This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3135312e302f32342d3234203d3e203238343335.roa
File:                     34352e3138392e3135312e302f32342d3234203d3e203238343335.roa (raw, json)
Hash identifier:          rqa4HGqCk8kbiQi3A8EHm1owxV0Thsk7Xr0jzr+RHGM=
Subject key identifier:   01:F7:69:00:F5:CB:6B:18:55:E7:7D:59:E2:4C:C1:B7:1A:96:72:49
Certificate issuer:       /CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
Certificate serial:       1B2D4924295F44DF86D696A1B71C00430B61EC4B
Authority key identifier: 96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3135312e302f32342d3234203d3e203238343335.roa
Signing time:             Tue 06 Jan 2026 20:48:54 +0000
ROA not before:           Tue 06 Jan 2026 20:43:54 +0000
ROA not after:            Tue 05 Jan 2027 20:48:54 +0000
asID:                     28435
IP address blocks:        45.189.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2d:49:24:29:5f:44:df:86:d6:96:a1:b7:1c:00:43:0b:61:ec:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0
        Validity
            Not Before: Jan  6 20:43:54 2026 GMT
            Not After : Jan  5 20:48:54 2027 GMT
        Subject: CN=01F76900F5CB6B1855E77D59E24CC1B71A967249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:de:3c:c4:20:d6:13:b2:d3:b3:e4:86:78:
                    5d:f6:5c:c8:b7:3a:f5:e9:ae:22:c9:8f:cb:3d:0b:
                    9b:21:5d:80:b9:55:76:f6:d1:5d:b9:86:88:14:f6:
                    08:f7:ec:5f:39:d8:c7:52:42:2e:71:d1:26:9d:6e:
                    14:17:83:c6:e4:42:73:5d:5b:15:a9:f3:b2:11:77:
                    1a:fb:ef:5c:8f:a7:55:bd:1a:c8:69:3b:0a:6a:7a:
                    8c:bb:1f:4b:35:32:d4:f7:bf:f7:1a:dd:c0:de:55:
                    41:a1:96:55:49:68:0b:cb:40:68:7c:32:4c:1a:51:
                    25:8b:1d:85:a6:4d:bb:96:af:d5:4a:0a:f9:48:d3:
                    c8:39:df:c2:c8:cc:d7:20:c1:31:15:85:fd:81:1f:
                    7b:d5:19:8c:9e:a6:75:b5:e2:25:cf:7c:f0:61:a3:
                    58:38:9e:0e:a9:21:59:48:0d:c4:b6:f5:ec:c7:77:
                    02:ed:cd:55:e1:01:41:76:6c:f2:dd:d2:1c:dc:a5:
                    20:f2:52:c2:d0:27:be:ba:9b:bf:f1:0e:18:be:9f:
                    f5:24:02:67:2d:05:95:52:4b:23:83:bb:16:d2:65:
                    a1:92:da:a7:22:11:e0:8d:18:cc:bb:fe:0d:c8:f9:
                    a2:12:64:38:12:67:3b:a2:a0:45:6e:15:d8:de:19:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:69:00:F5:CB:6B:18:55:E7:7D:59:E2:4C:C1:B7:1A:96:72:49
            X509v3 Authority Key Identifier:
                keyid:96:16:F3:67:BC:19:34:BB:CB:4A:42:29:3F:8C:4A:BD:6E:CE:BA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9616F367BC1934BBCB4A42293F8C4ABD6ECEBAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5AECF7168D2B7B27339E271375FE49F02F581407550D99225722354D01DD19F/0/34352e3138392e3135312e302f32342d3234203d3e203238343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d8:4f:da:4a:4e:3a:5c:5e:cc:0c:ab:25:6f:01:ca:27:57:
         fc:f2:40:32:35:cd:6b:ba:22:d2:27:7c:56:7f:d2:ee:4c:48:
         7c:2e:9d:22:af:c3:8c:05:96:ff:13:22:9b:92:6c:c4:bc:89:
         07:aa:0c:ef:9a:15:41:95:8b:62:79:dd:b0:07:fe:0f:09:58:
         38:6d:23:b3:00:aa:eb:41:d8:47:de:9e:d8:27:33:8b:0b:ec:
         5c:6c:db:86:30:83:91:4e:ce:d2:8d:82:f7:1b:89:d9:f1:f0:
         83:ff:e9:58:a1:89:4a:10:e9:5d:2a:94:ee:1c:a0:4c:f0:ab:
         62:e3:b7:62:41:31:8f:d9:96:df:ff:c5:37:f4:76:7e:c8:d3:
         ea:50:86:3e:f1:0f:19:bf:1f:ec:19:0f:2a:d4:27:2e:09:5b:
         34:7f:62:94:d2:1c:e1:67:a5:1a:dd:80:f2:48:90:9d:8b:3b:
         1d:41:d5:59:28:f9:a4:7c:76:42:e1:ce:bb:9b:04:f8:3b:85:
         c5:58:1b:30:08:bb:49:01:d3:52:c4:60:3d:64:05:bf:f7:f6:
         da:c9:2e:77:46:5a:cf:53:0c:e0:7b:5e:19:e1:73:37:b3:84:
         7d:79:40:dd:af:33:d2:d0:ea:64:8f:0f:0e:26:77:ce:b7:83:
         1d:1d:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:19 2026 by rpki-client