This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa
File:                     34352e3137382e36392e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          Dw+6mgkVPPREg2HPATliCsyeyyZJONCMndJCQdygUFg=
Subject key identifier:   69:87:13:13:5C:8C:6E:54:DD:A4:DE:49:29:A0:CA:EE:20:23:1B:90
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       797E92F882230F8403CB18E87C85B5626C2592DF
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 06 Jan 2026 19:28:12 +0000
ROA not before:           Tue 06 Jan 2026 19:23:12 +0000
ROA not after:            Tue 05 Jan 2027 19:28:12 +0000
asID:                     264758
IP address blocks:        45.178.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 19:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7e:92:f8:82:23:0f:84:03:cb:18:e8:7c:85:b5:62:6c:25:92:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Jan  6 19:23:12 2026 GMT
            Not After : Jan  5 19:28:12 2027 GMT
        Subject: CN=698713135C8C6E54DDA4DE4929A0CAEE20231B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:46:bf:df:4c:47:b1:b9:2d:ac:5f:df:f1:
                    e2:ac:3c:6d:77:9b:f9:0d:10:67:b8:65:6c:d0:ef:
                    a0:e7:b7:e4:48:5a:75:87:24:5b:2f:4d:55:0a:8e:
                    cb:65:5f:f1:d2:d6:36:ec:97:ce:7a:60:16:bf:88:
                    f0:19:9d:4c:c1:6f:64:b7:e9:e3:bf:65:47:55:d3:
                    6e:82:0e:f4:86:db:e6:1e:66:ff:3a:d3:c4:26:32:
                    69:10:42:d9:14:7d:61:5c:ea:65:cd:8f:4b:a1:26:
                    3e:e3:57:e4:c0:70:e9:11:d3:82:3e:96:0e:db:4e:
                    76:7e:c1:3b:5e:40:55:f6:64:cf:af:31:3e:d4:1e:
                    2e:19:aa:a0:ac:a4:ad:8e:7f:06:d4:cb:1e:40:68:
                    7f:34:b7:39:4b:4a:64:be:51:c4:83:d6:c4:44:04:
                    02:ea:4f:38:b3:5a:f2:37:b1:bf:ca:dc:17:71:fd:
                    59:fb:ed:56:81:e4:de:df:45:e4:61:41:e3:5a:db:
                    4b:a7:68:88:1e:bd:a3:b1:5a:78:77:72:5d:f8:42:
                    24:7e:4f:c2:a2:85:e1:fb:8f:49:44:63:80:68:95:
                    e9:5a:b1:ac:99:f8:42:02:39:9e:3c:72:7d:2a:10:
                    73:3e:e5:3f:bb:f6:6b:67:5b:c4:54:3e:7a:45:e3:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:13:13:5C:8C:6E:54:DD:A4:DE:49:29:A0:CA:EE:20:23:1B:90
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:d8:06:90:12:5f:0c:99:a8:1c:7e:34:06:20:0a:42:30:f1:
         61:36:6b:b7:da:a6:8b:0b:04:23:fd:a3:33:08:71:1d:2d:3e:
         54:86:47:53:ef:54:9a:1e:0e:41:f9:14:5c:fc:8f:07:58:53:
