This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/34352e3137352e32312e302f32342d3234203d3e2037303439.roa
File:                     34352e3137352e32312e302f32342d3234203d3e2037303439.roa (raw, json)
Hash identifier:          g8hHWzP4kDSiOiSHBMQM7MYWGMPCqeG59pSNv4PvdWU=
Subject key identifier:   CD:47:1E:AC:15:C4:43:82:63:77:98:40:CD:B5:11:89:53:D6:FF:22
Certificate issuer:       /CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
Certificate serial:       6A43709B0E59956240CC94D9B675ED53BA469C57
Authority key identifier: 20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/34352e3137352e32312e302f32342d3234203d3e2037303439.roa
Signing time:             Tue 06 Jan 2026 19:38:01 +0000
ROA not before:           Tue 06 Jan 2026 19:33:01 +0000
ROA not after:            Tue 05 Jan 2027 19:38:01 +0000
asID:                     7049
IP address blocks:        45.175.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 08:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:43:70:9b:0e:59:95:62:40:cc:94:d9:b6:75:ed:53:ba:46:9c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20FD70DC301FF93D288ED851C3A69B22D7B04220
        Validity
            Not Before: Jan  6 19:33:01 2026 GMT
            Not After : Jan  5 19:38:01 2027 GMT
        Subject: CN=CD471EAC15C4438263779840CDB5118953D6FF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:b0:33:0a:1a:74:1a:0f:ff:b8:0b:5f:d7:
                    7c:1b:f6:f3:e2:78:87:c5:79:fc:55:66:29:82:7f:
                    d7:1c:1d:4d:40:d4:b9:31:88:5b:b0:55:f7:9f:11:
                    9e:60:1e:b4:e5:0c:51:5d:0e:5b:dc:c6:9e:c7:08:
                    4a:33:0e:0a:38:8c:9c:4c:ad:5e:a8:95:2a:4a:f1:
                    c2:f4:88:98:a5:51:5a:44:0a:25:df:41:46:60:fa:
                    2f:6a:20:7f:e3:da:d7:75:e0:9b:b4:48:9f:f2:2a:
                    fa:ea:db:80:fe:7e:c2:c1:49:2a:3c:c6:95:d9:af:
                    b8:9f:84:2c:06:06:f1:87:0d:64:c3:f2:58:9e:a5:
                    6e:8b:d4:0a:f5:04:7a:74:ba:de:8d:65:c2:c6:c6:
                    09:24:71:4b:89:43:8d:90:a9:5e:2f:69:38:1e:e5:
                    2e:a0:c5:2d:71:b0:ab:a8:fb:c4:93:32:36:a1:89:
                    8b:ab:bd:08:29:96:82:d2:b7:ca:0d:34:5c:a8:7d:
                    ec:84:83:39:ff:a1:1f:86:87:ab:a4:1d:ec:37:84:
                    e7:c4:cd:71:4d:aa:0b:5a:c3:c2:ca:8b:b7:eb:4a:
                    70:ca:73:3a:77:0e:46:53:91:2e:56:46:d3:23:7d:
                    5d:9c:17:c9:6f:a8:3e:f6:60:e5:c3:b5:93:1e:34:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:47:1E:AC:15:C4:43:82:63:77:98:40:CD:B5:11:89:53:D6:FF:22
            X509v3 Authority Key Identifier:
                keyid:20:FD:70:DC:30:1F:F9:3D:28:8E:D8:51:C3:A6:9B:22:D7:B0:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20FD70DC301FF93D288ED851C3A69B22D7B04220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA20F37E1BD62A51A99DED6B4A138B070CE1B9D3B3BAE63F555B0579005F2300/0/34352e3137352e32312e302f32342d3234203d3e2037303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:47:86:21:99:06:76:00:b5:67:f6:38:a0:c0:fe:d5:d0:f0:
         7c:2e:b1:14:cf:1a:f2:4e:b9:8a:2f:f5:8c:c2:64:f6:4b:42:
         d3:8a:c7:11:77:12:6d:3c:be:17:35:36:f6:a2:b4:07:13:40:
         35:49:a4:cb:f1:e3:7d:e9:eb:ca:02:84:6f:61:0d:f2:3a:4f:
         17:ce:68:f6:f0:eb:c8:49:42:96:7f:2d:14:f9:47:56:e5:91:
         62:dd:62:87:d9:9c:f2:a1:95:0f:93:5d:be:9d:7a:3d:c1:e8:
         81:26:b5:b9:fa:cb:27:39:dd:51:2d:3c:df:5c:b1:8d:dd:48:
         69:1c:41:81:14:3d:a0:b3:01:fe:c4:97:ea:f7:05:ea:4f:62:
         5a:b0:02:8d:97:35:64:e5:ee:71:98:19:08:9d:80:e3:6d:f6:
         8b:13:12:7e:2a:07:f4:1b:41:ab:37:46:47:e2:38:b6:c6:22:
         cc:9f:ad:d8:57:a4:7a:3e:b2:e0:6b:84:49:11:4b:b7:e1:c2:
         ce:09:85:be:b5:4a:94:21:83:08:f2:a5:7e:e4:4d:4a:f3:23:
         0d:64:93:77:97:95:83:f5:07:2b:a6:b3:d1:1a:7f:d0:21:32:
         94:45:17:70:72:fa:b8:28:e5:0e:a6:92:0e:c7:b2:41:3b:70:
         7a:49:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:12 2026 by rpki-client