This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
File:                     34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa (raw, json)
Hash identifier:          luK7zxr4kDr6Qgl1hhMwO30br4ZKBlzjL59VWhBLLfw=
Subject key identifier:   F5:3F:04:0D:67:69:CD:79:BB:89:92:B4:59:98:03:B6:8E:BF:75:78
Certificate issuer:       /CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Certificate serial:       2A73398988B5465B78DC15949638E4A538D95914
Authority key identifier: AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
Signing time:             Tue 06 Jan 2026 20:51:04 +0000
ROA not before:           Tue 06 Jan 2026 20:46:04 +0000
ROA not after:            Tue 05 Jan 2027 20:51:04 +0000
asID:                     267894
IP address blocks:        45.176.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:73:39:89:88:b5:46:5b:78:dc:15:94:96:38:e4:a5:38:d9:59:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF5961CE89F38C3B4D8403327DF504436CE78585
        Validity
            Not Before: Jan  6 20:46:04 2026 GMT
            Not After : Jan  5 20:51:04 2027 GMT
        Subject: CN=F53F040D6769CD79BB8992B4599803B68EBF7578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:02:42:30:cd:de:e3:8b:d5:9a:ac:4a:58:
                    06:f7:66:c6:ab:4f:e7:b0:5a:65:9a:a2:18:f3:2f:
                    05:d3:6f:b7:11:00:bb:fc:63:75:5c:4c:d3:67:d8:
                    97:03:d0:e1:e7:ed:8c:4f:c2:19:0b:61:b9:3e:9f:
                    c5:5e:5c:84:c2:7e:45:02:2c:1e:98:b8:c3:62:a4:
                    77:ad:d0:7b:88:70:50:d4:7d:34:75:16:bf:d4:3f:
                    2c:c3:73:5a:13:10:99:0d:3a:3b:2c:ac:19:38:df:
                    ba:cb:1a:97:30:e3:0a:c4:3a:b5:28:58:a3:c7:ff:
                    75:a5:2c:1e:c9:9f:7e:44:78:49:2f:5b:dc:8f:36:
                    48:1e:75:c6:4d:4e:62:d7:a7:18:df:bd:56:bf:f6:
                    13:7a:e0:be:cb:e7:32:fe:6f:22:71:95:32:2f:00:
                    d8:b7:5e:49:02:4d:d6:5f:a4:5b:17:94:cc:98:30:
                    5b:d5:19:57:b3:72:6c:eb:fe:ce:17:56:5a:cd:ef:
                    66:04:bd:65:c8:65:43:8a:9c:83:20:ff:df:f6:ba:
                    e5:af:e9:6d:49:c6:53:95:8e:9e:ba:e0:fd:e4:b2:
                    f2:40:7a:d9:37:4a:1c:b5:0a:f1:d5:24:c2:7f:08:
                    2d:06:40:c9:12:7f:96:14:d9:f5:e8:c3:ee:a5:b0:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3F:04:0D:67:69:CD:79:BB:89:92:B4:59:98:03:B6:8E:BF:75:78
            X509v3 Authority Key Identifier:
                keyid:AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c8:4b:18:af:e9:75:a9:53:73:75:0d:76:0b:fd:e0:aa:7d:
         fb:31:73:1a:d9:c9:7e:5c:39:3c:01:26:5e:f6:f5:ae:4a:c2:
         85:70:a5:1e:3e:25:63:cc:8d:a5:17:2e:83:be:64:3c:d9:06:
         d9:67:66:e1:5a:fb:1a:39:c6:36:9e:04:eb:2f:3f:d0:68:89:
         62:63:21:24:cb:ed:be:9a:bf:c0:a6:54:54:c2:da:b7:e1:13:
         4f:5b:c8:3c:49:8a:21:bd:17:42:ce:08:78:97:16:01:fc:f6:
         3d:d5:99:c6:a2:3f:72:bc:f9:ee:74:67:bc:b8:b9:26:2e:78:
         99:4f:5b:9f:db:78:35:eb:07:d6:4a:1b:38:04:7c:f6:9e:e8:
         52:1d:c5:75:92:25:12:9a:e3:6e:85:10:66:a6:58:d6:86:07:
         24:9f:42:5e:70:12:d4:b5:41:ea:94:51:ab:8c:f4:cd:e5:f5:
         68:1a:94:46:63:03:c4:86:51:3c:b3:e9:f3:71:39:fa:81:c1:
         0c:22:0f:fc:77:65:19:8f:78:a3:16:54:4c:57:bc:03:c7:71:
         82:f3:3f:b7:a5:0d:01:35:f4:b7:46:46:fc:a5:0f:e0:0e:c3:
         e7:ba:74:f9:ad:61:f7:9e:af:58:58:22:e2:00:13:9f:da:41:
         a3:08:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:09:25 2026 by rpki-client