This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3232203d3e20323635363635.roa
File:                     34352e342e38342e302f32322d3232203d3e20323635363635.roa (raw, json)
Hash identifier:          izleSo1EMlHklu8q++LrTtApWHYoRFmPGL1frkK5HuY=
Subject key identifier:   58:96:83:2F:B7:73:D6:BE:B9:E9:AE:C5:5C:A6:D5:94:C9:4C:53:7D
Certificate issuer:       /CN=4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658
Certificate serial:       3AEAF51E1F7614D7EEC66ED2DCD9EA386DFFFA47
Authority key identifier: 4E:56:D1:3A:FF:B6:D3:35:35:BA:82:AE:BB:1E:C9:AB:F8:95:56:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3232203d3e20323635363635.roa
Signing time:             Tue 06 Jan 2026 20:56:22 +0000
ROA not before:           Tue 06 Jan 2026 20:51:22 +0000
ROA not after:            Tue 05 Jan 2027 20:56:22 +0000
asID:                     265665
IP address blocks:        45.4.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:f5:1e:1f:76:14:d7:ee:c6:6e:d2:dc:d9:ea:38:6d:ff:fa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658
        Validity
            Not Before: Jan  6 20:51:22 2026 GMT
            Not After : Jan  5 20:56:22 2027 GMT
        Subject: CN=5896832FB773D6BEB9E9AEC55CA6D594C94C537D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:74:b0:46:3a:99:74:9b:9f:cd:37:c3:5b:
                    7e:3d:29:37:8f:f5:08:32:62:71:d0:6d:b5:9a:ab:
                    18:64:d8:69:0d:9a:8c:f8:ad:17:47:93:0c:5f:07:
                    74:b1:90:53:ec:70:8f:2d:fd:11:22:3a:53:f9:e7:
                    31:f8:27:f4:1f:03:7a:11:8b:9b:43:c1:da:de:04:
                    f8:8f:3c:3b:dc:97:e5:34:4c:bc:18:86:0f:16:e8:
                    65:e7:3d:fe:e5:96:50:d9:18:36:fd:ee:e5:5f:39:
                    89:13:7b:12:d5:73:e8:59:ae:f4:aa:a8:2c:c8:0d:
                    e0:e2:f0:0f:24:d0:e4:38:2f:10:01:55:74:d4:61:
                    9e:0a:af:9a:64:df:41:9b:2f:fd:ba:2f:36:a0:3d:
                    d5:39:36:16:e8:75:97:0f:58:8c:5e:f4:58:bc:d6:
                    2a:f4:5c:f7:71:70:e8:ef:fa:5e:ce:79:8a:73:38:
                    ea:cc:ec:d0:36:f1:86:09:d5:d3:7b:7d:be:92:73:
                    b9:c8:02:0a:7d:f7:4f:e4:ac:8a:d4:ae:a0:7f:b8:
                    0f:51:01:68:62:65:fa:6b:c1:da:ec:49:91:b5:46:
                    81:34:1b:95:e7:d9:4d:c9:ae:da:a8:dc:79:17:3b:
                    c1:18:6b:63:5e:73:c0:33:0d:d0:56:a5:7d:80:bc:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:83:2F:B7:73:D6:BE:B9:E9:AE:C5:5C:A6:D5:94:C9:4C:53:7D
            X509v3 Authority Key Identifier:
                keyid:4E:56:D1:3A:FF:B6:D3:35:35:BA:82:AE:BB:1E:C9:AB:F8:95:56:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3232203d3e20323635363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ad:a7:0a:ef:d5:10:fb:1a:46:54:61:59:c6:75:5f:28:4e:
         88:f5:b7:79:63:ad:f1:b1:ab:a7:e9:65:d0:17:ab:fe:85:07:
         c7:bb:c9:a0:00:bb:1b:a7:6d:0b:83:f4:69:b2:af:d2:c8:89:
         14:bf:b1:6c:6f:3b:fd:a1:7f:9d:b7:5b:cb:e5:1b:07:56:fb:
         ed:30:89:b5:08:ba:c1:cd:c5:73:c4:02:2b:d5:da:43:99:e6:
         49:1b:2e:53:38:45:fe:b7:a2:3b:a1:5a:11:46:4e:0b:9c:f9:
         ef:56:02:a0:ed:26:43:1c:4b:bf:ac:8d:c3:b3:d7:7b:d6:7c:
         90:e2:93:7d:81:05:74:2a:1b:5a:a2:17:bc:93:e8:45:e4:50:
         ab:bd:80:9a:37:78:ba:0b:08:3a:2b:71:25:21:ac:db:9a:69:
         a7:e8:a8:a8:be:48:e0:2b:6d:b3:a2:5d:a4:be:bb:36:0b:70:
         f2:72:cd:90:8d:4b:b9:e5:b1:ba:b0:ce:df:e0:a8:09:7d:f4:
         e1:5f:66:70:91:50:ac:ae:f3:e6:1f:23:34:50:ca:19:14:6e:
         f9:50:2b:b8:fd:a1:5d:b7:cf:38:75:f5:c4:55:28:ca:bb:b0:
         24:8a:fa:8a:e6:2f:d8:25:b2:bf:db:cc:5a:68:16:84:da:97:
         7f:f8:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:36 2026 by rpki-client