This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233332e302f32342d3234203d3e203130373533.roa
File:                     34352e3138392e3233332e302f32342d3234203d3e203130373533.roa (raw, json)
Hash identifier:          wiWVv5p/vtEHZdvSwSWHtAlTKjBP8RZ2qB7n7HxNgzY=
Subject key identifier:   E0:E4:FC:18:78:85:54:A8:F7:BC:FB:2A:20:18:BA:04:BF:78:E6:AC
Certificate issuer:       /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Certificate serial:       42F3F2264F9A143E409B9031C09A60C92D1C890E
Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233332e302f32342d3234203d3e203130373533.roa
Signing time:             Tue 06 Jan 2026 20:51:32 +0000
ROA not before:           Tue 06 Jan 2026 20:46:32 +0000
ROA not after:            Tue 05 Jan 2027 20:51:32 +0000
asID:                     10753
IP address blocks:        45.189.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:f2:26:4f:9a:14:3e:40:9b:90:31:c0:9a:60:c9:2d:1c:89:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
        Validity
            Not Before: Jan  6 20:46:32 2026 GMT
            Not After : Jan  5 20:51:32 2027 GMT
        Subject: CN=E0E4FC18788554A8F7BCFB2A2018BA04BF78E6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:b8:dc:0d:99:f2:f9:c6:ea:d5:52:2b:66:
                    f4:bd:e7:dc:44:05:84:75:07:24:77:1c:3d:16:87:
                    6d:f7:80:d9:46:a8:4e:1d:c6:6e:ce:ac:02:38:28:
                    47:d7:e0:65:21:ad:77:ce:7e:15:93:04:a8:29:72:
                    2c:1a:f4:da:06:85:e9:ae:59:77:40:91:7d:52:d7:
                    3f:8f:fe:6a:47:df:1d:95:a7:2b:22:9b:41:23:93:
                    0f:02:96:0f:74:8f:05:34:60:6c:e6:2b:7f:cf:a5:
                    fe:e1:21:fb:4a:3d:3f:07:ac:f9:ba:1d:26:74:f8:
                    4d:00:94:02:80:f2:b6:c6:c1:28:b4:b1:8d:44:63:
                    b1:42:46:9a:9f:64:3c:62:e9:1d:ab:3d:69:b5:14:
                    21:32:ee:ac:cb:5d:46:86:bc:11:34:ea:7d:99:49:
                    ed:69:27:01:23:49:25:d9:a1:9a:98:ed:a9:5f:0a:
                    6d:3f:9b:e3:f3:5f:f6:9c:83:40:a0:bc:09:d3:18:
                    dd:f5:21:ee:aa:2f:a2:50:ad:98:24:4d:67:09:c1:
                    be:5d:4d:d9:65:e7:6b:2c:2d:6b:ff:e3:26:76:ac:
                    c6:ff:25:73:1e:21:89:70:d1:18:59:57:55:19:f0:
                    e7:4d:4c:37:b0:6f:23:e5:7c:50:70:87:a8:49:37:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:FC:18:78:85:54:A8:F7:BC:FB:2A:20:18:BA:04:BF:78:E6:AC
            X509v3 Authority Key Identifier:
                keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233332e302f32342d3234203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ee:07:26:27:5d:43:23:24:60:80:49:8e:4f:e0:e3:09:0e:
         4d:59:65:3c:3a:fe:70:4c:53:01:c3:9a:ee:e8:ff:fe:0f:88:
         66:ac:97:56:28:5d:62:ec:04:91:1c:81:17:06:85:e2:27:63:
         75:d6:8a:0d:d6:41:b0:cc:57:87:86:ca:85:5a:96:61:1f:07:
         cd:bb:ff:39:4d:4c:29:c3:99:70:f2:7f:da:dc:b8:2a:de:c3:
         2d:ba:54:25:d0:a4:38:06:60:0b:04:f8:09:ba:87:7a:ed:39:
         36:a4:07:18:05:51:2c:9e:26:2b:c2:c1:8a:70:87:9c:e7:66:
         21:2c:c0:5b:e0:3e:78:7b:f6:05:54:5e:8d:9e:20:d3:11:67:
         c2:79:96:28:21:77:64:1a:6c:cf:68:f5:6b:bc:5b:b0:4c:4b:
         3e:0c:05:36:c9:dd:b2:8e:38:4a:bc:b0:ca:eb:8d:38:81:03:
         1f:42:fd:eb:ae:fd:c6:45:1e:02:c5:34:be:19:7e:9f:60:a4:
         d3:a9:32:c9:d0:c1:0e:0a:59:4d:99:da:cc:2c:82:53:6b:ec:
         70:fb:23:04:1f:c2:8f:d4:04:ce:f3:33:70:a3:02:3e:a3:6c:
         24:4f:10:30:03:9e:a2:61:d9:17:5e:07:69:13:3f:02:61:68:
         b5:48:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:50:36 2026 by rpki-client