This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138342e302f32342d3234203d3e20323639383734.roa
File:                     34352e3138392e3138342e302f32342d3234203d3e20323639383734.roa (raw, json)
Hash identifier:          UKlvZDuFYWAlIf6X5D52dIuBzzMfOQj8fXY4Xs0OggE=
Subject key identifier:   07:24:0B:1D:42:CD:1F:34:C7:B7:F2:94:E9:BA:39:14:5F:DB:C6:7B
Certificate issuer:       /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial:       0AE716F858E109A3561DB73F62ECEF4CAD352FD1
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138342e302f32342d3234203d3e20323639383734.roa
Signing time:             Tue 06 Jan 2026 19:02:39 +0000
ROA not before:           Tue 06 Jan 2026 18:57:39 +0000
ROA not after:            Tue 05 Jan 2027 19:02:39 +0000
asID:                     269874
IP address blocks:        45.189.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 19:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e7:16:f8:58:e1:09:a3:56:1d:b7:3f:62:ec:ef:4c:ad:35:2f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
        Validity
            Not Before: Jan  6 18:57:39 2026 GMT
            Not After : Jan  5 19:02:39 2027 GMT
        Subject: CN=07240B1D42CD1F34C7B7F294E9BA39145FDBC67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:80:d2:01:5a:dd:81:e6:f1:4f:d8:c5:d8:37:
                    dd:94:ec:2b:ec:d5:b8:ee:f2:43:3d:f6:a1:9f:6a:
                    59:0c:3d:7e:e2:6a:bd:3c:da:9d:e8:d7:b9:02:7d:
                    2a:77:46:2e:66:4e:60:7d:0e:9d:20:9f:25:40:84:
                    9e:02:5c:e6:32:d7:c5:e4:af:4d:e5:aa:8f:32:bc:
                    5c:fa:da:f2:02:08:51:c6:db:7c:44:2b:34:d8:e2:
                    4c:33:a2:32:a2:ed:94:2d:26:04:2d:75:c9:18:e5:
                    a1:c1:6d:71:c7:d5:f4:59:b3:41:9d:01:c4:9e:32:
                    59:82:94:e0:b8:7c:63:10:ab:1b:3a:23:dd:5a:11:
                    9c:0a:21:54:91:89:2b:a7:ad:c3:ac:f1:28:97:3f:
                    a7:35:27:42:36:ea:28:ff:ce:06:dc:39:f8:49:79:
                    18:d2:00:0d:0b:1e:9c:f1:1a:62:49:58:22:c3:02:
                    aa:07:9e:e2:a7:da:56:d8:46:cf:58:47:13:82:55:
                    6c:65:7a:fb:35:37:b9:f9:3e:c9:5e:d2:7b:75:ef:
                    84:1f:ee:40:1c:c8:a4:58:86:e7:13:ab:d2:bd:44:
                    23:6e:ec:9e:d8:db:f5:2a:18:85:db:c7:4b:6f:75:
                    52:a3:00:52:16:81:b1:ec:c0:49:c4:97:3b:d7:5c:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:0B:1D:42:CD:1F:34:C7:B7:F2:94:E9:BA:39:14:5F:DB:C6:7B
            X509v3 Authority Key Identifier:
                keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138342e302f32342d3234203d3e20323639383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:fe:25:e1:44:0b:8f:c5:3a:50:32:36:e5:4a:f3:4a:df:b9:
