This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/34352e352e3134382e302f32322d3234203d3e20323635373032.roa
File:                     34352e352e3134382e302f32322d3234203d3e20323635373032.roa (raw, json)
Hash identifier:          n1ujH7WCbNsLpUIhimAzdMHx04YE3E2J0Wu9yS5Se64=
Subject key identifier:   2F:D0:17:EF:06:18:1A:E6:3A:B4:EA:2A:48:E1:7F:0E:7C:59:34:77
Certificate issuer:       /CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
Certificate serial:       0DC5C45DA4DEFA135375EB1A7838E1DF45BEDFFC
Authority key identifier: 5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/34352e352e3134382e302f32322d3234203d3e20323635373032.roa
Signing time:             Tue 06 Jan 2026 19:36:37 +0000
ROA not before:           Tue 06 Jan 2026 19:31:37 +0000
ROA not after:            Tue 05 Jan 2027 19:36:37 +0000
asID:                     265702
IP address blocks:        45.5.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c5:c4:5d:a4:de:fa:13:53:75:eb:1a:78:38:e1:df:45:be:df:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7B05FE5B34A73FA971BA2BFE7E6D247019784B
        Validity
            Not Before: Jan  6 19:31:37 2026 GMT
            Not After : Jan  5 19:36:37 2027 GMT
        Subject: CN=2FD017EF06181AE63AB4EA2A48E17F0E7C593477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:45:00:a7:00:03:99:74:ca:94:08:a2:63:
                    e7:e1:5d:f6:99:fc:7f:d9:a3:f8:95:84:76:10:26:
                    73:30:72:69:ac:ed:7d:3c:ae:ef:d8:d1:f5:2e:7b:
                    c0:b6:55:7f:50:41:98:c1:75:d8:9e:27:4a:ba:6e:
                    13:43:e1:7e:48:7e:0d:69:be:be:b7:02:51:b6:6a:
                    31:f3:53:a1:2d:f6:33:ae:dd:ee:9a:11:a7:24:50:
                    0e:18:8f:9d:7f:99:8c:96:2c:4b:ce:0b:86:a1:f4:
                    2a:26:fa:d9:ee:c2:64:06:a9:00:3c:c0:30:33:21:
                    d4:44:0c:5d:7c:9a:c2:07:e5:d4:5b:55:85:87:ee:
                    3e:64:83:79:5a:9b:3c:f0:05:3f:f7:ab:6e:d4:c2:
                    76:97:b0:5b:eb:10:94:bf:a7:eb:79:6a:f8:3b:e6:
                    4b:2d:da:3f:8f:fe:71:1e:d8:85:01:fb:0f:81:7a:
                    08:aa:fb:cd:95:ac:14:f2:aa:d4:63:59:50:30:98:
                    79:dc:67:67:14:3e:6b:77:ba:8c:24:5e:ef:f7:4e:
                    29:17:54:23:bc:0c:7a:10:c8:d6:79:17:c5:41:2f:
                    0d:d9:32:92:2d:40:cc:ef:7d:52:bf:c1:85:02:e4:
                    f6:c0:66:44:82:71:25:47:c6:7b:c2:f3:cc:58:f2:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D0:17:EF:06:18:1A:E6:3A:B4:EA:2A:48:E1:7F:0E:7C:59:34:77
            X509v3 Authority Key Identifier:
                keyid:5B:7B:05:FE:5B:34:A7:3F:A9:71:BA:2B:FE:7E:6D:24:70:19:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B7B05FE5B34A73FA971BA2BFE7E6D247019784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C7A9AA3F02FFF6B22D4B70A499C720A46B6717BB87139CAA8EFFCD3E2F024D/0/34352e352e3134382e302f32322d3234203d3e20323635373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:46:00:5c:0b:c9:56:5c:29:e1:a9:73:25:87:9d:92:b5:9a:
         63:95:6e:e2:5b:f9:c1:46:b5:e3:e6:e2:9b:2e:4d:43:c7:15:
         39:8e:d8:25:8c:cd:32:d6:eb:c5:cb:2a:7f:1d:e2:d1:4e:8a:
         42:90:7f:53:98:af:15:67:b7:66:87:7e:5e:c5:4f:c9:3e:85:
         05:46:e9:a3:f2:ce:f8:ae:fb:f0:b3:2f:6f:6a:f1:ed:8c:07:
         97:45:81:59:93:93:c3:65:9e:7e:85:2d:af:2c:b2:e4:fe:cd:
         2e:1b:40:5c:29:b2:91:b6:6a:24:22:66:3a:d1:ab:71:df:0b:
         59:1c:22:eb:5f:d6:16:91:fe:fb:2b:86:11:6a:73:86:e7:80:
         38:d9:5a:3f:1d:9f:01:e7:13:ce:a4:6f:23:a3:7e:fd:c0:21:
         31:d0:b3:3b:22:d4:98:94:a3:56:74:14:b3:cc:3a:ef:0a:6a:
         2d:8f:84:ee:f2:85:74:a9:73:25:68:d7:94:75:40:4b:ab:2a:
         7c:55:e5:70:97:d5:60:0b:1f:06:91:75:8c:9e:48:30:65:ab:
         7b:8c:ac:42:f7:d0:19:4a:5e:28:6e:33:83:d8:d8:0d:2b:d2:
         9b:fb:e3:80:b6:21:b4:e4:89:ff:40:9b:4b:80:96:90:bd:53:
         75:3a:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:14:14 2026 by rpki-client