This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/34352e3136332e33312e302f32342d3234203d3e2033333536.roa
File:                     34352e3136332e33312e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          096MS6AZtViQchzhDkTYfXfyPW/v7CPr3/Yaasly7hc=
Subject key identifier:   F8:83:06:2A:E0:23:0C:50:5B:0B:B2:96:E9:FB:0F:B4:55:79:AF:6C
Certificate issuer:       /CN=1D32D00C2D1039ACFF94E62E5DAD943213407952
Certificate serial:       6A4B01F90AE3E2965826B5AFBA58FD63739DB1FF
Authority key identifier: 1D:32:D0:0C:2D:10:39:AC:FF:94:E6:2E:5D:AD:94:32:13:40:79:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/34352e3136332e33312e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 06 Jan 2026 19:34:06 +0000
ROA not before:           Tue 06 Jan 2026 19:29:06 +0000
ROA not after:            Tue 05 Jan 2027 19:34:06 +0000
asID:                     3356
IP address blocks:        45.163.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 06:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:01:f9:0a:e3:e2:96:58:26:b5:af:ba:58:fd:63:73:9d:b1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D32D00C2D1039ACFF94E62E5DAD943213407952
        Validity
            Not Before: Jan  6 19:29:06 2026 GMT
            Not After : Jan  5 19:34:06 2027 GMT
        Subject: CN=F883062AE0230C505B0BB296E9FB0FB45579AF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:a7:2e:17:24:cd:9b:d1:f5:2e:1e:fb:e5:
                    ca:5f:d9:24:ef:d3:5d:9e:48:c5:4a:0d:10:97:50:
                    7c:a9:9f:05:9a:f3:c2:61:27:08:55:23:55:9a:df:
                    69:a3:4d:a1:33:4f:3e:49:6e:26:78:b8:5f:ab:96:
                    ad:e8:c8:98:63:7c:bd:b0:3d:9d:a1:bc:9b:99:6b:
                    29:43:7b:5a:ca:34:36:e2:3d:29:40:6f:64:56:7b:
                    4c:87:b1:43:c6:bd:e8:73:bd:43:4e:9c:4e:51:d1:
                    4f:2d:fa:a8:00:b6:2f:12:6a:b8:6e:f7:ac:eb:a6:
                    c0:9c:a4:93:7b:f9:01:cc:69:c3:93:f1:dd:a5:03:
                    c2:bd:9f:d7:c3:06:1a:42:4c:52:12:99:01:52:51:
                    6c:0b:fe:1d:a3:47:77:6a:70:f1:13:02:44:77:40:
                    ca:ed:40:6a:47:7b:f4:0e:c7:d5:ab:4a:bd:de:04:
                    28:8c:3b:c5:18:ef:d4:19:2f:70:16:ef:53:9f:51:
                    44:4f:c1:c2:af:3f:74:49:da:82:fe:33:3d:f6:58:
                    9b:0f:5a:7a:71:34:96:54:6e:51:6b:01:e4:b8:8a:
                    22:22:e5:0d:6c:af:df:41:3a:42:f1:13:5f:41:25:
                    7a:ef:3f:c7:10:4c:a9:d3:3f:6e:e7:9c:2b:39:85:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:06:2A:E0:23:0C:50:5B:0B:B2:96:E9:FB:0F:B4:55:79:AF:6C
            X509v3 Authority Key Identifier:
                keyid:1D:32:D0:0C:2D:10:39:AC:FF:94:E6:2E:5D:AD:94:32:13:40:79:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D32D00C2D1039ACFF94E62E5DAD943213407952.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20C52FD9C8338B92EFC8C72DE9E312056149538CA91A3CE8B522AA24F8B3E089/0/34352e3136332e33312e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:13:bf:c1:10:ad:aa:a6:73:27:5e:0f:7d:d3:48:92:c5:99:
         f5:19:f1:1e:a4:bc:d0:a6:24:28:a3:1c:64:2b:bf:34:09:61:
         c6:64:66:38:ff:80:6d:2a:b8:10:fb:43:09:47:9a:25:0f:7a:
         2d:ec:eb:fd:82:b7:8e:8b:bd:b6:3c:b2:d4:bc:f5:ca:4c:eb:
         56:00:84:c4:7e:0c:bd:5f:ac:78:2e:32:8f:17:f8:ea:b9:83:
         2f:6c:f6:82:44:3b:9d:db:4d:32:79:e9:53:9a:32:4b:d2:d4:
         0f:b0:66:4c:25:57:61:32:11:8e:0b:ed:3d:12:2a:29:04:90:
         21:98:d3:53:18:7c:1e:a3:f8:00:ea:c6:1b:9d:ca:42:a2:ac:
         42:d1:13:8b:51:d7:fe:63:e4:e6:fb:c7:07:ca:c0:72:2f:31:
         ae:1f:d2:b2:22:85:d6:b3:82:81:95:a0:e5:09:b7:10:cf:4e:
         74:59:b8:93:2f:8d:ab:85:6d:f8:46:bd:aa:98:29:af:24:74:
         7e:9a:28:84:b0:d6:2b:34:17:1c:6f:09:c3:35:8b:74:17:3f:
         74:4c:5c:c1:82:08:90:1e:e2:59:65:bd:ed:55:85:a6:7e:bb:
         35:41:e2:9f:9e:24:08:a2:c9:1f:e0:c8:72:c6:97:05:51:90:
         02:f0:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:33:35 2026 by rpki-client