This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81743DACAEFD974F5517D8DD2D608437E898FC4D106301F8D5520AEC36EE29E2/0/3139322e3138382e34352e302f32342d3234203d3e2033353439.roa
File:                     3139322e3138382e34352e302f32342d3234203d3e2033353439.roa (raw, json)
Hash identifier:          McwvuSpI9OzaRveeYnvY/pR3PUDMnkuBiv8x8SN4K0I=
Subject key identifier:   12:FE:C5:28:F5:82:DF:36:36:3D:DB:5B:8A:1B:F7:1C:19:20:FC:AB
Certificate issuer:       /CN=3DA2DFD62B2715610BCC0612A67B46B5A0845748
Certificate serial:       45BE107902BCCED16FCA627BD5400336DF8A470F
Authority key identifier: 3D:A2:DF:D6:2B:27:15:61:0B:CC:06:12:A6:7B:46:B5:A0:84:57:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3DA2DFD62B2715610BCC0612A67B46B5A0845748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81743DACAEFD974F5517D8DD2D608437E898FC4D106301F8D5520AEC36EE29E2/0/3139322e3138382e34352e302f32342d3234203d3e2033353439.roa
Signing time:             Tue 06 Jan 2026 19:28:23 +0000
ROA not before:           Tue 06 Jan 2026 19:23:23 +0000
ROA not after:            Tue 05 Jan 2027 19:28:23 +0000
asID:                     3549
IP address blocks:        192.188.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81743DACAEFD974F5517D8DD2D608437E898FC4D106301F8D5520AEC36EE29E2/0/3DA2DFD62B2715610BCC0612A67B46B5A0845748.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81743DACAEFD974F5517D8DD2D608437E898FC4D106301F8D5520AEC36EE29E2/0/3DA2DFD62B2715610BCC0612A67B46B5A0845748.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3DA2DFD62B2715610BCC0612A67B46B5A0845748.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:be:10:79:02:bc:ce:d1:6f:ca:62:7b:d5:40:03:36:df:8a:47:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DA2DFD62B2715610BCC0612A67B46B5A0845748
        Validity
            Not Before: Jan  6 19:23:23 2026 GMT
            Not After : Jan  5 19:28:23 2027 GMT
        Subject: CN=12FEC528F582DF36363DDB5B8A1BF71C1920FCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:5e:9f:6a:3c:95:21:e6:f2:3c:e7:64:28:
                    55:1e:dd:c8:de:cb:6b:d3:1b:81:91:3a:c9:d6:76:
                    c1:b6:9b:9d:0a:22:f8:70:d7:ac:68:b7:82:ae:90:
                    50:af:73:be:4a:f7:7e:87:8e:c3:69:84:20:d4:10:
                    a1:ae:42:af:88:b9:8c:46:82:f3:05:d8:3e:37:7d:
                    7f:5d:ce:f7:cc:71:e3:48:40:5c:fa:7d:c0:a7:14:
                    56:5c:47:33:d9:23:9a:93:2f:6a:0a:e3:45:43:af:
                    41:db:76:80:7b:60:86:ae:1a:8d:f6:bb:0c:e6:79:
                    0d:b0:15:42:2e:dc:42:57:fb:98:d7:0f:de:ab:26:
                    9e:45:31:bf:ba:1a:44:f5:be:a8:90:17:1c:e4:b2:
                    32:5d:d5:60:7c:28:6d:ca:37:61:4c:43:50:65:71:
                    f4:b2:8d:0b:74:12:55:99:86:6d:9e:b0:aa:05:66:
                    0b:86:b2:c9:f7:49:de:e5:d0:57:53:69:cc:97:8b:
                    4b:ff:53:1e:a5:18:1d:d0:9f:54:4b:9e:60:66:5f:
                    9b:f0:4b:60:b2:7a:50:9b:20:ac:8e:21:2a:27:6c:
                    1d:9d:db:d5:e6:8b:db:bd:42:58:75:57:0c:ec:ba:
                    b2:a6:35:de:7e:65:4b:48:f4:93:00:ea:13:08:ce:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FE:C5:28:F5:82:DF:36:36:3D:DB:5B:8A:1B:F7:1C:19:20:FC:AB
            X509v3 Authority Key Identifier:
                keyid:3D:A2:DF:D6:2B:27:15:61:0B:CC:06:12:A6:7B:46:B5:A0:84:57:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81743DACAEFD974F5517D8DD2D608437E898FC4D106301F8D5520AEC36EE29E2/0/3DA2DFD62B2715610BCC0612A67B46B5A0845748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3DA2DFD62B2715610BCC0612A67B46B5A0845748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81743DACAEFD974F5517D8DD2D608437E898FC4D106301F8D5520AEC36EE29E2/0/3139322e3138382e34352e302f32342d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:01:1e:8e:5f:f5:56:e5:b2:fe:5b:7d:5e:a6:78:7f:bf:1d:
         7a:79:0c:08:89:57:1c:67:19:85:fe:9a:57:79:f1:b9:7d:ae:
         03:bc:32:b7:a9:91:d4:3a:43:1a:b6:58:9c:da:c9:c5:20:d3:
         03:7f:7d:48:e2:54:1c:33:cb:78:70:f9:0b:42:c8:fd:26:49:
         b2:91:39:5d:36:a9:a6:fb:1c:80:55:27:e3:2f:19:69:d6:b9:
         04:f0:f7:e7:96:3d:7f:b8:85:84:44:55:59:5d:41:8f:eb:e7:
         b7:1e:20:97:6f:42:65:b6:2b:dd:c7:ad:74:34:02:7b:78:da:
         f8:54:6f:73:f2:4e:7f:8e:2a:42:8e:45:64:93:21:99:68:9d:
         a3:f2:e3:2a:e9:e0:41:c8:0d:51:69:87:58:e3:bd:95:ec:dc:
         dc:5b:54:c0:af:38:48:ed:6c:50:59:78:2e:82:7f:a1:be:fd:
         96:50:4b:d5:59:12:0b:a5:7f:37:8b:1c:21:e9:09:5a:66:42:
         94:62:a7:2e:38:db:34:3c:90:85:d1:db:fa:a5:33:ce:e9:6d:
         df:5b:1f:17:97:cd:67:c6:b3:cd:3b:39:25:fa:f2:32:b8:35:
         88:7d:e5:84:22:9c:3c:03:90:7e:d1:1a:65:89:19:55:36:a9:
         c7:19:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:36:16 2026 by rpki-client