This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa
File:                     34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa (raw, json)
Hash identifier:          7F2tJjR1qq+Iz+ZnWwFGrRcMrcnY7ESTTxmPOdniRac=
Subject key identifier:   17:7E:5F:7A:1A:3B:EA:AA:48:E1:60:14:42:5A:BF:CD:66:42:19:C6
Certificate issuer:       /CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
Certificate serial:       0110DD542DC220EFC99769951CB09E6A698EB6BC
Authority key identifier: E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa
Signing time:             Tue 06 Jan 2026 19:07:34 +0000
ROA not before:           Tue 06 Jan 2026 19:02:34 +0000
ROA not after:            Tue 05 Jan 2027 19:07:34 +0000
asID:                     265574
IP address blocks:        45.174.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:dd:54:2d:c2:20:ef:c9:97:69:95:1c:b0:9e:6a:69:8e:b6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
        Validity
            Not Before: Jan  6 19:02:34 2026 GMT
            Not After : Jan  5 19:07:34 2027 GMT
        Subject: CN=177E5F7A1A3BEAAA48E16014425ABFCD664219C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:c6:bb:4d:45:47:96:8a:48:fe:2c:2d:49:
                    39:f0:be:be:65:93:6c:33:21:a9:3e:4b:c0:ae:54:
                    f0:a0:e1:0b:cd:27:90:f7:89:59:22:1e:97:21:b5:
                    fc:6b:ff:7e:57:2b:18:14:a6:16:c6:9d:f0:b2:0a:
                    7d:f3:90:17:bb:92:f6:c5:cc:6c:17:6e:68:92:8a:
                    46:a7:9d:97:73:a4:80:44:e3:33:d7:7d:34:db:12:
                    22:69:6a:f9:91:e7:21:19:a3:ec:a6:6e:bf:29:51:
                    68:57:a9:fd:e5:4a:db:7b:2b:6e:f7:78:9d:cb:79:
                    77:a3:68:fa:38:75:e1:94:7d:05:99:01:31:05:53:
                    22:68:ae:4d:de:33:a3:1d:a9:2c:01:33:24:6a:05:
                    94:94:af:4e:fe:f7:d1:9c:4b:71:db:cb:e1:45:6c:
                    ad:dc:04:84:88:89:86:ea:5a:ab:e5:9b:ba:76:89:
                    9e:59:c3:5d:0c:65:26:28:ea:2d:f9:c2:da:54:d0:
                    30:ee:2e:03:66:de:fd:cf:7f:e7:2e:7f:02:c2:a4:
                    c0:5c:e9:c5:e1:9f:f1:eb:e2:d7:02:03:ee:06:8b:
                    ee:cf:da:91:d6:af:43:9c:20:b5:50:ca:e5:33:97:
                    7d:f4:78:92:a7:48:51:a7:49:25:96:de:24:0a:09:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:5F:7A:1A:3B:EA:AA:48:E1:60:14:42:5A:BF:CD:66:42:19:C6
            X509v3 Authority Key Identifier:
                keyid:E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:49:8c:e2:d4:81:08:06:66:ac:56:7e:79:75:aa:eb:8d:ec:
         35:f8:51:8b:83:ae:99:7a:65:ad:09:b9:32:62:6a:55:af:25:
         27:15:4b:87:9e:31:8c:43:c9:d4:1d:95:6a:b3:50:a4:2e:30:
         e2:b1:72:2e:ce:b4:8b:1c:4f:f3:c8:6f:f8:32:04:05:d4:82:
         fd:0a:71:03:82:d6:c9:82:65:43:44:ec:f4:65:66:97:19:a5:
         1c:b6:9f:c9:20:79:29:fa:8d:88:87:3f:52:f4:f3:98:77:29:
         af:0f:76:72:1f:da:fc:b0:e8:04:16:21:59:bb:fb:72:66:c2:
         22:98:38:10:cb:f2:60:21:d2:b9:ea:cb:4a:0e:95:b0:ac:4d:
         22:5e:34:b9:c2:68:bc:95:5e:aa:2f:cb:4e:c4:d7:b1:1a:5f:
         c3:6b:41:ee:e9:bd:8b:e4:60:41:c9:ee:5c:85:56:90:a0:f1:
         27:e8:b5:6a:f3:a8:74:3f:6c:a4:74:a3:68:e8:3a:e1:56:b9:
         36:04:0a:65:33:e9:db:12:79:3a:7e:dd:01:96:4e:70:72:b7:
         45:cc:d1:db:63:c2:4f:c7:fa:2e:81:2d:f7:e2:e7:3d:df:06:
         74:a6:3e:e2:af:83:12:90:26:dc:f7:c4:79:1d:5e:9a:69:df:
         eb:a4:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:42 2026 by rpki-client