This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3138382e302f32332d3234203d3e20323639393134.roa
File:                     34352e3139302e3138382e302f32332d3234203d3e20323639393134.roa (raw, json)
Hash identifier:          5KXTDfiOfA6JuN0O4YVl8IzMf5QhadHtM8cWF4DH4ng=
Subject key identifier:   51:35:E8:34:A1:2D:D0:1B:B6:22:C7:B1:56:BF:55:10:04:8B:9F:F0
Certificate issuer:       /CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
Certificate serial:       0F6442EEFFDB05A812F6915B2FDBEBFCC9D59C29
Authority key identifier: 66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3138382e302f32332d3234203d3e20323639393134.roa
Signing time:             Tue 06 Jan 2026 19:47:53 +0000
ROA not before:           Tue 06 Jan 2026 19:42:53 +0000
ROA not after:            Tue 05 Jan 2027 19:47:53 +0000
asID:                     269914
IP address blocks:        45.190.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 22:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:64:42:ee:ff:db:05:a8:12:f6:91:5b:2f:db:eb:fc:c9:d5:9c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
        Validity
            Not Before: Jan  6 19:42:53 2026 GMT
            Not After : Jan  5 19:47:53 2027 GMT
        Subject: CN=5135E834A12DD01BB622C7B156BF5510048B9FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:37:47:4f:aa:38:2b:37:9a:a4:38:9e:22:
                    b1:24:e3:9c:be:5d:58:30:5b:af:cc:92:0b:87:10:
                    90:89:3d:c2:b3:51:60:d2:03:4d:cb:e8:fc:55:b3:
                    cc:77:00:85:a3:c3:cf:52:f5:33:56:9a:35:79:15:
                    4d:e8:45:45:59:35:eb:06:90:14:19:d3:4d:6d:7c:
                    ab:5d:a8:4f:a0:c7:4d:43:8c:df:3f:cd:b8:dc:aa:
                    fe:38:c8:af:53:f4:a3:7b:8d:93:89:23:82:ff:46:
                    81:00:87:50:10:aa:a0:3e:a0:c4:98:b4:65:74:b3:
                    83:e0:4f:60:4b:69:f4:dd:7d:1a:a0:a2:89:5c:bf:
                    96:7b:a2:4c:4d:8e:1a:0e:18:a9:1e:05:c8:59:55:
                    b3:6c:7f:14:84:de:04:3c:1e:9a:0d:fd:f0:40:66:
                    f7:cd:d5:66:61:58:90:f8:bf:71:b0:46:fa:bb:be:
                    18:10:48:7c:cc:bc:19:41:b2:60:dc:78:6a:f5:2d:
                    4f:37:16:05:87:63:b7:99:db:07:40:a2:fd:b9:e4:
                    54:a0:f5:eb:2f:cd:aa:0c:98:19:97:5c:47:97:b9:
                    1c:ff:a4:1e:d4:a0:81:35:bd:68:ec:d5:90:b7:ff:
                    cf:d8:a2:f2:84:76:3f:26:05:aa:a0:e9:ca:db:30:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:E8:34:A1:2D:D0:1B:B6:22:C7:B1:56:BF:55:10:04:8B:9F:F0
            X509v3 Authority Key Identifier:
                keyid:66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3138382e302f32332d3234203d3e20323639393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:4d:83:11:28:93:60:1f:ee:e5:59:cc:90:0e:34:92:cc:a2:
