:B2:8C:54:CF:D7:46:F1:06:5D:52:2E:5C
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:47:0f:c8:bd:84:5b:80:87:2b:69:46:fb:21:b8:cd:ee:
         87:f0:8e:f5:90:92:07:72:81:ba:67:59:5c:c4:a8:cc:1d:a9:
         d5:f5:cc:e5:11:72:ee:38:68:5e:cd:3e:a8:23:cb:5c:4d:c5:
         77:45:c2:5f:77:76:55:03:c3:61:6b:ac:51:b7:a6:63:fc:57:
         54:03:4d:61:dd:81:00:27:b8:c1:4f:f0:e8:cc:ae:4b:74:0f:
         4e:8f:44:f0:d0:81:bf:ac:f9:36:03:b3:3f:80:03:1c:03:e3:
         fa:cf:f8:0f:90:8e:03:ff:37:d5:d2:23:d7:d3:a3:d8:d7:55:
         c1:4f:c4:37:64:d7:0d:70:7b:c0:b5:dd:24:49:6e:a2:d7:a5:
         00:ab:6a:aa:54:2a:72:bb:a0:57:07:1d:95:3a:ca:79:84:8d:
         09:94:c3:fc:71:17:d2:a7:0c:87:a3:8d:0f:a9:7f:bc:cd:f5:
         63:e8:1c:18:e7:c9:ce:83:39:7a:2f:ca:4a:70:3f:fa:e5:7a:
         77:f6:3d:93:5a:03:8e:a5:5a:0f:61:26:48:81:ab:fb:a2:25:
         fb:fc:75:4f:7b:90:d9:3f:5e:ad:68:23:c3:e7:23:8a:5b:60:
         3d:64:74:56:01:44:e4:b0:d9:e9:22:3d:61:9f:a3:5b:1c:8e:
         84:73:a9:c0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeAOkQf5cqv9n+GkNCY0OpQDPkZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwMTNCRTYxQzQ3ODEzMjQyMDNBN0RCN0QxMTY3NEU1
RDcwN0QwMjAeFw0yNjAxMDcxNzU0MTJaFw0yNzAxMDYxNzU5MTJaMDMxMTAvBgNV
BAMTKEM1NDdDOTM5ODA2RTVCODhCMjhDNTRDRkQ3NDZGMTA2NUQ1MjJFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1UDocnn+lRPczXCm5hoHEWsKE
sWY6I81D2yNA7KRARbHSboB65NDnByh6bVfzVTIFOBehmCfwAP3T2CKRCjwPu45l
D9TSvgQLPtldW+BNcW/U5ODev9HnU44QezFD9lBkbpCHjbpV6uaiOCJoL+LVoKxu
X/wkysXqQfYWW+LCMl+3nxeFutgPUnu1IzOQyar61G7NJSD5pz8PRoKXK4ljSwS3
/U4T8QmR6tr4FZDPNbQL05dt9LsAkc7Zc3Y1Uk+1ZHhhmC+I2pgG24jTg6OIZHhZ
ExEPqxt4DgpKuQPc1X/Qg3uk7UxzDCTZ5rebd/Z1t5INY/HAwIgovkO1OG4VAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxUfJOYBuW4iyjFTP10bxBl1SLlwwHwYDVR0j
BBgwFoAU4AE75hxHgTJCA6fbfRFnTl1wfQIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9COTdGNkU0NTBENTM1QTAwNDAyRTBGRTgxNjg3RUQyMDBC
MUM5RUU2ODg0QzRDQ0IyRkEzNDJEMTRCM0QwNjlBLzAvRTAwMTNCRTYxQzQ3ODEz
MjQyMDNBN0RCN0QxMTY3NEU1RDcwN0QwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMDAxM0JFNjFDNDc4MTMyNDIw
M0E3REI3RDExNjc0RTVENzA3RDAyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjk3RjZFNDUwRDUzNUEwMDQwMkUwRkU4MTY4N0VEMjAwQjFDOUVFNjg4
NEM0Q0NCMkZBMzQyRDE0QjNEMDY5QS8wLzM0MzUyZTMxMzgzOTJlMzEzMTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb1v
MA0GCSqGSIb3DQEBCwUAA4IBAQCJ1UcPyL2EW4CHK2lG+yG4ze6H8I71kJIHcoG6
Z1lcxKjMHanV9czlEXLuOGhezT6oI8tcTcV3RcJfd3ZVA8Nha6xRt6Zj/FdUA01h
3YEAJ7jBT/DozK5LdA9Oj0Tw0IG/rPk2A7M/gAMcA+P6z/gPkI4D/zfV0iPX06PY
11XBT8Q3ZNcNcHvAtd0kSW6i16UAq2qqVCpyu6BXBx2VOsp5hI0JlMP8cRfSpwyH
o40PqX+8zfVj6BwY58nOgzl6L8pKcD/65Xp39j2TWgOOpVoPYSZIgav7oiX7/HVP
e5DZP16taCPD5yOKW2A9ZHRWAUTksNnpIj1hn6NbHI6Ec6nA
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:47:17 2026 by rpki-client