This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa
File:                     34352e342e3231362e302f32322d3234203d3e203532333631.roa (raw, json)
Hash identifier:          DG+JWqwhJjga90s1ucgVlcfQqFjf125xa+Os07SKCbQ=
Subject key identifier:   79:AE:CD:37:53:BD:59:12:52:45:01:BB:0B:A3:52:2E:AB:78:7F:2F
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       7412FD479C6868F892D21E4316422A57C6C503EA
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa
Signing time:             Tue 06 Jan 2026 19:15:24 +0000
ROA not before:           Tue 06 Jan 2026 19:10:24 +0000
ROA not after:            Tue 05 Jan 2027 19:15:24 +0000
asID:                     52361
IP address blocks:        45.4.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:12:fd:47:9c:68:68:f8:92:d2:1e:43:16:42:2a:57:c6:c5:03:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Jan  6 19:10:24 2026 GMT
            Not After : Jan  5 19:15:24 2027 GMT
        Subject: CN=79AECD3753BD5912524501BB0BA3522EAB787F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:14:94:c0:69:99:16:d8:74:b4:0f:c1:f0:
                    dc:eb:28:ab:f2:a6:2b:ad:8c:31:4b:cd:aa:13:2b:
                    7c:1a:26:04:bb:8b:e9:02:ae:20:23:a7:24:51:0d:
                    43:7a:26:e3:81:9f:f7:6f:3f:ee:c1:e1:1a:2f:f9:
                    cc:37:49:cf:c8:2c:aa:a0:14:2f:99:cb:db:40:08:
                    c0:70:32:57:58:b1:ce:00:c5:03:86:26:e0:09:88:
                    c0:74:12:44:89:7d:47:9d:a6:ab:f2:07:fd:00:15:
                    82:c2:3d:59:65:15:25:cc:a3:22:1b:c5:13:93:82:
                    46:91:e4:88:2e:00:85:07:71:44:0a:77:c9:e7:d6:
                    d8:ed:32:ef:74:66:e9:4d:84:31:ca:05:84:74:82:
                    a7:3e:72:e6:0f:a6:fb:61:02:ec:d8:ff:2b:e2:f3:
                    94:56:2d:83:77:d4:86:77:86:0f:89:c7:b0:55:02:
                    06:35:a5:72:21:7e:5a:09:9e:b6:45:7a:5f:cb:69:
                    0d:4c:2d:fc:b5:09:f4:08:c5:7f:18:0c:fd:3e:ec:
                    f3:e7:f2:b0:bd:7b:95:9e:34:06:5b:cd:8a:f1:56:
                    5b:59:76:7e:c3:9b:cc:95:7d:59:c7:84:37:18:09:
                    36:43:71:8f:dd:0b:ae:37:0e:9f:7c:c4:2f:07:28:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AE:CD:37:53:BD:59:12:52:45:01:BB:0B:A3:52:2E:AB:78:7F:2F
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:7d:8a:89:64:ef:9c:b9:20:09:69:32:b9:1a:6b:f5:72:
         e1:75:bd:6c:f2:0b:b8:04:21:28:de:c7:b7:a9:39:04:97:d5:
         f3:e9:17:74:59:d7:39:25:e9:cc:29:ba:6c:fe:61:18:97:a9:
