This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134382e302f32322d3232203d3e203238343335.roa
File:                     34352e3138392e3134382e302f32322d3232203d3e203238343335.roa (raw, json)
Hash identifier:          1q+BS+OOQxJDhubgWGxK0ss2uyN6XOKV/Lfu5EVfyxc=
Subject key identifier:   9C:6B:A3:34:93:1A:1A:69:8C:EC:30:CA:04:3E:DF:79:67:CA:73:8A
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       3BFF072B304C9201F3867CCD55E5E53977292987
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134382e302f32322d3232203d3e203238343335.roa
Signing time:             Tue 06 Jan 2026 20:48:54 +0000
ROA not before:           Tue 06 Jan 2026 20:43:54 +0000
ROA not after:            Tue 05 Jan 2027 20:48:54 +0000
asID:                     28435
IP address blocks:        45.189.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ff:07:2b:30:4c:92:01:f3:86:7c:cd:55:e5:e5:39:77:29:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Jan  6 20:43:54 2026 GMT
            Not After : Jan  5 20:48:54 2027 GMT
        Subject: CN=9C6BA334931A1A698CEC30CA043EDF7967CA738A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:a8:7f:83:49:3d:6c:1c:be:8a:f2:66:62:
                    17:b7:df:30:b0:34:b6:ee:05:f8:b5:5f:37:b4:0b:
                    fd:84:73:af:b8:b9:b3:76:b4:93:49:4c:1f:03:81:
                    fc:ba:d1:0c:ce:32:d3:3b:f0:bd:0d:41:76:1f:40:
                    33:97:51:46:8b:a0:5e:f0:2d:54:82:f6:76:07:b6:
                    40:17:36:0f:02:5d:7a:c2:42:41:8a:f7:31:ab:5c:
                    8e:9f:dd:ff:a0:e9:9b:3e:c7:ec:d6:55:16:e3:e8:
                    f8:9c:87:79:ea:27:f5:8c:4d:83:02:38:1e:fc:78:
                    15:f2:ad:7f:c8:2b:3a:2d:5a:8e:85:25:bd:8d:39:
                    b6:d5:e2:34:64:4a:12:de:95:b3:ab:60:4e:6b:be:
                    33:ee:b3:b6:9a:99:0b:32:fd:81:16:9c:b7:db:84:
                    86:fa:e1:ee:85:33:13:ac:88:38:ce:3e:a0:1f:ba:
                    e2:77:42:39:2d:f8:9b:40:22:f4:ec:46:02:f1:4a:
                    6e:c6:5a:0a:fd:8a:81:7b:ab:04:be:80:44:a7:90:
                    fc:60:85:7a:dc:b6:43:67:47:44:b4:25:14:1c:8a:
                    41:72:74:6d:54:df:1f:60:31:f8:f8:21:d2:1c:cc:
                    10:43:19:64:1c:6f:64:21:2a:52:1c:81:95:63:cc:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:A3:34:93:1A:1A:69:8C:EC:30:CA:04:3E:DF:79:67:CA:73:8A
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3134382e302f32322d3232203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:cb:8c:fa:74:37:17:0e:d0:86:e5:92:6c:b3:8f:70:e0:
         04:27:42:59:42:eb:b1:67:ca:64:16:86:03:f0:af:6f:f8:81:
