This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
File:                     34352e372e3230392e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier:          Sn7xuI3ToXiraW/2x/biOp9AQBEF2FmMWXAuu+9HVLs=
Subject key identifier:   A9:94:F6:27:A6:91:AA:4D:6A:BC:19:7A:A8:3A:4F:92:5E:BE:8F:BD
Certificate issuer:       /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial:       5C28103C33867C534515FCC095AD16B5C1844F20
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
Signing time:             Tue 06 Jan 2026 20:51:07 +0000
ROA not before:           Tue 06 Jan 2026 20:46:07 +0000
ROA not after:            Tue 05 Jan 2027 20:51:07 +0000
asID:                     265729
IP address blocks:        45.7.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:28:10:3c:33:86:7c:53:45:15:fc:c0:95:ad:16:b5:c1:84:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
        Validity
            Not Before: Jan  6 20:46:07 2026 GMT
            Not After : Jan  5 20:51:07 2027 GMT
        Subject: CN=A994F627A691AA4D6ABC197AA83A4F925EBE8FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:d5:86:5b:ea:a6:26:c1:86:8c:ca:60:d8:
                    d0:e9:48:69:b5:3f:25:03:06:d1:c4:e9:c1:cd:69:
                    ba:2d:89:6a:c9:da:6d:e4:8e:3d:b9:b5:48:18:2b:
                    46:de:28:f5:4c:01:7e:f1:81:a6:5a:a1:c7:7a:45:
                    97:46:7f:85:6d:e4:c2:2a:26:15:54:c2:c2:ec:4d:
                    c6:ee:ce:2b:18:6e:26:0e:ba:e2:eb:4e:30:d3:2e:
                    8a:68:38:60:3e:55:64:a2:90:b3:c0:a3:24:43:03:
                    96:b2:5e:58:99:21:01:e2:fc:e4:17:c7:75:08:40:
                    dc:7b:ab:d0:87:9f:ad:1a:64:0a:c3:a3:03:0e:6b:
                    79:98:be:2d:83:3b:ad:73:81:d2:aa:7f:f4:5f:e8:
                    1e:54:0c:74:6e:82:a9:4d:10:0b:ce:e3:d9:72:79:
                    55:18:f3:75:a9:94:1f:f0:32:b4:7c:cd:c3:e8:7c:
                    3b:9f:56:4f:4b:aa:d5:66:8d:b2:b5:1f:22:5e:d2:
                    5b:57:72:3d:ef:eb:32:42:4f:55:c6:61:13:ca:f8:
                    1a:ac:4d:e3:47:4c:8b:96:18:f6:48:8e:bf:2d:b0:
                    b1:6a:ea:e9:73:10:ff:fb:9d:02:b1:bd:bc:66:d3:
                    c9:0c:d2:60:ff:bc:c3:58:b9:2f:c7:97:ad:22:ba:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:F6:27:A6:91:AA:4D:6A:BC:19:7A:A8:3A:4F:92:5E:BE:8F:BD
            X509v3 Authority Key Identifier:
                keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:9c:8e:7d:ee:e4:78:25:2c:6e:be:84:fc:43:5b:77:0c:
         49:59:9d:b6:2c:53:e4:5e:87:8d:72:f1:6f:b2:e9:ab:0b:88:
         8c:5e:28:86:c7:5e:3a:d2:ea:28:d7:5b:03:66:73:de:ab:20:
         0f:36:14:c9:a2:a2:5c:3c:07:56:60:e9:da:19:d6:71:97:53:
         b3:92:d3:75:29:6f:b5:c9:b3:1e:d1:a2:9a:e8:e8:a3:7b:c9:
         de:88:f9:06:d8:fe:0c:4e:d2:08:ed:6e:1b:f5:20:02:f4:8c:
         2b:fe:08:d9:17:59:16:01:da:98:5c:e0:8a:a7:65:14:61:02:
         5f:fb:20:81:ed:fb:da:79:48:38:99:cd:ca:b2:90:db:55:4d:
         26:78:41:d4:0c:93:d1:8b:22:8e:73:62:23:25:cc:84:0e:e0:
         b2:ad:35:cb:92:6a:2e:45:86:83:63:8a:68:f8:de:fb:4d:a6:
         43:27:d8:66:be:81:42:4b:a9:42:8c:d5:06:e1:c8:15:50:f3:
         75:6b:0b:98:c8:d5:31:6f:bc:af:1d:00:50:87:e2:53:2a:e7:
         d2:00:4b:28:8a:9f:0d:81:58:0e:68:73:b6:3f:f0:64:1b:ad:
         20:aa:76:46:aa:72:0a:58:3c:d9:e0:ca:15:3f:f8:92:77:7d:
         38:f0:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:32:48 2026 by rpki-client