         a4:51:61:26:eb:38:10:2f:60:c7:4e:89:4a:72:e6:15:c5:d0:
         cb:c6:12:ea:8b:8b:b8:5c:c9:7c:68:7d:3e:e6:10:f1:68:0b:
         fb:5c:ea:1e:05:34:35:b2:6f:6a:17:43:4e:38:36:11:fe:ef:
         91:a5:4c:96:84:f8:53:eb:1a:de:7d:ce:7a:16:30:19:5a:43:
         5a:1f:17:72:8f:e8:af:53:0f:43:d4:2a:98:7c:0b:b7:cb:5c:
         6f:1f:49:6e:c5:84:ff:99:bd:9b:44:02:8b:29:0a:12:e9:87:
         3d:97:84:38:28:c3:43:87:9b:c2:4f:6c:96:27:d0:1a:cf:9b:
         10:6e:89:4d:3b:55:a3:c2:5f:20:75:ff:4b:b7:e4:32:3a:9f:
         20:2c:81:d1:84:f8:44:ef:4f:4a:bf:47:c3:d9:e8:a8:b3:a2:
         7c:d6:35:14:c9:db:29:60:4f:b8:bc:dd:50:94:d8:e9:da:0e:
         b2:a3:b0:27:52:9d:92:24:d8:36:9c:2d:45:86:b6:36:bb:4b:
         25:ec:8e:80
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeX6S+IIjD4QDyxjofIW1Ymwlkt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2MzYyNjFFNEIzNzBCRTFBQkFFN0U1QjUwOTIxRTAw
QTZENTk3OTAeFw0yNjAxMDYxOTIzMTJaFw0yNzAxMDUxOTI4MTJaMDMxMTAvBgNV
BAMTKDY5ODcxMzEzNUM4QzZFNTREREE0REU0OTI5QTBDQUVFMjAyMzFCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjUa/30xHsbktrF/f8eKsPG13
m/kNEGe4ZWzQ76Dnt+RIWnWHJFsvTVUKjstlX/HS1jbsl856YBa/iPAZnUzBb2S3
6eO/ZUdV026CDvSG2+YeZv8608QmMmkQQtkUfWFc6mXNj0uhJj7jV+TAcOkR04I+
lg7bTnZ+wTteQFX2ZM+vMT7UHi4ZqqCspK2OfwbUyx5AaH80tzlLSmS+UcSD1sRE
BALqTzizWvI3sb/K3Bdx/Vn77VaB5N7fReRhQeNa20unaIgevaOxWnh3cl34QiR+
T8KiheH7j0lEY4BolelasayZ+EICOZ48cn0qEHM+5T+79mtnW8RUPnpF40/TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaYcTE1yMblTdpN5JKaDK7iAjG5AwHwYDVR0j
BBgwFoAU22NiYeSzcL4auufltQkh4AptWXkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zREYxMDcwNTczMEExRTREOEM0OTNGMjc5MEI2RjY5RDZD
MTNBMTREMTExRTkxMjg0REY4OEZBQkFCRUEyRTgyLzAvREI2MzYyNjFFNEIzNzBC
RTFBQkFFN0U1QjUwOTIxRTAwQTZENTk3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjYzNjI2MUU0QjM3MEJFMUFC
QUU3RTVCNTA5MjFFMDBBNkQ1OTc5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0RGMTA3MDU3MzBBMUU0RDhDNDkzRjI3OTBCNkY2OUQ2QzEzQTE0RDEx
MUU5MTI4NERGODhGQUJBQkVBMkU4Mi8wLzM0MzUyZTMxMzczODJlMzYzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2yRTAN
BgkqhkiG9w0BAQsFAAOCAQEA19gGkBJfDJmoHH40BiAKQjDxYTZrt9qmiwsEI/2j
MwhxHS0+VIZHU+9Umh4OQfkUXPyPB1hTpFFhJus4EC9gx06JSnLmFcXQy8YS6ouL
uFzJfGh9PuYQ8WgL+1zqHgU0NbJvahdDTjg2Ef7vkaVMloT4U+sa3n3OehYwGVpD
Wh8Xco/or1MPQ9QqmHwLt8tcbx9JbsWE/5m9m0QCiykKEumHPZeEOCjDQ4ebwk9s
lifQGs+bEG6JTTtVo8JfIHX/S7fkMjqfICyB0YT4RO9PSr9Hw9noqLOifNY1FMnb
KWBPuLzdUJTY6doOsqOwJ1KdkiTYNpwtRYa2NrtLJeyOgA==
-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:19 2026 by rpki-client