         b0:3a:b2:83:88:df:43:c3:0c:ff:f7:03:1b:50:d1:95:2d:19:
         40:aa:77:1f:cb:51:42:41:f9:db:fc:2f:13:7f:37:d0:3d:02:
         5b:7b:48:2b:22:d7:77:c9:66:e2:86:5e:2b:aa:18:f9:c5:0e:
         fe:97:6f:bb:a7:cf:5e:0d:e3:ec:e8:91:27:5d:9b:8d:51:57:
         4e:e4:6e:83:60:7c:88:32:96:e0:4e:53:54:32:3c:ed:fb:0c:
         d3:a4:5e:bd:c4:66:a7:4e:06:d9:7c:40:14:55:da:7b:ad:c0:
         42:95:99:be:89:5e:8e:15:1c:56:d2:50:5b:f2:9a:d1:fe:94:
         a4:4f:cf:f7:a7:e4:d9:a7:08:c2:5d:1f:b0:26:e1:24:a6:17:
         ac:a4:60:a7:b7:a5:fd:61:a6:3f:e1:f0:8e:a1:3c:9a:e5:35:
         6d:70:f8:64:7f:59:bd:c5:7a:31:fa:73:75:ff:1d:dd:1a:50:
         b0:19:44:33:21:07:c2:dd:2f:b8:44:5b:dc:93:dd:14:e3:1b:
         41:04:11:87:ac:94:2e:b7:23:26:f4:6b:ef:13:a5:58:b9:b7:
         b1:51:13:82
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO/8HKzBMkgHzhnzNVeXlOXcpKYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkYzNjdCQzE5MzRCQkNCNEE0MjI5M0Y4QzRBQkQ2
RUNFQkFFMDAeFw0yNjAxMDYyMDQzNTRaFw0yNzAxMDUyMDQ4NTRaMDMxMTAvBgNV
BAMTKDlDNkJBMzM0OTMxQTFBNjk4Q0VDMzBDQTA0M0VERjc5NjdDQTczOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFah/g0k9bBy+ivJmYhe33zCw
NLbuBfi1Xze0C/2Ec6+4ubN2tJNJTB8Dgfy60QzOMtM78L0NQXYfQDOXUUaLoF7w
LVSC9nYHtkAXNg8CXXrCQkGK9zGrXI6f3f+g6Zs+x+zWVRbj6Pich3nqJ/WMTYMC
OB78eBXyrX/IKzotWo6FJb2NObbV4jRkShLelbOrYE5rvjPus7aamQsy/YEWnLfb
hIb64e6FMxOsiDjOPqAfuuJ3Qjkt+JtAIvTsRgLxSm7GWgr9ioF7qwS+gESnkPxg
hXrctkNnR0S0JRQcikFydG1U3x9gMfj4IdIczBBDGWQcb2QhKlIcgZVjzDDvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnGujNJMaGmmM7DDKBD7feWfKc4owHwYDVR0j
BBgwFoAUlhbzZ7wZNLvLSkIpP4xKvW7OuuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNUFFQ0Y3MTY4RDJCN0IyNzMzOUUyNzEzNzVGRTQ5RjAy
RjU4MTQwNzU1MEQ5OTIyNTcyMjM1NEQwMUREMTlGLzAvOTYxNkYzNjdCQzE5MzRC
QkNCNEE0MjI5M0Y4QzRBQkQ2RUNFQkFFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjE2RjM2N0JDMTkzNEJCQ0I0
QTQyMjkzRjhDNEFCRDZFQ0VCQUUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzVBRUNGNzE2OEQyQjdCMjczMzlFMjcxMzc1RkU0OUYwMkY1ODE0MDc1
NTBEOTkyMjU3MjIzNTREMDFERDE5Ri8wLzM0MzUyZTMxMzgzOTJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODM0MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi29lDAN
BgkqhkiG9w0BAQsFAAOCAQEAI7/LjPp0NxcO0Iblkmyzj3DgBCdCWULrsWfKZBaG
A/Cvb/iBsDqyg4jfQ8MM//cDG1DRlS0ZQKp3H8tRQkH52/wvE3830D0CW3tIKyLX
d8lm4oZeK6oY+cUO/pdvu6fPXg3j7OiRJ12bjVFXTuRug2B8iDKW4E5TVDI87fsM
06RevcRmp04G2XxAFFXae63AQpWZvolejhUcVtJQW/Ka0f6UpE/P96fk2acIwl0f
sCbhJKYXrKRgp7el/WGmP+HwjqE8muU1bXD4ZH9ZvcV6Mfpzdf8d3RpQsBlEMyEH
wt0vuERb3JPdFOMbQQQRh6yULrcjJvRr7xOlWLm3sVETgg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:08 2026 by rpki-client