This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
File:                     34352e372e3234302e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          8hrfTJ9YJObneQGN1BqWXJRKTJ/pSbUCeDuMb7q+ww8=
Subject key identifier:   46:83:9D:A0:E4:D4:1F:30:15:0A:87:02:8E:DE:93:76:D2:81:C8:8B
Certificate issuer:       /CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
Certificate serial:       1013E16837F881040C295A5E805FC70331A144DC
Authority key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 06 Jan 2026 19:18:22 +0000
ROA not before:           Tue 06 Jan 2026 19:13:22 +0000
ROA not after:            Tue 05 Jan 2027 19:18:22 +0000
asID:                     52444
IP address blocks:        45.7.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 22:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:13:e1:68:37:f8:81:04:0c:29:5a:5e:80:5f:c7:03:31:a1:44:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
        Validity
            Not Before: Jan  6 19:13:22 2026 GMT
            Not After : Jan  5 19:18:22 2027 GMT
        Subject: CN=46839DA0E4D41F30150A87028EDE9376D281C88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:b4:b5:6a:75:80:60:bb:cf:16:e0:19:6b:
                    f7:6a:3f:dd:95:1f:d4:f6:d1:46:33:b8:9a:a8:8b:
                    a2:d0:0e:de:b6:1f:67:29:f0:83:b3:4b:ed:2e:aa:
                    c6:23:cc:64:6e:f1:86:8c:3d:50:a1:87:c9:90:46:
                    e7:b9:65:37:f0:6c:01:49:87:f4:14:f0:0a:6b:b7:
                    00:d8:52:5b:00:8d:2e:2a:64:7f:d5:d5:48:07:14:
                    31:95:38:a6:30:34:0b:0d:12:f3:59:fd:2f:b6:39:
                    11:68:e9:4f:4c:8e:33:5d:6c:fe:a0:1c:82:9e:6c:
                    c1:aa:92:40:da:e6:58:68:ef:25:38:32:ce:ad:a6:
                    d4:b4:13:51:49:a2:da:eb:6e:2d:64:78:ba:48:c5:
                    16:3a:06:21:33:49:01:81:fc:c6:ea:4a:54:e3:b6:
                    77:ef:22:b6:a2:96:9d:f1:c0:17:3f:86:41:8e:36:
                    cb:8b:bd:5b:99:91:7a:f0:ed:b0:cc:7c:cd:44:f9:
                    7e:30:85:c6:5c:17:17:69:12:44:6a:36:0b:0f:8a:
                    01:61:24:00:09:4f:9c:a7:43:4a:13:5e:9b:1f:3a:
                    2c:2a:25:2c:9c:7c:84:d5:6c:6d:27:dc:1d:04:09:
                    d7:26:bf:21:e3:88:5b:a0:43:1f:ae:6b:58:88:30:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:83:9D:A0:E4:D4:1F:30:15:0A:87:02:8E:DE:93:76:D2:81:C8:8B
            X509v3 Authority Key Identifier:
                keyid:EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:21:59:ce:8b:8f:24:4b:08:86:a2:74:5d:e1:95:1a:fb:c3:
         b6:26:f5:80:dd:ab:39:f9:2b:a5:bf:33:13:e5:17:92:52:e3:
         c9:10:cb:db:4b:fe:6a:9f:26:18:63:21:de:d9:7a:17:f9:67:
         29:75:2d:46:60:37:3b:86:e1:9f:d4:5d:b4:4d:c8:93:aa:a9:
         9e:af:3c:9f:96:9b:61:6a:85:89:5e:8b:81:1b:a9:63:ce:f8:
         67:7f:f6:84:02:d1:91:9f:1f:39:33:fd:62:db:15:14:b3:d3:
         8a:44:0e:46:fc:20:4a:d0:26:8b:96:1a:1b:44:2f:52:63:1f:
         d5:31:d6:f0:a2:84:05:92:66:18:ea:b6:0b:8d:f2:ee:e1:ef:
         a5:22:78:90:fe:0c:70:d0:96:c0:93:c9:c7:c5:f4:ec:de:73:
         ef:10:18:31:d0:19:a2:40:30:10:24:6a:87:2d:6c:ee:0e:c3:
         2d:78:94:c6:fa:b3:6c:9e:86:7f:7d:63:8a:6e:2f:3e:24:fe:
         d5:2c:e4:19:da:4b:0b:54:59:47:80:4f:c9:d1:aa:d0:2f:98:
         1c:1f:54:01:80:81:85:ed:7b:72:eb:02:8d:0b:71:e6:7a:6b:
         58:b8:79:48:4a:31:30:e4:d3:32:04:70:5e:45:fc:e7:73:47:
         e8:ab:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 08:31:31 2026 by rpki-client