This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e20323635363739.roa
File:                     34352e342e3231362e302f32322d3234203d3e20323635363739.roa (raw, json)
Hash identifier:          /vRQfk1DMPyDjRljAblyHq4kXf42Q4kl2PXF3Jef2Kg=
Subject key identifier:   EF:36:8D:9F:51:7B:A2:2A:88:00:B4:A2:26:94:41:E2:E9:90:77:9E
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       1C3719129F20CFCBDDD44A0610938AA309FC4066
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e20323635363739.roa
Signing time:             Tue 06 Jan 2026 19:15:24 +0000
ROA not before:           Tue 06 Jan 2026 19:10:24 +0000
ROA not after:            Tue 05 Jan 2027 19:15:24 +0000
asID:                     265679
IP address blocks:        45.4.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:37:19:12:9f:20:cf:cb:dd:d4:4a:06:10:93:8a:a3:09:fc:40:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Jan  6 19:10:24 2026 GMT
            Not After : Jan  5 19:15:24 2027 GMT
        Subject: CN=EF368D9F517BA22A8800B4A2269441E2E990779E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:f9:66:05:7c:c3:ad:ad:67:e2:3d:80:41:
                    5b:cc:01:b7:b3:97:2a:c8:25:90:15:6d:4e:63:3a:
                    a6:71:98:1d:1e:7f:f9:c5:f1:ef:58:2d:30:12:98:
                    09:74:63:07:5a:c1:d4:a8:46:25:91:57:a7:56:24:
                    4d:6f:5b:23:4e:64:54:30:5c:77:70:6c:83:6d:46:
                    6c:ba:00:12:28:75:4e:a7:48:5f:27:dc:a6:28:f1:
                    26:55:85:34:a2:a2:28:0a:77:31:d9:7f:bc:b6:8d:
                    50:44:4c:7c:e7:be:fe:b5:85:a5:6d:84:df:f3:cb:
                    af:62:63:a9:9d:ad:d2:b1:1f:a1:33:67:db:c0:cd:
                    7c:a3:d1:a9:2f:68:4d:48:0f:1c:50:07:f6:d4:11:
                    10:4a:89:cc:06:c5:f8:29:21:79:2e:c8:79:f3:7f:
                    b3:db:e7:a1:b5:37:45:9a:e9:8e:fc:a8:61:02:2e:
                    bf:e5:3a:fb:6f:0d:b2:b7:6d:ec:14:72:33:9b:ff:
                    f0:cd:6e:81:28:cb:67:cb:a3:58:2a:03:09:c1:89:
                    10:58:80:08:16:1c:78:4d:44:b5:4f:6a:f5:8b:f6:
                    77:f4:2c:be:e6:e6:63:9d:6b:2b:af:43:28:92:fd:
                    62:8f:46:f6:3f:7f:e4:9c:df:4c:aa:1c:7e:c0:fa:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:36:8D:9F:51:7B:A2:2A:88:00:B4:A2:26:94:41:E2:E9:90:77:9E
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e20323635363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:a0:7f:97:58:56:f7:d9:50:fa:a0:17:a3:34:f6:dd:62:
         5d:eb:18:84:2b:6f:b4:76:d0:53:11:d0:01:de:85:89:c2:43:
         8c:42:5f:f2:1f:7b:64:16:93:60:49:fb:73:31:c9:4b:fb:c8:
         75:02:5f:f9:77:ca:5f:90:2a:80:f2:07:27:62:bf:00:d8:9a:
         ba:4a:fd:b8:4a:d1:fe:7b:6b:00:de:eb:16:49:fb:b6:70:26:
         0e:ab:b9:a9:48:48:08:4a:49:44:7b:28:63:0d:75:23:b2:3d:
         9c:ed:17:a6:52:eb:19:3f:b9:97:8f:46:e1:3e:96:c2:3f:bf:
         e6:31:b8:c1:89:b8:cd:a5:75:78:13:e0:7f:2e:ba:34:75:2f:
         ee:5d:40:5c:ba:a9:e1:a0:2b:3c:1b:74:9c:50:12:cd:77:2d:
         9d:eb:f0:20:10:7b:0d:01:01:0a:0f:7a:c5:7d:90:e3:4d:93:
         02:88:10:19:aa:c0:be:14:8e:44:d1:8f:13:31:76:20:fc:c4:
         39:56:58:86:05:f2:fa:a3:c5:db:58:6e:71:b8:f8:de:d7:77:
         dc:6e:0f:50:bf:4f:87:33:f5:7d:31:57:39:05:52:9a:31:02:
         2d:58:74:27:39:49:f9:5c:d6:c3:25:88:c4:3d:fc:e5:d5:b3:
         f0:b4:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:52 2026 by rpki-client