This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/34352e3137352e3135322e302f32322d3234203d3e20323637383734.roa
File:                     34352e3137352e3135322e302f32322d3234203d3e20323637383734.roa (raw, json)
Hash identifier:          4PCIwxiqdMGRK+U+9YeHOOJq6/EXb3tIVSCNlVRBDyA=
Subject key identifier:   20:8D:18:57:AC:D0:53:5A:DA:56:6E:1C:E6:07:91:E8:61:EF:FD:D4
Certificate issuer:       /CN=C97459DB1B7385B812E7431C896F0FCEC92EBE03
Certificate serial:       053BA265BAA8AD43426075559675191171345D92
Authority key identifier: C9:74:59:DB:1B:73:85:B8:12:E7:43:1C:89:6F:0F:CE:C9:2E:BE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/34352e3137352e3135322e302f32322d3234203d3e20323637383734.roa
Signing time:             Tue 06 Jan 2026 18:59:17 +0000
ROA not before:           Tue 06 Jan 2026 18:54:17 +0000
ROA not after:            Tue 05 Jan 2027 18:59:17 +0000
asID:                     267874
IP address blocks:        45.175.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 00:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3b:a2:65:ba:a8:ad:43:42:60:75:55:96:75:19:11:71:34:5d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C97459DB1B7385B812E7431C896F0FCEC92EBE03
        Validity
            Not Before: Jan  6 18:54:17 2026 GMT
            Not After : Jan  5 18:59:17 2027 GMT
        Subject: CN=208D1857ACD0535ADA566E1CE60791E861EFFDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:7d:8e:02:32:39:c5:87:9c:da:7a:a0:62:
                    a8:23:f4:9b:eb:ce:bc:03:36:ff:8b:40:49:81:18:
                    98:87:0e:8a:e6:42:45:d7:08:31:6a:8a:14:c6:41:
                    6b:d4:b6:85:96:45:f6:fe:0e:32:3d:04:11:43:64:
                    71:83:38:8c:d8:4d:54:b7:b5:ae:59:c1:26:ee:89:
                    ba:16:53:59:9f:78:67:6c:5c:cc:af:51:af:c7:6a:
                    09:2d:e0:fd:48:fd:72:14:ba:45:34:85:26:10:86:
                    35:d7:05:8e:60:4b:fd:43:42:b8:2c:ed:17:70:82:
                    e2:31:9c:1e:81:8c:3f:9d:95:0f:8c:66:f8:cc:b2:
                    5f:ae:9e:f2:58:43:ea:c4:1c:f0:2f:28:3a:5c:94:
                    d8:69:4d:81:d1:91:c5:4a:45:54:dd:6e:d4:ac:40:
                    1e:6a:52:79:07:56:14:56:5f:41:0d:49:f4:8e:bd:
                    a0:5c:73:7f:06:ce:09:7a:eb:25:64:08:4f:da:26:
                    38:93:7a:91:49:f8:82:bb:37:e5:b6:67:d4:f0:83:
                    96:ad:a2:b8:46:55:24:b6:de:c0:ba:63:02:ec:ab:
                    76:e7:6d:7c:d7:89:13:4b:dc:e6:98:c4:a7:59:af:
                    6b:cb:94:58:51:d7:d7:1a:fe:c7:8e:87:43:b8:8d:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8D:18:57:AC:D0:53:5A:DA:56:6E:1C:E6:07:91:E8:61:EF:FD:D4
            X509v3 Authority Key Identifier:
                keyid:C9:74:59:DB:1B:73:85:B8:12:E7:43:1C:89:6F:0F:CE:C9:2E:BE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/34352e3137352e3135322e302f32322d3234203d3e20323637383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:a5:19:f9:7c:2c:39:bb:7e:86:09:e3:0d:5d:3d:df:b0:2e:
         e5:8d:bc:23:ec:3c:0c:0c:d0:99:75:9d:2b:22:25:71:92:8a:
         c8:c9:0a:6e:bb:47:5f:ef:04:4f:ff:b0:33:cf:68:61:5a:b6:
         8e:64:1c:e8:41:78:95:09:e0:1e:84:80:33:36:c6:be:f9:6a:
         ba:50:ef:d9:22:12:ff:14:c9:8f:f3:7a:d8:ad:96:8d:6f:c8:
         02:73:fe:ce:87:f6:a0:7f:0f:a6:ab:de:7b:c3:dd:eb:66:8b:
         fa:d8:be:d8:ae:34:51:29:e2:ed:dc:29:ef:f8:c5:7e:b9:e8:
         62:b7:25:03:8e:24:29:76:e8:ec:73:79:a2:0f:01:f5:fb:1c:
         b3:a2:59:2e:0a:48:d1:80:1a:36:ca:fc:2c:b5:26:49:a2:9a:
         5c:a4:f0:9b:54:37:2e:e4:fe:ba:da:e0:04:d5:16:8f:52:f3:
         40:8a:ec:60:da:7a:3d:cb:c2:7a:49:38:ad:61:31:a0:18:57:
         cc:8a:66:b8:34:81:a2:e9:09:ca:e8:58:6f:1f:dd:a6:76:d4:
         6f:00:ed:88:50:a0:58:1e:4c:11:41:57:48:c6:fd:f1:d5:bd:
         e1:aa:79:47:a1:85:4e:98:d1:91:0b:7e:82:8d:94:eb:8d:3c:
         4a:a0:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:54:14 2026 by rpki-client