This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa
File:                     34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa (raw, json)
Hash identifier:          1wmudd/9/q7WuSn/BTuta1f7KXeDUb42HTwA06XBn88=
Subject key identifier:   C2:76:3D:03:92:CC:43:A9:8D:5D:19:36:14:65:E1:83:EC:03:45:0D
Certificate issuer:       /CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
Certificate serial:       629FA78D5F7058C4D32B738688AD77E784347222
Authority key identifier: 35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa
Signing time:             Tue 06 Jan 2026 19:17:20 +0000
ROA not before:           Tue 06 Jan 2026 19:12:20 +0000
ROA not after:            Tue 05 Jan 2027 19:17:20 +0000
asID:                     267791
IP address blocks:        45.172.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 06:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9f:a7:8d:5f:70:58:c4:d3:2b:73:86:88:ad:77:e7:84:34:72:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353F7C9A66591AC01FC52C773EE1A04559086A6B
        Validity
            Not Before: Jan  6 19:12:20 2026 GMT
            Not After : Jan  5 19:17:20 2027 GMT
        Subject: CN=C2763D0392CC43A98D5D19361465E183EC03450D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:ff:57:46:2b:f6:ad:54:b3:c1:aa:e4:38:
                    10:f4:7f:08:23:c5:75:1c:44:07:13:81:d1:c9:64:
                    3c:79:76:a4:06:21:09:3b:a4:3f:d6:0b:78:a5:20:
                    ec:70:cb:d7:f6:a5:58:fe:10:37:04:bc:83:9e:e2:
                    76:0f:83:49:e3:8c:8c:b3:ff:fa:3d:b8:e5:f1:af:
                    18:51:64:c9:7e:5b:ed:6a:a5:aa:15:76:ee:b5:23:
                    73:86:59:e7:16:df:ea:15:11:59:45:c4:c1:21:df:
                    dd:7b:a6:31:38:2c:1b:35:7d:7b:e2:a5:86:04:29:
                    e2:17:49:fd:1c:1f:39:4c:0f:34:a8:55:45:81:5b:
                    5d:ff:80:f1:a1:00:be:07:26:a3:9a:59:9d:77:b9:
                    9e:df:51:1e:58:47:11:5f:24:8c:7c:d0:fe:99:c2:
                    66:99:5e:ca:0f:86:03:19:11:c7:a6:58:1e:1c:45:
                    dd:bb:db:4a:2d:72:5b:62:a6:e2:8b:11:db:a5:89:
                    cf:01:ee:f8:e2:30:af:5e:1a:f7:2a:42:e4:ce:3f:
                    8f:f9:9f:6e:0e:18:03:68:88:1b:08:16:e9:f9:b5:
                    85:4a:f7:17:1c:cc:bd:7e:09:44:a4:fa:88:0d:e6:
                    27:8a:86:02:2f:ce:4e:46:86:09:56:ca:e0:65:d2:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:76:3D:03:92:CC:43:A9:8D:5D:19:36:14:65:E1:83:EC:03:45:0D
            X509v3 Authority Key Identifier:
                keyid:35:3F:7C:9A:66:59:1A:C0:1F:C5:2C:77:3E:E1:A0:45:59:08:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/353F7C9A66591AC01FC52C773EE1A04559086A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBC29DAE2BB999CF4FF367D05705451FB42EE8E2DA9BCC2BC5CE3CC22E32E5D0/0/34352e3137322e3137362e302f32332d3233203d3e20323637373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:06:72:27:67:98:dd:22:24:c0:c7:bb:dc:72:18:74:42:
         b3:57:76:8d:52:6e:af:90:2e:eb:29:24:73:9b:50:4d:ce:75:
         8e:48:c6:03:0e:fc:e9:a4:0d:ee:4b:73:9c:75:32:75:ec:e0:
         5a:29:39:98:5b:40:72:a5:62:ad:73:a8:9a:d4:c2:e1:8d:50:
         0d:7c:a5:b2:af:18:c5:3b:52:a2:70:10:e7:64:96:7f:a5:78:
         d0:1a:38:6e:86:56:b2:a5:81:7b:3c:20:52:87:ee:bc:70:f0:
         ad:31:9e:b0:7e:6a:c2:da:55:01:33:d7:96:8c:00:23:77:93:
         d5:84:17:cb:fe:29:d6:20:27:3a:03:c5:33:df:34:79:26:01:
         3d:0e:40:ee:7b:4f:2b:61:76:1b:f4:35:17:40:09:be:c9:64:
         00:94:d2:f9:5b:7c:cb:96:d9:46:d8:c2:82:4c:9e:cf:bb:28:
         2f:11:a9:1c:92:cf:1b:c9:bc:9f:3a:cb:28:ab:95:44:de:4c:
         b2:ed:bb:77:7d:02:bc:17:78:5a:f6:c5:c2:79:33:3e:e5:7e:
         dd:c7:5a:fd:55:44:50:17:3b:8f:38:16:d1:85:ce:12:e3:94:
         37:c5:09:f4:75:be:a8:42:95:77:04:1b:c7:a0:79:2d:54:2d:
         69:5d:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:22 2026 by rpki-client