This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/34352e3137352e32302e302f32342d3234203d3e20323637383332.roa
File:                     34352e3137352e32302e302f32342d3234203d3e20323637383332.roa (raw, json)
Hash identifier:          jE1/s4zOg3P8Nn3rSsjK0pbSvuJdpDUfQxrAQ7CPL1M=
Subject key identifier:   DB:AD:C7:26:A8:E0:A3:AA:8C:7E:CE:6F:BB:98:5E:40:90:A1:83:46
Certificate issuer:       /CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
Certificate serial:       66CA56C95995C2492C9AB2AB98C8E2A9100F3CF6
Authority key identifier: ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/34352e3137352e32302e302f32342d3234203d3e20323637383332.roa
Signing time:             Tue 06 Jan 2026 19:34:23 +0000
ROA not before:           Tue 06 Jan 2026 19:29:23 +0000
ROA not after:            Tue 05 Jan 2027 19:34:23 +0000
asID:                     267832
IP address blocks:        45.175.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ca:56:c9:59:95:c2:49:2c:9a:b2:ab:98:c8:e2:a9:10:0f:3c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
        Validity
            Not Before: Jan  6 19:29:23 2026 GMT
            Not After : Jan  5 19:34:23 2027 GMT
        Subject: CN=DBADC726A8E0A3AA8C7ECE6FBB985E4090A18346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:9b:30:8f:2e:aa:ba:44:d6:ce:be:af:b4:
                    81:c5:40:81:e3:e2:1f:b8:c6:24:f9:68:3c:90:d5:
                    ef:53:53:c3:07:ac:e5:4e:39:1e:2c:f2:b0:aa:5d:
                    3f:c2:f0:a5:56:2c:08:bd:28:6c:ec:f1:09:97:33:
                    22:54:57:8b:14:68:ff:3b:cf:00:e6:93:95:c9:25:
                    3a:49:a7:a9:87:37:26:20:19:c1:85:2c:02:11:c4:
                    2c:4d:3d:46:8b:eb:36:b0:37:c5:fb:0d:14:c6:52:
                    96:70:a3:1a:9c:bc:13:69:b3:d0:aa:ee:8b:8a:df:
                    eb:11:b5:c9:15:fa:23:5a:23:2d:66:d5:50:62:ec:
                    df:e1:9b:ed:d5:0f:95:2a:58:ef:99:18:f6:b6:22:
                    9d:48:f4:55:ba:90:f3:c6:6a:4d:7b:f6:1e:36:5e:
                    cd:0a:9d:8e:42:55:a1:3f:9e:90:65:db:22:ac:bc:
                    1a:32:af:73:7c:6d:af:88:3e:3e:b0:8d:de:e0:3d:
                    89:18:2d:81:58:ae:72:36:f3:1c:75:a4:79:29:90:
                    04:88:5d:98:50:53:3d:d0:5b:14:d9:10:14:62:50:
                    99:81:43:b9:08:6d:97:2e:0d:f2:70:0b:42:b9:42:
                    d0:f0:cf:bb:67:7e:f7:d5:b0:6f:2c:63:1d:59:95:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:C7:26:A8:E0:A3:AA:8C:7E:CE:6F:BB:98:5E:40:90:A1:83:46
            X509v3 Authority Key Identifier:
                keyid:ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/34352e3137352e32302e302f32342d3234203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:dd:c5:76:9e:02:53:d4:06:87:eb:e6:5d:b0:3b:fc:62:
         87:71:f9:95:01:2c:a5:c0:c0:3b:78:d9:0f:58:ea:ec:c6:54:
         c9:90:93:97:01:11:ce:88:cf:dd:3b:a2:d7:fb:4c:bc:7e:59:
         ad:a0:b9:1f:b9:8f:1e:b5:90:4d:28:1a:4e:23:b3:ee:07:66:
         59:64:be:6d:18:9e:9f:48:a3:81:1c:55:81:ac:99:da:cc:39:
         27:3a:27:a0:c2:90:0e:09:19:d9:5f:3e:a2:7c:7f:96:2e:8d:
         10:c5:ba:db:a6:ee:8b:10:2b:32:ce:66:ea:c4:bd:73:03:4c:
         f3:67:01:0d:f6:2f:cf:00:65:0d:d9:06:a6:f0:a0:3b:bc:87:
         30:67:74:95:01:8d:a1:83:14:26:ab:f9:90:2e:06:4f:c0:02:
         5a:4b:96:aa:f1:cf:bd:ae:c0:0e:0f:3a:6c:37:c3:3b:11:2a:
         0d:f7:21:5b:f0:21:14:4b:00:04:6a:6b:72:d5:78:ab:1f:79:
         e6:05:ca:cd:34:70:e7:f3:76:78:12:f5:b9:50:ae:aa:8d:8f:
         16:cf:4e:06:31:c9:11:4e:0b:42:43:b6:80:30:8d:0e:00:02:
         0d:c8:3a:62:7c:44:e7:dd:1e:82:57:e3:34:73:c2:fb:1e:40:
         20:9c:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:26:09 2026 by rpki-client