This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/34352e342e39372e302f32342d3234203d3e20323635363538.roa
File:                     34352e342e39372e302f32342d3234203d3e20323635363538.roa (raw, json)
Hash identifier:          UAtjSUkDjhfsFQq/THNdxdg1c44LHI0IYUpH6DRWV7w=
Subject key identifier:   27:E5:BD:12:1A:AE:7C:E9:37:6B:80:83:6E:C1:19:B9:A9:44:04:1D
Certificate issuer:       /CN=5C36E01C9108F427B2E5D948A1BDD7DD54473BE2
Certificate serial:       339762115AD23EBB5FC84465064D460F7CB173BB
Authority key identifier: 5C:36:E0:1C:91:08:F4:27:B2:E5:D9:48:A1:BD:D7:DD:54:47:3B:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/34352e342e39372e302f32342d3234203d3e20323635363538.roa
Signing time:             Tue 06 Jan 2026 20:56:37 +0000
ROA not before:           Tue 06 Jan 2026 20:51:37 +0000
ROA not after:            Tue 05 Jan 2027 20:56:37 +0000
asID:                     265658
IP address blocks:        45.4.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 17:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:97:62:11:5a:d2:3e:bb:5f:c8:44:65:06:4d:46:0f:7c:b1:73:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C36E01C9108F427B2E5D948A1BDD7DD54473BE2
        Validity
            Not Before: Jan  6 20:51:37 2026 GMT
            Not After : Jan  5 20:56:37 2027 GMT
        Subject: CN=27E5BD121AAE7CE9376B80836EC119B9A944041D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:a3:16:a3:f5:4e:9c:8e:82:12:d8:1b:bb:
                    82:43:2e:15:23:d2:c3:a5:8c:4a:b2:36:1f:11:01:
                    de:d7:24:0a:fc:8e:89:9d:57:44:e0:88:40:a1:24:
                    2a:f4:15:10:27:2d:51:8f:c7:83:94:c9:0b:bc:f9:
                    e0:18:ed:c7:a8:94:46:df:1c:f2:b8:29:e0:8e:57:
                    b0:cc:96:2a:f9:24:bc:a7:58:38:64:ae:3c:7d:47:
                    5d:9d:bd:ff:22:72:4c:f7:0a:2f:6d:4b:b3:ab:dc:
                    f8:80:15:b1:c0:3d:e2:6e:29:1c:94:50:5d:98:59:
                    84:6b:0b:41:ca:8a:f0:96:63:ac:db:4a:e6:43:84:
                    15:5e:f6:48:21:d5:4c:1a:d6:66:41:06:27:b5:7a:
                    6c:1b:43:db:5d:7c:5e:15:a4:f2:8a:92:ef:a7:f9:
                    13:9d:d6:54:71:84:e9:00:37:37:8c:f1:d6:15:f4:
                    00:fa:9e:ad:2b:47:e4:e9:9c:89:f5:3d:41:61:5f:
                    2c:71:0c:32:b6:c0:02:8a:6c:56:ed:00:e1:34:3a:
                    67:b0:0d:b3:b4:f5:36:a9:0d:ec:d8:81:f0:3e:ba:
                    1e:61:67:2e:79:8c:4e:fb:d3:cd:e8:e9:7d:80:ed:
                    30:76:19:d4:e5:96:aa:dd:c5:df:a2:c0:14:f9:14:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:BD:12:1A:AE:7C:E9:37:6B:80:83:6E:C1:19:B9:A9:44:04:1D
            X509v3 Authority Key Identifier:
                keyid:5C:36:E0:1C:91:08:F4:27:B2:E5:D9:48:A1:BD:D7:DD:54:47:3B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C36E01C9108F427B2E5D948A1BDD7DD54473BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/978853C4210913AA9A98F8651C68C72011BDE8759643908CDB6382A1A80C75F2/0/34352e342e39372e302f32342d3234203d3e20323635363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:45:61:ac:67:1e:e6:e2:fe:f7:be:fc:13:5c:6f:df:ee:
         c1:48:c7:f9:08:28:6d:59:9c:66:e3:98:99:6c:91:8f:fe:bd:
         06:03:28:3c:cd:82:76:bd:99:f7:86:7d:de:43:7f:a1:e3:99:
         1b:e3:ef:ba:1e:70:f0:49:36:69:bc:2b:de:6d:28:b3:b7:e0:
         cc:26:89:c5:d9:85:82:61:e4:e2:3f:da:53:f4:ec:fa:57:ee:
         69:7e:e1:c8:15:fd:64:c7:9b:c8:94:a6:01:21:9a:cf:e0:5f:
         a6:16:e8:9f:ea:e9:23:59:83:11:6c:84:23:c1:c3:5b:55:32:
         9e:fb:f1:1e:e3:82:08:7f:4e:b8:d7:68:f5:e3:4a:1d:70:41:
         7d:3d:6a:ad:38:8f:ae:07:a2:94:57:70:d6:38:d4:54:ae:86:
         38:60:ae:b2:66:27:23:ab:4b:2a:0e:f2:f9:f9:29:a6:84:d6:
         19:13:66:90:ca:fa:63:17:41:cd:c8:50:56:d7:80:44:ef:af:
         e2:e1:b9:af:9d:4b:be:69:8e:9a:28:31:f8:fc:5f:5c:ea:88:
         24:94:c0:1e:f1:5f:26:ea:12:0e:0f:93:5f:3e:59:35:bd:07:
         9a:44:e6:e3:4a:a5:3e:80:84:dc:7e:2d:55:7f:3d:c5:00:74:
         75:7a:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 04:11:47 2026 by rpki-client