This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa
File:                     34352e3138342e38342e302f32322d3234203d3e20323639373933.roa (raw, json)
Hash identifier:          WltNzdbwWnU+/09A0GD0cen60XzA1efpU9qTwoCoNoo=
Subject key identifier:   6C:31:FC:19:D8:61:DF:1D:36:79:8B:E1:84:4F:91:3A:70:9F:B3:61
Certificate issuer:       /CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
Certificate serial:       6D8C011E5DEAD0AC46FEA7D09550BE441761A789
Authority key identifier: 09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa
Signing time:             Tue 06 Jan 2026 19:19:32 +0000
ROA not before:           Tue 06 Jan 2026 19:14:32 +0000
ROA not after:            Tue 05 Jan 2027 19:19:32 +0000
asID:                     269793
IP address blocks:        45.184.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 17:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:01:1e:5d:ea:d0:ac:46:fe:a7:d0:95:50:be:44:17:61:a7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
        Validity
            Not Before: Jan  6 19:14:32 2026 GMT
            Not After : Jan  5 19:19:32 2027 GMT
        Subject: CN=6C31FC19D861DF1D36798BE1844F913A709FB361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:04:b5:aa:d6:28:2d:01:59:b6:f1:ec:0f:7e:
                    c6:09:a4:8a:d6:5b:37:b8:5e:55:d8:d6:00:63:1b:
                    93:36:dd:f9:0f:31:54:44:72:6b:13:1e:df:92:c8:
                    99:93:bc:9c:eb:68:c0:31:cd:c4:98:4c:f7:82:96:
                    d3:22:ef:5b:6a:f6:cd:0b:aa:a2:e3:09:0f:92:b8:
                    70:6b:36:ff:d3:a5:fb:5a:3f:2c:d9:87:47:52:65:
                    4f:74:eb:f5:15:3f:23:b5:63:b3:5b:64:6c:27:49:
                    d9:cb:0e:81:48:d9:fa:aa:61:a0:76:35:40:57:5e:
                    0d:78:43:91:f7:5a:f6:c0:95:fc:7f:60:fc:df:a3:
                    3f:3e:5c:c8:41:db:09:ed:39:93:27:5f:19:ba:a4:
                    b6:1c:82:bd:75:26:bf:f5:15:c6:2e:00:9d:a1:2c:
                    b8:b3:8e:65:41:38:66:d6:ed:2b:ed:d2:88:49:b9:
                    11:af:17:32:d6:2b:cb:1e:89:d4:f7:95:0b:1b:0c:
                    f5:e9:15:38:7c:54:d9:c7:48:1b:31:a2:b5:77:c4:
                    4a:69:f4:15:66:ac:ef:24:8b:54:72:79:50:61:b3:
                    0b:2e:3a:a7:d7:3f:dc:be:4d:18:fd:5e:6d:98:d6:
                    1a:3b:34:09:5a:4a:6f:a2:50:0b:73:08:d9:2d:47:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:31:FC:19:D8:61:DF:1D:36:79:8B:E1:84:4F:91:3A:70:9F:B3:61
            X509v3 Authority Key Identifier:
                keyid:09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:f5:80:e9:17:94:f0:ff:5c:24:9b:58:64:8c:6b:ca:0a:
         04:d7:81:4a:02:6a:34:a8:80:74:cc:86:42:94:37:33:08:90:
         eb:b2:89:4a:da:0d:f8:da:c4:3a:ae:1b:36:4c:cc:c5:e6:d9:
         eb:45:af:0b:2d:a7:46:9e:a5:8c:6d:6e:47:22:56:0c:43:77:
         ff:a2:31:54:81:49:cd:9a:82:be:7b:83:77:75:fd:01:9a:53:
         4f:04:23:5b:dc:f2:d1:5d:0f:9f:64:08:98:82:c1:fe:d4:98:
         2d:b8:63:82:9d:1e:f8:da:fb:ce:c7:9f:53:3e:28:ce:8a:e1:
         c4:45:63:da:fb:43:b2:76:17:f2:29:a1:bb:47:c6:62:ad:80:
         9d:3b:b6:ac:a8:e0:cc:fc:67:01:b0:88:ee:67:98:d1:7e:e5:
         54:cc:be:2a:d4:e4:df:b2:1c:44:40:fd:da:cf:3b:3e:7a:5b:
         d1:3e:b8:aa:58:3a:87:94:0f:28:41:ff:d7:88:0a:e1:1d:01:
         ee:5e:99:fc:96:1d:42:11:39:4b:d6:71:7b:5b:1d:c8:f6:4a:
         af:07:26:e8:c8:7a:ed:9b:46:ed:0e:33:19:e4:59:87:62:d7:
         99:7c:dd:6b:67:06:6d:f3:20:6e:59:4c:56:e4:af:f2:60:3d:
         1b:ae:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:13 2026 by rpki-client