This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa
File:                     34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa (raw, json)
Hash identifier:          h9VkJVKOwxnHxywfjNhgKEUtChy/BBwPh376Aogkyrc=
Subject key identifier:   C6:2E:BD:17:03:9F:2C:A1:D4:5B:E2:1F:58:60:DE:FB:07:D1:79:28
Certificate issuer:       /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
Certificate serial:       08FEC456F96CC86834D5FE6B9E49FC1BC94742F7
Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa
Signing time:             Tue 06 Jan 2026 19:45:50 +0000
ROA not before:           Tue 06 Jan 2026 19:40:50 +0000
ROA not after:            Tue 05 Jan 2027 19:45:50 +0000
asID:                     269898
IP address blocks:        45.191.196.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fe:c4:56:f9:6c:c8:68:34:d5:fe:6b:9e:49:fc:1b:c9:47:42:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1
        Validity
            Not Before: Jan  6 19:40:50 2026 GMT
            Not After : Jan  5 19:45:50 2027 GMT
        Subject: CN=C62EBD17039F2CA1D45BE21F5860DEFB07D17928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:2e:d9:1a:59:a5:a9:06:21:94:33:87:07:
                    af:4d:a8:41:5b:c7:b8:46:4c:6e:ee:6c:c5:f7:58:
                    15:ba:8b:eb:ee:78:b8:8b:e4:71:14:5b:b1:ea:7a:
                    28:39:80:8d:af:12:80:bb:90:9d:82:28:d4:60:ac:
                    54:3e:43:a3:cb:7d:9c:a6:5b:77:73:8f:d6:1f:20:
                    6f:65:cb:d3:59:86:be:f9:0f:3f:f5:ad:de:02:96:
                    08:61:86:fd:14:17:15:c2:df:7a:42:d9:50:37:61:
                    57:c1:f9:ee:bb:42:f2:58:ef:13:bb:40:99:3c:fb:
                    61:bf:fd:39:af:81:5d:24:00:3d:70:aa:5a:cb:f6:
                    d8:c7:27:f0:ca:05:10:05:38:9b:39:9f:ad:c8:52:
                    82:3c:4c:fe:1c:af:bc:6a:a1:10:a9:19:5b:8e:8e:
                    5c:de:fa:1d:56:51:3f:dc:c7:42:6b:46:06:19:0e:
                    96:92:07:2e:ac:4b:96:3f:41:2e:70:6c:6f:c9:80:
                    8b:d2:ec:2a:44:b9:de:b4:96:df:ce:8b:40:6a:c7:
                    11:62:e1:2a:f8:a3:36:ab:11:c9:a6:3f:4a:1b:89:
                    af:81:20:c3:2f:a4:5b:03:4c:28:9f:bc:05:12:7c:
                    32:70:e2:a3:e6:96:ef:de:c6:01:5b:4f:ec:05:d4:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2E:BD:17:03:9F:2C:A1:D4:5B:E2:1F:58:60:DE:FB:07:D1:79:28
            X509v3 Authority Key Identifier:
                keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:8c:81:c5:a5:e9:d8:62:ed:51:97:99:60:1d:93:8c:df:
         ad:85:6c:2a:92:cf:34:e5:ca:33:e1:73:5e:5a:04:84:3d:0c:
         72:94:89:30:02:f0:71:8d:84:de:25:7b:aa:03:84:15:a0:d4:
         64:4a:59:84:f0:9f:33:f8:a2:56:16:fd:15:38:8a:0b:42:1c:
         e0:8b:4f:6a:f7:34:be:76:b3:99:5e:b0:d3:95:18:f5:76:72:
         e9:d9:79:e5:c9:c9:29:21:94:9a:9d:9b:1b:b9:82:3c:2c:ff:
         83:f9:b9:9f:c1:b8:59:2f:3d:b1:b3:2d:0f:35:5b:a1:6e:b7:
         9b:62:5c:e8:6e:bf:e0:87:bb:fa:6f:fa:98:95:74:14:11:51:
         a5:32:21:ea:e4:51:82:b8:20:8b:f9:39:7d:ec:e2:ad:67:3d:
         9d:9a:1d:f7:39:7e:f5:e0:07:fd:a5:f8:38:0e:f1:ff:96:e0:
         0c:2c:42:fd:8a:3e:0a:71:9e:df:08:45:d1:f2:88:79:89:bf:
         9a:d7:34:58:a9:60:cc:66:5b:6c:c7:27:26:58:d5:96:ca:6a:
         cc:7d:64:ff:93:92:80:aa:39:6c:3b:f3:f0:6d:c6:8c:2e:19:
         ef:0a:93:9b:53:ca:4e:c7:66:3d:e3:ee:b8:8c:fb:cd:a2:3c:
         7b:9f:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:33 2026 by rpki-client