This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa
File:                     34352e3138302e36382e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          7rJUPcUR0LeXfur1fIC1yIb3jpd4tKrfKge8My/0q1M=
Subject key identifier:   6A:0B:C3:8E:9A:A7:86:46:57:33:B4:0B:44:F7:C0:6F:A6:20:33:AA
Certificate issuer:       /CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
Certificate serial:       58523B82CD0A14BBFD3D7AB1688C5C3C5127B319
Authority key identifier: 12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 06 Jan 2026 19:13:21 +0000
ROA not before:           Tue 06 Jan 2026 19:08:21 +0000
ROA not after:            Tue 05 Jan 2027 19:13:21 +0000
asID:                     61466
IP address blocks:        45.180.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:52:3b:82:cd:0a:14:bb:fd:3d:7a:b1:68:8c:5c:3c:51:27:b3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
        Validity
            Not Before: Jan  6 19:08:21 2026 GMT
            Not After : Jan  5 19:13:21 2027 GMT
        Subject: CN=6A0BC38E9AA786465733B40B44F7C06FA62033AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:b3:33:1a:f0:5e:c2:99:4e:72:84:e4:10:
                    da:66:d9:af:c1:c6:ce:93:cd:97:f8:89:5a:5b:45:
                    c0:00:c1:68:2a:0b:28:18:bd:8d:d3:e5:18:71:46:
                    d8:10:32:6d:07:c9:09:8e:98:41:da:3b:e9:fe:e1:
                    fd:2c:cc:a0:7e:3d:d2:d1:13:af:cb:c3:bb:01:54:
                    69:70:8d:97:ee:0a:6e:72:9a:6c:86:4a:23:33:29:
                    c7:67:f2:08:7c:41:d3:47:a7:90:a7:2e:0b:80:da:
                    9d:c8:1b:29:cf:85:79:83:0b:f4:f4:1b:67:92:ac:
                    aa:a5:f4:e0:f4:ea:8a:78:1d:35:75:2a:fd:08:d4:
                    64:3e:aa:78:c6:75:59:35:79:f1:d2:6e:c6:41:91:
                    d6:54:5d:c1:49:1e:26:82:79:e1:f7:64:7c:58:89:
                    0e:86:80:9c:da:48:b0:db:46:10:44:90:8f:db:95:
                    8b:7e:61:6a:33:a1:75:c4:f9:1a:00:32:82:cf:2c:
                    ff:04:ee:19:a0:0f:59:b2:cd:55:7b:eb:0b:da:bc:
                    ef:da:52:5b:d0:54:a5:1e:e1:14:a5:7b:55:60:81:
                    0e:e0:7d:c5:18:63:d2:d0:4c:42:71:a5:16:d0:b8:
                    ee:51:be:83:b0:68:33:d7:f1:cc:6e:28:56:85:28:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0B:C3:8E:9A:A7:86:46:57:33:B4:0B:44:F7:C0:6F:A6:20:33:AA
            X509v3 Authority Key Identifier:
                keyid:12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:e8:a5:76:28:16:f6:5b:e3:ae:fc:53:d8:f4:2f:b1:4e:
         37:fa:9d:10:e0:2c:0c:58:75:c3:93:47:83:63:77:7c:78:d7:
         63:1c:c0:10:71:b8:ed:8e:73:41:e6:ea:16:08:ee:96:cc:70:
         88:ee:96:b7:cf:48:19:ef:84:25:f1:6f:78:3a:a2:e8:20:a3:
         fb:b5:f7:75:dc:be:d0:37:0d:15:c1:b5:75:c4:41:d6:55:96:
         33:e5:f7:54:09:cd:17:c3:59:74:fb:3b:35:b7:6d:65:6e:9d:
         fd:a7:30:6c:af:19:6a:ec:67:47:1c:1c:90:b1:88:24:c7:f2:
         91:73:08:ca:3e:e3:a7:89:9c:f7:c7:d0:86:cc:71:78:d5:4d:
         06:6a:57:96:06:46:79:d2:c9:ac:08:e5:21:ff:27:b0:46:f4:
         25:31:56:8b:57:59:9f:ee:b8:66:a2:60:29:e3:1f:87:1c:bb:
         df:52:e3:bd:4b:a3:99:ee:d0:83:2f:a0:2b:f2:2d:9a:d4:37:
         54:9a:6f:b2:5c:66:80:fc:6d:22:63:cc:ee:fb:17:92:0c:72:
         c3:51:35:35:1c:d3:72:24:b1:30:c7:57:36:93:18:26:09:de:
         ee:98:5a:b6:b7:1c:78:14:13:85:b0:72:2a:fb:81:d2:71:9d:
         3c:b4:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:00:49 2026 by rpki-client