This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/34352e3138382e32302e302f32322d3234203d3e20323639383333.roa
File:                     34352e3138382e32302e302f32322d3234203d3e20323639383333.roa (raw, json)
Hash identifier:          75a0LYL50i3Vn7LYioazFpTyf8hwKHCqhj0e5Itjor4=
Subject key identifier:   C9:00:9D:BA:A4:4B:70:4C:4C:62:60:4A:98:F1:89:1F:5E:47:2D:F1
Certificate issuer:       /CN=CDE9A086136079BC935532C1329B043B4912BF62
Certificate serial:       0624518E60E80D844022856AAB53B1B11EB74738
Authority key identifier: CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/34352e3138382e32302e302f32322d3234203d3e20323639383333.roa
Signing time:             Tue 06 Jan 2026 19:36:20 +0000
ROA not before:           Tue 06 Jan 2026 19:31:20 +0000
ROA not after:            Tue 05 Jan 2027 19:36:20 +0000
asID:                     269833
IP address blocks:        45.188.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:51:8e:60:e8:0d:84:40:22:85:6a:ab:53:b1:b1:1e:b7:47:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE9A086136079BC935532C1329B043B4912BF62
        Validity
            Not Before: Jan  6 19:31:20 2026 GMT
            Not After : Jan  5 19:36:20 2027 GMT
        Subject: CN=C9009DBAA44B704C4C62604A98F1891F5E472DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:71:5a:9b:7e:54:4f:b3:3d:ed:65:42:bf:
                    bc:80:99:fe:46:87:81:5c:e9:cb:70:ec:ca:60:3d:
                    3d:7f:ca:7d:5b:b2:c3:c1:7f:5b:7c:1c:68:30:f4:
                    92:6e:2d:88:4f:7d:73:43:38:bb:f0:64:59:15:cd:
                    c8:ce:94:6b:11:9d:a9:77:40:5b:dc:a1:b4:e6:34:
                    19:77:57:be:7c:1f:bf:36:45:bc:78:08:6e:1f:ec:
                    52:58:f5:b3:33:50:ba:8b:aa:e9:2a:de:db:e8:3f:
                    a7:42:e9:dd:51:7a:aa:5e:94:11:7b:a1:06:97:da:
                    32:20:d6:73:69:01:b3:8d:e8:d8:d0:d0:21:69:68:
                    e8:d5:aa:21:b6:e2:88:67:40:b4:14:9a:b4:bf:2e:
                    91:73:e9:cc:3e:7c:75:85:d1:e0:54:e0:46:f3:4f:
                    4e:d8:77:d8:9d:e1:7f:ae:90:0f:63:d1:0a:20:6c:
                    e4:52:40:6c:55:fc:63:43:b7:d7:50:d6:43:e5:13:
                    2b:a2:76:ca:6c:64:91:fb:50:42:16:08:ed:95:c1:
                    3a:8c:2d:96:d3:3c:bb:a4:77:04:5e:c7:1a:fb:1c:
                    83:8c:de:a4:38:3d:91:a1:aa:4d:78:3d:a8:08:d2:
                    82:7b:89:be:f3:d7:56:c7:57:0b:7b:78:8a:eb:37:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:9D:BA:A4:4B:70:4C:4C:62:60:4A:98:F1:89:1F:5E:47:2D:F1
            X509v3 Authority Key Identifier:
                keyid:CD:E9:A0:86:13:60:79:BC:93:55:32:C1:32:9B:04:3B:49:12:BF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/CDE9A086136079BC935532C1329B043B4912BF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE9A086136079BC935532C1329B043B4912BF62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5CEFD1149B7889365B25847B32FB44752082E5A551A61E79B46CA27100ED93F/0/34352e3138382e32302e302f32322d3234203d3e20323639383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:3f:03:dd:ee:25:8f:05:26:9d:6d:9b:87:7c:a8:a4:5b:
         0f:dc:5e:47:58:e8:2f:32:f6:a9:3d:4e:c6:21:96:c2:d4:2c:
         9e:9c:44:45:84:48:3a:5b:52:72:80:08:3a:b9:2a:47:36:7e:
         3d:7a:53:a8:0c:29:70:84:7b:ca:5d:b7:f3:ee:b0:7f:f5:90:
         50:fd:20:d9:db:06:25:46:e8:86:14:bf:33:d2:db:ed:73:7c:
         1a:aa:da:3e:41:db:2f:1a:45:f4:47:c1:5a:7c:9c:dc:2f:de:
         c4:63:74:8e:de:4a:35:5c:49:79:4b:19:37:78:02:b0:b9:85:
         af:11:1f:ca:48:06:49:63:b0:21:61:39:44:e7:f8:0e:fc:88:
         99:20:12:f6:ba:bb:27:05:1f:95:b1:2f:e0:50:bf:ee:f0:c5:
         99:dd:33:d0:a3:86:83:da:12:ed:a0:87:c4:21:a6:c2:b5:2e:
         f1:42:09:4b:46:a5:71:5a:6b:0d:36:86:d1:c2:b2:55:ca:d0:
         fc:eb:aa:8d:a6:30:8a:88:70:14:ad:af:cf:c1:cd:01:6c:8a:
         0e:ea:eb:12:2c:fc:c8:8c:da:8d:2e:c8:88:5a:f5:77:a8:5f:
         08:3e:22:4f:1d:c7:84:74:a0:e7:ea:f6:35:97:e3:cd:04:87:
         e9:cb:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:07:55 2026 by rpki-client