This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130322e302f32342d3234203d3e20323637383333.roa
File:                     34352e3137352e3130322e302f32342d3234203d3e20323637383333.roa (raw, json)
Hash identifier:          p5ZX9oM760O+12+BO5iVi2WTv6Yi8ZfbRAf1rtNqTs4=
Subject key identifier:   3E:00:6F:BF:D1:26:B4:59:17:31:3E:79:47:11:E6:61:05:26:D3:E7
Certificate issuer:       /CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
Certificate serial:       111988C8A747F0B30CF054C67F3382E0FAECD80F
Authority key identifier: 55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130322e302f32342d3234203d3e20323637383333.roa
Signing time:             Tue 06 Jan 2026 19:12:18 +0000
ROA not before:           Tue 06 Jan 2026 19:07:18 +0000
ROA not after:            Tue 05 Jan 2027 19:12:18 +0000
asID:                     267833
IP address blocks:        45.175.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 08:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:19:88:c8:a7:47:f0:b3:0c:f0:54:c6:7f:33:82:e0:fa:ec:d8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
        Validity
            Not Before: Jan  6 19:07:18 2026 GMT
            Not After : Jan  5 19:12:18 2027 GMT
        Subject: CN=3E006FBFD126B45917313E794711E6610526D3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:55:65:a1:2c:88:16:2c:d8:ed:9d:21:c8:
                    34:c5:b3:9b:c8:30:44:4c:e3:8c:ba:fb:03:89:ec:
                    94:1d:4b:30:f4:8c:dc:c2:6d:87:9f:a0:e1:bf:ba:
                    56:73:ee:8f:2e:0c:ae:1c:6a:67:f4:70:e8:8b:5b:
                    bb:2d:4b:8a:4f:53:4c:60:d0:e3:c5:35:d5:95:53:
                    c6:3d:99:ae:04:55:4b:63:85:14:83:97:58:ec:b6:
                    97:ff:b4:5d:71:0d:a4:3a:1e:69:08:fc:f7:a8:e6:
                    51:47:83:cd:11:0a:a7:b5:37:10:4c:8b:a6:d0:15:
                    c7:26:c3:76:62:2d:c1:13:f4:92:fc:fa:0c:0d:b9:
                    a8:cd:38:60:dd:f7:44:aa:7d:09:13:11:58:67:ba:
                    db:dc:fe:92:94:e6:eb:72:b6:73:a3:1f:33:5b:95:
                    72:c6:01:f0:47:bc:8d:07:9f:d8:18:bb:8f:af:ad:
                    ce:a0:62:c1:c6:5d:31:18:4d:fe:08:fd:97:94:a2:
                    ca:f8:80:1a:d2:1e:65:35:19:e8:92:d3:e8:c9:c5:
                    af:75:7d:f4:c3:24:e8:71:ef:14:26:de:44:54:6c:
                    5f:15:5b:70:ae:9b:e6:d8:82:0d:6c:73:0b:7a:ad:
                    d4:3c:ea:8f:93:12:b8:6f:ea:a6:65:51:4e:22:ff:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:6F:BF:D1:26:B4:59:17:31:3E:79:47:11:E6:61:05:26:D3:E7
            X509v3 Authority Key Identifier:
                keyid:55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130322e302f32342d3234203d3e20323637383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e4:7a:bf:57:8d:90:59:39:15:31:4e:2f:a4:eb:99:d3:ef:
         ce:fa:12:a0:65:cb:4e:3b:c9:50:63:a2:67:5c:a9:77:3c:eb:
         93:bb:6b:e8:20:cd:7e:62:b7:00:f5:06:d8:fb:af:81:3b:b9:
         71:9c:f7:66:56:a9:4c:56:7d:4b:e6:b8:c8:86:87:24:28:3b:
         62:ef:51:34:59:52:97:da:37:68:c7:72:88:c6:2c:df:81:61:
         b0:c3:31:3b:9c:95:ba:91:1a:dc:c7:a3:a5:58:93:f0:12:0b:
         fc:c8:78:a1:32:d9:67:53:f0:72:57:0f:73:74:12:25:e6:b5:
         dc:08:18:5f:8d:ca:f0:73:97:38:57:4d:52:c7:b2:94:39:47:
         cf:ec:8a:f6:cf:bb:2f:99:a5:ff:76:20:ec:bb:a0:e5:0f:18:
         66:1b:f8:17:4b:98:9f:f9:bb:e3:a5:5f:4d:c7:5e:b3:57:d4:
         3b:14:9a:0a:3a:8a:ff:e4:3b:f9:df:62:f1:da:53:e0:d1:ff:
         0d:b7:52:b7:7d:0d:a8:cb:ac:6f:58:8b:fd:60:df:69:db:05:
         b2:f5:05:5f:68:fb:97:b5:a9:ac:38:77:8b:04:3a:38:d3:5b:
         ed:b4:90:92:aa:13:9e:0f:12:a3:23:bb:c7:3a:3d:c2:87:88:
         9b:30:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:44 2026 by rpki-client