         ba:9a:87:0b:a1:53:26:85:9c:a2:69:f2:c7:cd:fd:5b:70:e0:
         29:6c:b6:46:e1:73:ed:fa:69:9b:66:a5:25:06:cf:8a:d6:5f:
         38:2c:8f:a1:ab:19:2e:a9:8e:61:70:c5:79:0c:e1:e2:f8:6d:
         5d:08:dd:62:86:e3:72:63:84:68:47:f1:d4:27:3b:15:f1:37:
         14:f8:e5:d2:c6:0d:8e:af:68:73:08:b7:ca:ff:ad:ab:80:c8:
         fb:c7:67:a8:df:36:c6:e9:6f:66:44:05:73:17:f8:58:ab:c6:
         35:72:ff:37:22:9e:e5:26:68:41:54:8a:6a:cc:24:cc:ac:62:
         d0:81:f1:4f:9b:bd:bf:08:bd:ad:35:6b:cb:8c:b8:75:15:1e:
         fe:14:1d:65:6d:08:f2:a3:0b:cd:e4:9b:55:63:28:1b:65:0a:
         f7:18:e0:fe:ca:7f:27:59:bf:8f:c8:dd:51:8c:4e:99:1d:00:
         65:6b:4b:00:65:6d:33:e9:8f:6a:05:3d:9a:59:ef:41:cb:41:
         5d:a8:00:29:e1:a6:2f:65:db:85:93:a2:31:fa:f9:93:2e:0e:
         f3:80:4f:93:89:32:5a:37:ea:73:73:76:d1:b8:9d:be:28:7d:
         ff:ca:65:e8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD2RC7v/bBagS9pFbL9vr/MnVnCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGRkNFODkyQTQ3MDQwRjJEQUI3RDREMUEwQjFCMEIz
QzA3QjY5ODAeFw0yNjAxMDYxOTQyNTNaFw0yNzAxMDUxOTQ3NTNaMDMxMTAvBgNV
BAMTKDUxMzVFODM0QTEyREQwMUJCNjIyQzdCMTU2QkY1NTEwMDQ4QjlGRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDTdHT6o4KzeapDieIrEk45y+
XVgwW6/MkguHEJCJPcKzUWDSA03L6PxVs8x3AIWjw89S9TNWmjV5FU3oRUVZNesG
kBQZ001tfKtdqE+gx01DjN8/zbjcqv44yK9T9KN7jZOJI4L/RoEAh1AQqqA+oMSY
tGV0s4PgT2BLafTdfRqgoolcv5Z7okxNjhoOGKkeBchZVbNsfxSE3gQ8HpoN/fBA
ZvfN1WZhWJD4v3GwRvq7vhgQSHzMvBlBsmDceGr1LU83FgWHY7eZ2wdAov255FSg
9esvzaoMmBmXXEeXuRz/pB7UoIE1vWjs1ZC3/8/YovKEdj8mBaqg6crbMJ65AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUUTXoNKEt0Bu2IsexVr9VEASLn/AwHwYDVR0j
BBgwFoAUZv/OiSpHBA8tq31NGgsbCzwHtpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yODc5Q0ZDMkY2NEY0RjkyQjBGODVEMDlEOTdFRkZFMzM2
Rjg4QUNGODU1MTE1QzAwRUNCQjJBQzRFOUIxQzlCLzAvNjZGRkNFODkyQTQ3MDQw
RjJEQUI3RDREMUEwQjFCMEIzQzA3QjY5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NkZGQ0U4OTJBNDcwNDBGMkRB
QjdENEQxQTBCMUIwQjNDMDdCNjk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjg3OUNGQzJGNjRGNEY5MkIwRjg1RDA5RDk3RUZGRTMzNkY4OEFDRjg1
NTExNUMwMEVDQkIyQUM0RTlCMUM5Qi8wLzM0MzUyZTMxMzkzMDJlMzEzODM4MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLb68
MA0GCSqGSIb3DQEBCwUAA4IBAQAGTYMRKJNgH+7lWcyQDjSSzKK6mocLoVMmhZyi
afLHzf1bcOApbLZG4XPt+mmbZqUlBs+K1l84LI+hqxkuqY5hcMV5DOHi+G1dCN1i
huNyY4RoR/HUJzsV8TcU+OXSxg2Or2hzCLfK/62rgMj7x2eo3zbG6W9mRAVzF/hY
q8Y1cv83Ip7lJmhBVIpqzCTMrGLQgfFPm72/CL2tNWvLjLh1FR7+FB1lbQjyowvN
5JtVYygbZQr3GOD+yn8nWb+PyN1RjE6ZHQBla0sAZW0z6Y9qBT2aWe9By0FdqAAp
4aYvZduFk6Ix+vmTLg7zgE+TiTJaN+pzc3bRuJ2+KH3/ymXo
-----END CERTIFICATE-----
Generated at Tue Jan 13 23:16:59 2026 by rpki-client