This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/34352e3139312e302e302f32322d3234203d3e203231363632.roa
File:                     34352e3139312e302e302f32322d3234203d3e203231363632.roa (raw, json)
Hash identifier:          ojilbKDIrtiVCLaplj7Rgq4Ic60NLS312JCiO4IwUVY=
Subject key identifier:   8A:EF:BB:B6:86:93:C6:7A:40:DD:65:AC:5C:EC:B4:51:4B:1C:E5:FB
Certificate issuer:       /CN=6F536C71A8200D1878CE43CF666EB2F58403A8F1
Certificate serial:       0FEFDC3B82BB1A771DDCBC0D4394B3CF68B386C3
Authority key identifier: 6F:53:6C:71:A8:20:0D:18:78:CE:43:CF:66:6E:B2:F5:84:03:A8:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/34352e3139312e302e302f32322d3234203d3e203231363632.roa
Signing time:             Tue 06 Jan 2026 20:51:18 +0000
ROA not before:           Tue 06 Jan 2026 20:46:18 +0000
ROA not after:            Tue 05 Jan 2027 20:51:18 +0000
asID:                     21662
IP address blocks:        45.191.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ef:dc:3b:82:bb:1a:77:1d:dc:bc:0d:43:94:b3:cf:68:b3:86:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F536C71A8200D1878CE43CF666EB2F58403A8F1
        Validity
            Not Before: Jan  6 20:46:18 2026 GMT
            Not After : Jan  5 20:51:18 2027 GMT
        Subject: CN=8AEFBBB68693C67A40DD65AC5CECB4514B1CE5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:33:fe:32:35:c7:ca:2c:82:e4:74:27:ae:
                    8b:7d:bf:e5:63:79:7f:18:42:76:ac:cf:5d:f3:38:
                    c7:46:fb:71:6b:2d:64:ce:85:22:92:0e:1f:47:91:
                    4c:f0:12:60:70:e6:a6:6a:c8:98:70:f9:a3:43:20:
                    e6:5d:10:38:bc:70:b1:af:a5:3e:52:01:db:8c:d8:
                    92:ce:51:fc:ab:3b:9b:6d:1f:96:76:f0:4d:00:77:
                    2d:95:33:97:80:76:6e:a7:ad:27:59:c3:6d:dc:b8:
                    f6:f5:db:cd:8b:eb:7d:95:0c:85:ad:50:97:fa:cd:
                    45:35:d1:21:df:3c:bd:13:19:13:85:77:37:95:72:
                    ee:e0:ef:09:79:ed:8e:5c:3b:62:97:5e:8f:06:c2:
                    fb:cc:85:d3:d4:e7:98:3b:13:a1:54:fa:62:90:62:
                    e0:f8:27:45:8b:7d:ea:59:0c:d5:a5:54:a3:d4:3c:
                    f1:9e:35:32:c0:ad:d2:aa:9b:f6:10:b7:3a:12:2b:
                    24:94:15:09:ea:b1:ee:c8:f0:2f:92:69:c0:75:c1:
                    0c:be:29:cb:bb:10:ab:81:09:b1:c0:06:40:74:09:
                    02:dc:47:50:ba:ab:65:b9:9d:7d:37:0b:f6:0d:5e:
                    de:de:9c:61:e9:86:48:25:ab:94:f9:55:df:d4:a5:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EF:BB:B6:86:93:C6:7A:40:DD:65:AC:5C:EC:B4:51:4B:1C:E5:FB
            X509v3 Authority Key Identifier:
                keyid:6F:53:6C:71:A8:20:0D:18:78:CE:43:CF:66:6E:B2:F5:84:03:A8:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F536C71A8200D1878CE43CF666EB2F58403A8F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE2CADB6530F8AC31EF0950E024CB75A3AB0B40442D67E171E5D718DCAA7112A/0/34352e3139312e302e302f32322d3234203d3e203231363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:d7:6c:d1:02:56:f8:37:e4:46:45:f5:54:18:53:67:23:
         6e:f8:8a:49:8f:5a:ae:27:fb:1f:9c:6b:e7:22:b8:df:40:6f:
         8f:b7:83:6c:c2:d3:11:6c:41:fb:fe:84:fa:a2:47:28:58:92:
         8c:73:4b:27:ab:2f:35:d1:53:21:c2:5f:8c:91:0d:05:9a:2d:
         4b:13:8a:45:da:63:18:73:db:ac:42:64:01:da:ad:6f:75:29:
         f4:84:36:1a:f2:6b:7e:5f:f1:73:4d:8f:d2:1f:b2:54:3f:07:
         44:f2:c7:c7:73:8f:3c:f2:87:cc:c0:56:a2:08:7a:4f:4f:85:
         70:e7:a5:5a:52:82:d7:9b:4a:e3:4f:bf:86:1a:9d:98:3a:e1:
         b1:f4:28:77:c5:99:5d:b4:c0:f9:e9:18:dc:97:59:1d:88:53:
         58:00:1a:7e:0c:96:8c:a6:0d:01:76:56:32:6a:ac:fe:48:26:
         3b:f2:c7:ce:47:f0:ad:02:c3:01:f2:71:b3:29:75:23:7c:7d:
         03:d9:e6:6c:9f:57:d9:58:c0:8e:b0:42:a4:6d:b3:01:19:61:
         37:81:be:6a:43:09:7c:d2:ae:6a:7f:b4:5b:f0:37:c5:c0:6b:
         11:9f:92:44:d3:0d:84:5a:bd:ad:7b:b4:5a:0e:63:e9:3c:40:
         39:c6:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:55:38 2026 by rpki-client