This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/34352e3138372e3133322e302f32322d3234203d3e20323639383139.roa
File:                     34352e3138372e3133322e302f32322d3234203d3e20323639383139.roa (raw, json)
Hash identifier:          NgrhKjjtVCYjh5BW6nJf0j2eUQPwLDzpLgOVNcFWNcM=
Subject key identifier:   B8:50:89:B9:3D:44:27:ED:85:F8:30:30:C9:C7:D8:4C:18:F2:5C:B0
Certificate issuer:       /CN=F98B92454B43512A3C761A3C81A5F9B6EADD6F5D
Certificate serial:       4C241C88FC9250E51A8740F5CEF99B6AFD26D166
Authority key identifier: F9:8B:92:45:4B:43:51:2A:3C:76:1A:3C:81:A5:F9:B6:EA:DD:6F:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/34352e3138372e3133322e302f32322d3234203d3e20323639383139.roa
Signing time:             Tue 06 Jan 2026 19:01:43 +0000
ROA not before:           Tue 06 Jan 2026 18:56:43 +0000
ROA not after:            Tue 05 Jan 2027 19:01:43 +0000
asID:                     269819
IP address blocks:        45.187.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 21:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:24:1c:88:fc:92:50:e5:1a:87:40:f5:ce:f9:9b:6a:fd:26:d1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F98B92454B43512A3C761A3C81A5F9B6EADD6F5D
        Validity
            Not Before: Jan  6 18:56:43 2026 GMT
            Not After : Jan  5 19:01:43 2027 GMT
        Subject: CN=B85089B93D4427ED85F83030C9C7D84C18F25CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:78:40:a0:f7:8c:ae:52:cf:0d:1e:33:ad:
                    8b:9b:a3:ad:c8:21:04:00:28:f6:c4:e5:3b:2b:4e:
                    c6:a8:9c:cf:35:0a:0d:ab:47:8f:48:c5:9a:15:1a:
                    38:ba:87:04:13:ab:65:eb:10:21:03:67:0b:27:fe:
                    91:ea:4b:9d:17:24:dd:71:76:17:0f:15:0d:ec:da:
                    38:72:7c:d8:64:c7:11:65:6f:3e:82:d3:20:5c:0c:
                    30:e7:56:3f:7c:b5:1d:dd:5d:80:7c:76:09:d9:3a:
                    d3:23:c1:8f:78:df:73:b5:a6:d8:2b:6d:c0:6f:50:
                    44:ed:45:87:34:25:26:40:5e:19:c8:e8:ec:8f:3c:
                    76:31:03:3b:f6:2e:0d:b1:e3:5c:ac:cc:78:29:c8:
                    6b:7d:3f:81:7e:07:6f:76:bf:4c:74:4b:da:f8:12:
                    28:d7:67:cf:ad:06:72:69:4d:52:58:62:37:ad:11:
                    ca:f7:38:51:86:92:1c:80:89:1d:73:ea:ba:55:7a:
                    f8:87:83:6f:e8:c2:e6:b4:76:dc:ad:71:b4:68:c1:
                    07:77:a5:47:5b:16:0d:0a:c5:8a:a8:a1:d9:9f:a2:
                    8b:ef:91:ca:60:7b:ec:62:43:53:1f:c7:68:f6:70:
                    42:ce:5b:9d:28:2a:c5:2e:45:21:3e:a4:ec:8a:4e:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:89:B9:3D:44:27:ED:85:F8:30:30:C9:C7:D8:4C:18:F2:5C:B0
            X509v3 Authority Key Identifier:
                keyid:F9:8B:92:45:4B:43:51:2A:3C:76:1A:3C:81:A5:F9:B6:EA:DD:6F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F98B92454B43512A3C761A3C81A5F9B6EADD6F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71A2A28CD4069A1E713611A097350760081D2E81DB649EC9853A5B4DD5A04565/0/34352e3138372e3133322e302f32322d3234203d3e20323639383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:b9:a8:d1:24:1c:22:ed:51:fe:ee:58:78:69:26:05:15:
         e4:42:7d:64:64:d1:c8:ea:bf:f7:36:3d:e2:63:a8:a4:d7:87:
         9f:81:2a:e0:43:fd:f2:5a:d6:3e:ef:6c:97:e6:89:fc:2c:94:
         f5:16:b3:ee:09:07:3d:f2:b2:f9:e0:bb:86:0f:b9:f8:8f:39:
         12:9c:be:9a:e4:c1:f2:df:e5:dd:3b:58:8a:dc:3a:4d:8b:37:
         f4:a6:60:7f:4a:c9:49:32:2c:c5:07:fa:78:ea:95:c6:a5:5e:
         bb:06:91:af:32:8b:af:e8:c3:ff:24:a3:04:a9:aa:e6:81:6c:
         df:12:6c:37:1e:57:58:62:b6:6e:fa:b6:36:70:96:45:1a:c3:
         44:c0:06:1b:bd:32:47:ba:bc:f8:09:95:cd:34:94:f5:53:f7:
         18:57:e3:4f:43:85:af:bd:30:d0:a9:bf:2f:2f:7d:97:15:35:
         17:46:43:e8:7e:40:3c:2d:c5:2f:b3:15:64:88:83:15:d6:08:
         5f:a5:1d:47:b7:f0:e1:c7:90:f6:8b:03:37:87:ac:8b:da:00:
         89:f2:eb:7b:88:c2:5d:9f:a2:2b:22:b8:c0:a8:9b:c4:ed:78:
         fb:80:24:08:70:1d:25:6e:d7:26:a4:ec:83:65:59:9f:f5:7e:
         b6:4b:ef:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:38 2026 by rpki-client