This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/34352e342e38382e302f32322d3234203d3e203532343638.roa
File:                     34352e342e38382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          8t3ijuZ6XVhyQZ3fToOtS7m6AQD6TmQ3Elqcrp0kVtk=
Subject key identifier:   B2:D6:04:D4:1A:6A:51:42:68:EE:C2:C0:16:19:87:6A:11:64:86:B7
Certificate issuer:       /CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
Certificate serial:       1BF31773A0AFDE4D33D4B57C2D01ABF1ED55ACD4
Authority key identifier: F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/34352e342e38382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:38:48 +0000
ROA not before:           Tue 06 Jan 2026 19:33:48 +0000
ROA not after:            Tue 05 Jan 2027 19:38:48 +0000
asID:                     52468
IP address blocks:        45.4.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:17:73:a0:af:de:4d:33:d4:b5:7c:2d:01:ab:f1:ed:55:ac:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
        Validity
            Not Before: Jan  6 19:33:48 2026 GMT
            Not After : Jan  5 19:38:48 2027 GMT
        Subject: CN=B2D604D41A6A514268EEC2C01619876A116486B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:94:1b:9c:57:de:32:58:46:78:85:89:37:
                    61:80:49:df:4f:d6:3a:fc:2f:a8:15:ea:42:75:8f:
                    58:c1:8c:41:89:96:fc:73:4c:ae:c0:80:21:3f:32:
                    83:cb:d0:ba:a8:04:ed:4a:88:2a:12:05:c1:84:71:
                    8d:84:73:5e:14:94:47:22:8b:d1:a5:0e:09:65:81:
                    3e:9c:8a:b1:be:17:dc:cb:cc:bc:83:e7:85:cb:b7:
                    1c:80:34:76:f7:f5:9b:6f:96:46:0e:a6:1e:f5:d1:
                    f0:1c:78:e2:50:41:55:eb:c4:67:9a:95:e7:d2:16:
                    c8:90:ab:0f:22:2d:8b:82:e5:20:7d:5d:ae:75:f2:
                    dd:23:14:32:1b:6a:2b:1d:a7:30:9f:9a:1b:21:33:
                    66:87:56:69:d9:81:77:96:19:6c:06:c1:b4:5d:d7:
                    62:56:8d:b8:7f:40:a1:0e:54:fe:d4:49:d0:ad:7c:
                    82:99:c9:00:46:01:2a:22:59:74:08:d0:5a:f0:5b:
                    d3:53:50:3b:03:63:a6:57:3f:d7:61:bc:44:6b:23:
                    e2:c0:65:1e:a2:80:37:26:cb:27:ba:3c:82:06:5b:
                    30:63:27:b1:eb:4e:bf:20:c1:f7:1a:4d:13:c2:22:
                    00:8c:81:cc:2c:64:35:5a:2d:06:7b:71:15:1e:24:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:04:D4:1A:6A:51:42:68:EE:C2:C0:16:19:87:6A:11:64:86:B7
            X509v3 Authority Key Identifier:
                keyid:F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/34352e342e38382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:b9:4e:61:54:90:cf:70:30:61:6a:cb:79:d2:32:21:e2:
         41:3d:cd:80:31:fb:23:ca:53:fb:be:9f:50:d2:28:54:28:67:
         25:59:73:67:e4:9a:d1:59:88:7d:ef:f6:f2:50:3a:52:1f:aa:
         a6:79:7d:10:48:be:09:28:00:a9:11:df:d4:d7:82:4b:6d:f1:
         46:c4:61:f4:af:ff:8c:b9:b3:ab:21:10:ba:e2:30:17:7f:c3:
         61:3f:3b:ee:9a:46:fd:47:fc:ca:00:6a:a7:0c:25:32:24:c1:
         b7:50:7c:d2:08:cc:ee:e8:8d:d5:ea:a9:a6:3b:12:38:3b:1c:
         04:33:74:29:27:11:e4:ff:4e:31:ac:84:af:3a:3f:3c:53:bf:
         d6:7b:ce:0a:bc:74:70:43:bc:a8:93:32:d6:19:8a:24:c4:fb:
         c4:16:fa:e5:75:f6:3d:29:48:e3:83:dd:83:c6:f4:8d:1c:7c:
         fa:17:05:3d:8a:99:6f:af:a3:77:15:1a:96:87:1a:09:f3:0d:
         fd:e4:b2:ad:3e:0f:fa:79:44:ef:cc:4a:71:28:ab:d7:38:f5:
         14:6a:5b:81:09:cb:ca:e9:72:63:26:f2:bb:72:30:93:8b:2a:
         f5:1d:44:b5:8b:9f:91:42:90:ca:22:78:d4:9c:59:9e:27:f2:
         df:87:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:43 2026 by rpki-client