This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa
File:                     34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa (raw, json)
Hash identifier:          1rX+ZWDPgmauSUDk6LKUn0/Jqh9KNX+2h2S2d0Tm8TM=
Subject key identifier:   F3:83:86:DA:88:FA:F5:ED:C0:10:81:B5:5B:CC:87:77:F9:C6:B5:18
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       1C21171B14E06773D9E5A8653E2DAD1D4B8D7B35
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa
Signing time:             Tue 06 Jan 2026 19:18:08 +0000
ROA not before:           Tue 06 Jan 2026 19:13:08 +0000
ROA not after:            Tue 05 Jan 2027 19:18:08 +0000
asID:                     270158
IP address blocks:        45.177.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:21:17:1b:14:e0:67:73:d9:e5:a8:65:3e:2d:ad:1d:4b:8d:7b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Jan  6 19:13:08 2026 GMT
            Not After : Jan  5 19:18:08 2027 GMT
        Subject: CN=F38386DA88FAF5EDC01081B55BCC8777F9C6B518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:5b:00:64:58:72:a4:b7:2d:3a:71:4e:21:
                    3e:c7:bb:31:7f:1a:22:bd:84:39:16:9c:de:03:15:
                    97:d0:ca:0c:34:c9:dd:eb:6a:2e:ed:d0:65:2a:37:
                    9c:1b:e4:a0:fc:97:e8:73:1d:eb:2f:e2:74:6b:2c:
                    e8:91:a5:cf:02:cd:92:4c:11:3a:a5:e9:13:9a:7c:
                    60:f1:81:68:cf:54:88:d0:a7:64:91:5b:0a:d7:6c:
                    f4:bc:63:68:e8:13:f0:35:a3:e8:d7:06:5a:86:df:
                    85:74:54:c5:96:1f:53:c6:33:fb:38:8c:53:69:2f:
                    19:7c:da:31:ed:df:f8:29:65:11:60:26:6e:63:46:
                    98:70:c5:65:92:6b:35:89:e0:8e:21:e6:b5:e5:88:
                    c6:4c:76:98:0b:0c:6e:c6:99:da:11:49:52:67:17:
                    b7:4c:1c:e7:eb:af:bd:fb:68:87:ab:ae:e8:81:12:
                    50:8b:b0:b8:aa:cd:7b:2e:19:c6:08:a6:93:a8:7b:
                    88:cc:6e:d2:c3:bb:d2:7e:30:80:71:e4:80:6b:8a:
                    e4:62:21:c7:67:d4:df:0c:9e:df:3e:d9:65:33:f9:
                    3b:0c:ea:82:60:2d:f9:e6:74:15:45:fa:a4:ce:cd:
                    02:8d:3c:4d:fc:7c:01:18:1a:29:e5:5c:50:4a:f3:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:83:86:DA:88:FA:F5:ED:C0:10:81:B5:5B:CC:87:77:F9:C6:B5:18
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:2f:29:e6:3b:90:d7:3c:9f:e4:23:d7:1a:c4:5e:2c:c0:
         e4:86:8b:37:90:8c:ed:ea:fd:35:c1:65:9c:b8:e0:ae:33:4c:
         35:e8:0d:b4:7e:e4:7a:bb:df:8f:77:50:e0:50:6d:77:93:78:
         98:ae:7b:ee:7d:1d:2c:61:c5:88:c4:1b:66:42:60:78:c6:64:
         51:f5:a3:c2:18:ed:74:0c:cd:25:c3:ee:cd:e1:50:40:67:1a:
         40:97:3a:f8:72:97:bc:35:46:4c:00:fd:5a:de:0d:96:95:d4:
         5c:e6:f8:6b:34:88:09:f2:c9:de:3f:2a:36:7b:bf:4c:e2:69:
         3b:0f:6b:6e:29:65:0e:ce:18:c1:28:d0:8c:37:d0:11:4f:8c:
         82:cd:ae:3a:eb:72:51:9b:46:5f:fe:d7:61:df:3e:84:fa:1b:
         e2:7d:91:2a:72:1d:87:6f:77:3e:d1:b5:c3:d2:d2:43:cf:48:
         71:4c:67:30:76:c9:ca:53:30:36:9e:fa:90:b3:2b:b3:89:3d:
         eb:38:27:2d:bc:b0:34:4d:b5:30:6c:cf:aa:25:20:f6:d5:80:
         11:04:99:db:5b:fe:8d:5b:a4:94:6d:66:59:18:80:66:6c:a7:
         7c:27:db:2b:21:1a:ca:31:6d:36:44:14:96:64:f0:51:c8:8f:
         cb:3e:ca:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:07:32 2026 by rpki-client