This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa
File:                     34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          r7sP60rTUsGX7jE1fdrk0XCsKRcg1ZWh9F7AsY8AHNw=
Subject key identifier:   F6:86:AA:3D:74:70:69:9D:44:96:08:3F:9B:FE:99:E1:A6:35:80:98
Certificate issuer:       /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
Certificate serial:       174DF57B971285933594A79AC8C21396BB9E0FF6
Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa
Signing time:             Tue 06 Jan 2026 19:16:08 +0000
ROA not before:           Tue 06 Jan 2026 19:11:08 +0000
ROA not after:            Tue 05 Jan 2027 19:16:08 +0000
asID:                     267798
IP address blocks:        45.173.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 11:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4d:f5:7b:97:12:85:93:35:94:a7:9a:c8:c2:13:96:bb:9e:0f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
        Validity
            Not Before: Jan  6 19:11:08 2026 GMT
            Not After : Jan  5 19:16:08 2027 GMT
        Subject: CN=F686AA3D7470699D4496083F9BFE99E1A6358098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:08:c6:01:1b:1b:f4:df:4a:2b:2c:80:99:
                    9a:41:ee:39:97:c3:8e:8d:f8:73:3b:dd:63:68:92:
                    4a:e4:0b:f3:43:44:50:22:d7:c0:49:b2:0d:4a:e4:
                    bf:b9:d4:9b:43:99:eb:76:2f:7b:88:4d:f6:a6:90:
                    ed:5f:cc:20:7f:b1:d9:18:38:e2:c5:8e:9f:5e:61:
                    bb:f4:bb:b5:3d:e7:43:92:77:ad:96:bf:f5:ba:c5:
                    f2:eb:7c:1d:51:94:ce:94:42:09:0c:63:93:e1:40:
                    0e:4c:03:4f:f9:91:bf:68:f0:dc:3e:99:9a:c0:9b:
                    a9:c4:48:38:85:97:77:62:f3:02:b7:61:63:0c:90:
                    bf:14:a2:a6:81:d6:99:1a:c7:ed:2d:dd:0e:ac:8a:
                    db:03:15:3c:02:87:11:66:58:8d:25:09:82:f1:0f:
                    59:38:c5:2e:2f:3d:e4:2f:95:98:2f:0b:0a:a1:d2:
                    dc:e3:1f:6b:e6:82:71:e3:82:2c:43:49:35:d7:bd:
                    10:33:fe:47:34:7a:eb:7b:75:60:1d:49:23:7d:e3:
                    45:16:c6:36:44:4d:98:d0:58:3e:61:a7:4a:ed:a9:
                    b7:00:5e:84:f1:f9:fe:79:bb:d2:95:92:57:7e:d7:
                    06:24:01:40:ad:91:12:ef:43:7e:7e:b0:25:22:88:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:AA:3D:74:70:69:9D:44:96:08:3F:9B:FE:99:E1:A6:35:80:98
            X509v3 Authority Key Identifier:
                keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:23:9c:23:1a:39:5e:ab:86:27:5e:a0:1f:58:f8:53:57:
         53:38:f3:60:e6:c8:69:48:f3:4d:07:a3:2b:35:bc:ee:56:29:
         81:03:ac:33:e4:c2:e9:70:2d:66:9d:9c:a4:b1:92:3a:f4:88:
         63:1e:ac:06:9d:5b:52:43:eb:d7:53:fc:c4:96:ac:c0:2c:d2:
         d7:0e:64:cb:32:04:22:6a:99:53:b7:14:79:b7:1e:fb:a4:31:
         76:bc:01:2b:07:bb:3d:73:cd:4c:cd:ac:49:20:20:6c:e8:33:
         21:df:12:0b:f8:3b:a4:20:80:dc:d5:f0:cb:e8:88:f3:d7:c3:
         b2:15:74:81:32:09:58:b3:00:e8:42:13:1e:ef:73:8e:e7:bd:
         a1:43:33:37:fa:b2:5d:8b:53:8c:8b:28:9e:7c:92:28:17:1f:
         e5:eb:e8:e0:df:9e:83:7f:c8:37:7d:20:7a:7f:ef:41:e6:1c:
         25:86:6a:a9:eb:a4:d1:a1:b7:4a:88:6c:91:93:fb:d8:4f:dc:
         1e:4d:b1:77:de:9f:62:f3:76:65:43:ad:1b:a4:ac:fa:4e:19:
         7a:c0:2a:63:69:36:6b:fe:ac:c7:64:15:6a:2e:d5:d1:e7:77:
         e5:58:b4:fc:f8:bf:8b:1c:cf:bc:80:73:9b:14:de:a3:0c:5e:
         39:a3:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:04:23 2026 by rpki-client