         c2:5a:d6:44:02:e9:d7:a4:6d:16:91:ac:4f:fd:9b:a8:5e:9d:
         17:05:38:63:bf:bf:ef:5e:6f:57:21:fb:65:f2:c5:a3:96:8b:
         b8:79:d2:5b:33:53:17:8c:19:e6:64:b5:5c:8f:d8:e5:4b:9d:
         84:7d:a9:b7:1f:80:15:4b:b8:14:f0:a1:d4:e7:b4:e3:44:cb:
         19:c1:4a:b2:49:ce:7c:44:6d:61:49:7c:16:99:d8:df:2f:28:
         b7:e3:95:1f:7a:fb:b8:2c:6f:91:23:84:3e:ba:08:d9:61:3d:
         dd:d7:5f:89:79:b2:33:ca:90:dc:4a:34:de:a3:78:91:18:19:
         af:47:73:43:23:3c:8c:86:a2:ba:e4:b3:9b:09:c0:6f:1b:f1:
         a8:ec:8e:94:22:8c:66:56:14:a5:2a:56:bd:83:47:3c:66:f1:
         42:10:e5:cf:9e:10:f5:d2:95:2c:aa:f3:1e:2d:6d:ea:ba:1c:
         15:f3:80:22:40:c8:dc:70:ae:77:9a:75:34:ed:47:1b:1d:a7:
         29:12:b7:ea
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUdBL9R5xoaPiS0h5DFkIqV8bFA+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0Qjk1M0U3Q0RGRDE1NkNENDRDN0U5QkVEQzM3QUU2
OUI0Mzg4MTAeFw0yNjAxMDYxOTEwMjRaFw0yNzAxMDUxOTE1MjRaMDMxMTAvBgNV
BAMTKDc5QUVDRDM3NTNCRDU5MTI1MjQ1MDFCQjBCQTM1MjJFQUI3ODdGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsRSUwGmZFth0tA/B8NzrKKvy
piutjDFLzaoTK3waJgS7i+kCriAjpyRRDUN6JuOBn/dvP+7B4Rov+cw3Sc/ILKqg
FC+Zy9tACMBwMldYsc4AxQOGJuAJiMB0EkSJfUedpqvyB/0AFYLCPVllFSXMoyIb
xROTgkaR5IguAIUHcUQKd8nn1tjtMu90ZulNhDHKBYR0gqc+cuYPpvthAuzY/yvi
85RWLYN31IZ3hg+Jx7BVAgY1pXIhfloJnrZFel/LaQ1MLfy1CfQIxX8YDP0+7PPn
8rC9e5WeNAZbzYrxVltZdn7Dm8yVfVnHhDcYCTZDcY/dC643Dp98xC8HKHe9AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUea7NN1O9WRJSRQG7C6NSLqt4fy8wHwYDVR0j
BBgwFoAUYEuVPnzf0VbNRMfpvtw3rmm0OIEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENTM3OTY3MTg5RjRCMjVBMUE3RUJFRDNBMkE5QzQ1RUJD
OTlERTlCQjY4RUNBRTZENUY2MEQxMzU0RUQ2Mzg3LzAvNjA0Qjk1M0U3Q0RGRDE1
NkNENDRDN0U5QkVEQzM3QUU2OUI0Mzg4MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MDRCOTUzRTdDREZEMTU2Q0Q0
NEM3RTlCRURDMzdBRTY5QjQzODgxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDUzNzk2NzE4OUY0QjI1QTFBN0VCRUQzQTJBOUM0NUVCQzk5REU5QkI2
OEVDQUU2RDVGNjBEMTM1NEVENjM4Ny8wLzM0MzUyZTM0MmUzMjMxMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQTYMA0GCSqG
SIb3DQEBCwUAA4IBAQA2H32KiWTvnLkgCWkyuRpr9XLhdb1s8gu4BCEo3se3qTkE
l9Xz6Rd0Wdc5JenMKbps/mEYl6nCWtZEAunXpG0WkaxP/ZuoXp0XBThjv7/vXm9X
Iftl8sWjlou4edJbM1MXjBnmZLVcj9jlS52Efam3H4AVS7gU8KHU57TjRMsZwUqy
Sc58RG1hSXwWmdjfLyi345Ufevu4LG+RI4Q+ugjZYT3d11+JebIzypDcSjTeo3iR
GBmvR3NDIzyMhqK65LObCcBvG/Go7I6UIoxmVhSlKla9g0c8ZvFCEOXPnhD10pUs
qvMeLW3quhwV84AiQMjccK53mnU07UcbHacpErfq
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:43 2026 by rpki-client