         11:78:62:34:c1:33:64:0a:13:6d:a4:9d:3e:25:9e:e6:b9:28:
         7c:31:81:2a:90:69:b6:d5:50:f6:3f:35:34:35:d8:18:1d:42:
         5a:39:e3:96:e8:c2:98:3d:4b:a5:c4:9c:0f:21:5a:dc:1e:3c:
         5c:16:66:95:c9:7a:3d:46:39:ac:9f:0d:1f:c4:b4:88:6d:fa:
         f3:2b:6d:6b:16:83:83:55:d8:70:b4:64:f6:fe:05:d2:55:ce:
         0b:a9:8e:a0:06:63:9e:ce:3d:ae:20:ff:4c:89:e7:07:5c:66:
         c0:ea:74:16:52:0b:2a:cf:bd:32:f9:d0:e7:6b:3c:00:5f:3a:
         21:fb:e5:74:fe:b8:4c:39:81:4c:d1:69:5b:d4:69:0e:42:75:
         a0:83:e1:f2:04:9d:6c:70:1d:6d:08:b5:fd:7d:1e:3c:15:ea:
         25:ff:69:06:c5:38:62:29:ee:fe:df:7a:d0:d2:a2:58:8b:72:
         09:43:ee:44:28:47:58:d6:c4:e3:7c:79:fc:07:63:20:57:b5:
         aa:a0:eb:0d:6e:97:26:9c:a1:ef:c8:36:3a:08:41:20:20:51:
         45:ba:3b:f8:be:fd:b2:32:7d:dc:ef:bc:6c:ec:8d:de:a2:59:
         5d:02:46:8e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCucW+FjhCaNWHbc/YuzvTK01L9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdFRDgyM0NCNkY3NjdFNUE0QkM3MjAzRjUzOEU5N0VG
NkY1OUYzQTAeFw0yNjAxMDYxODU3MzlaFw0yNzAxMDUxOTAyMzlaMDMxMTAvBgNV
BAMTKDA3MjQwQjFENDJDRDFGMzRDN0I3RjI5NEU5QkEzOTE0NUZEQkM2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5gNIBWt2B5vFP2MXYN92U7Cvs
1bju8kM99qGfalkMPX7iar082p3o17kCfSp3Ri5mTmB9Dp0gnyVAhJ4CXOYy18Xk
r03lqo8yvFz62vICCFHG23xEKzTY4kwzojKi7ZQtJgQtdckY5aHBbXHH1fRZs0Gd
AcSeMlmClOC4fGMQqxs6I91aEZwKIVSRiSunrcOs8SiXP6c1J0I26ij/zgbcOfhJ
eRjSAA0LHpzxGmJJWCLDAqoHnuKn2lbYRs9YRxOCVWxlevs1N7n5Psle0nt174Qf
7kAcyKRYhucTq9K9RCNu7J7Y2/UqGIXbx0tvdVKjAFIWgbHswEnElzvXXJ6DAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUByQLHULNHzTHt/KU6bo5FF/bxnswHwYDVR0j
BBgwFoAUp+2CPLb3Z+WkvHID9Tjpfvb1nzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FM0JDRDU3MDk1NzM1M0ZCRTMzOERGMEIyOTNDRTUzODgw
MEMxRTNCRTg2QjcxRTA4NjQwREQ3QzYxN0VDNkU2LzAvQTdFRDgyM0NCNkY3NjdF
NUE0QkM3MjAzRjUzOEU5N0VGNkY1OUYzQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BN0VEODIzQ0I2Rjc2N0U1QTRC
QzcyMDNGNTM4RTk3RUY2RjU5RjNBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTNCQ0Q1NzA5NTczNTNGQkUzMzhERjBCMjkzQ0U1Mzg4MDBDMUUzQkU4
NkI3MUUwODY0MEREN0M2MTdFQzZFNi8wLzM0MzUyZTMxMzgzOTJlMzEzODM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb24
MA0GCSqGSIb3DQEBCwUAA4IBAQA1/iXhRAuPxTpQMjblSvNK37kReGI0wTNkChNt
pJ0+JZ7muSh8MYEqkGm21VD2PzU0NdgYHUJaOeOW6MKYPUulxJwPIVrcHjxcFmaV
yXo9Rjmsnw0fxLSIbfrzK21rFoODVdhwtGT2/gXSVc4LqY6gBmOezj2uIP9MiecH
XGbA6nQWUgsqz70y+dDnazwAXzoh++V0/rhMOYFM0Wlb1GkOQnWgg+HyBJ1scB1t
CLX9fR48Feol/2kGxThiKe7+33rQ0qJYi3IJQ+5EKEdY1sTjfHn8B2MgV7WqoOsN
bpcmnKHvyDY6CEEgIFFFujv4vv2yMn3c77xs7I3eolldAkaO
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:31 2026 by rpki-client