This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138302e32312e302f32342d3234203d3e20323733303435.roa
File:                     34352e3138302e32312e302f32342d3234203d3e20323733303435.roa (raw, json)
Hash identifier:          0UtPHJATaw0tBj9pTIt8N44oJItiF3ewnpS9WZAJUUM=
Subject key identifier:   1D:09:4D:CF:D4:C0:9E:86:01:45:D7:A6:D5:EE:87:15:48:07:93:25
Certificate issuer:       /CN=9977AC7085D10316B3F0DDA34A29E5C210EB7335
Certificate serial:       1D5FDC187F8BD9148CA158291608436C44950B30
Authority key identifier: 99:77:AC:70:85:D1:03:16:B3:F0:DD:A3:4A:29:E5:C2:10:EB:73:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138302e32312e302f32342d3234203d3e20323733303435.roa
Signing time:             Tue 06 Jan 2026 19:18:44 +0000
ROA not before:           Tue 06 Jan 2026 19:13:44 +0000
ROA not after:            Tue 05 Jan 2027 19:18:44 +0000
asID:                     273045
IP address blocks:        45.180.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 20:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5f:dc:18:7f:8b:d9:14:8c:a1:58:29:16:08:43:6c:44:95:0b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9977AC7085D10316B3F0DDA34A29E5C210EB7335
        Validity
            Not Before: Jan  6 19:13:44 2026 GMT
            Not After : Jan  5 19:18:44 2027 GMT
        Subject: CN=1D094DCFD4C09E860145D7A6D5EE871548079325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:ab:8f:6f:81:75:0d:a0:75:30:c8:44:58:
                    0e:70:09:19:0b:5d:09:6a:48:70:29:34:c5:2c:1e:
                    8b:ea:cd:d3:da:4d:52:b3:10:9f:2c:81:82:dd:f0:
                    19:03:b0:c6:3b:ef:71:68:71:2e:8f:4b:d8:f0:7f:
                    59:f3:21:3a:4c:7e:5f:0f:3b:2c:2b:c4:00:79:f0:
                    86:7c:ab:4b:7b:c9:e7:58:72:0c:89:64:bf:40:e0:
                    6c:df:5b:e6:97:8c:9c:9e:d3:a6:86:d7:11:cd:f6:
                    8f:fd:e3:f7:ae:9b:b2:26:52:05:07:63:25:a3:d8:
                    69:3f:1d:43:f9:63:b7:07:0a:04:19:a1:14:b3:c1:
                    85:ad:92:f9:49:88:64:1c:5f:8a:ac:00:fb:ef:e1:
                    0e:14:06:88:ee:93:1b:99:d7:9c:73:f1:74:be:19:
                    25:a8:e3:58:11:b3:e3:a1:fc:c2:cb:0a:ef:14:02:
                    56:68:85:28:53:87:42:65:f7:60:20:9d:d8:33:07:
                    e6:70:a5:cd:3e:a4:47:22:d3:8d:64:35:79:49:d5:
                    c7:7b:e9:03:67:cf:09:49:ff:bd:46:7f:48:24:f3:
                    c6:ad:af:18:d8:3c:bc:19:c5:61:05:cc:1b:bf:d6:
                    02:75:be:a2:91:76:2d:17:1f:28:b9:ff:87:1a:cb:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:4D:CF:D4:C0:9E:86:01:45:D7:A6:D5:EE:87:15:48:07:93:25
            X509v3 Authority Key Identifier:
                keyid:99:77:AC:70:85:D1:03:16:B3:F0:DD:A3:4A:29:E5:C2:10:EB:73:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9977AC7085D10316B3F0DDA34A29E5C210EB7335.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99934E1E439A30E0877155EEA434E1D4AFB8782E07220C443A7411A27838BA8F/0/34352e3138302e32312e302f32342d3234203d3e20323733303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:51:87:cd:cd:20:39:0a:a8:42:66:7c:1a:bd:6f:92:5b:5d:
         1a:c9:93:8a:3d:10:5a:c0:61:bd:b2:01:17:ea:e8:f7:16:e4:
         9d:e7:55:db:d5:53:01:df:a6:09:35:39:97:63:81:5e:42:06:
         f7:97:08:83:f4:b5:7b:5f:d4:ac:0f:3d:28:c4:6f:61:da:31:
         7d:72:22:c3:7e:36:5a:d7:f9:8b:8c:b6:fe:d6:2c:29:82:86:
         6b:b2:ed:f1:4d:dd:20:b3:e7:55:09:ed:9e:62:4d:2a:41:26:
         dc:a6:94:6c:e7:6d:18:97:32:44:6e:b9:e8:ed:0d:57:5b:55:
         8e:cd:1c:0f:a6:8d:8e:9c:af:9b:bf:1c:ed:de:cd:ec:c0:ab:
         5e:cc:ce:88:25:36:e8:8c:47:67:66:ff:b3:05:e6:29:8d:c1:
         37:4e:ea:79:a4:d1:0b:39:dd:1e:f8:48:2e:fb:46:3c:33:18:
         dd:bd:0f:71:a1:c7:3d:68:8d:29:60:83:db:dd:c3:8d:35:db:
         bc:df:cf:34:3d:d2:5a:d1:e8:b6:b6:30:00:53:33:a7:03:4c:
         b6:da:bd:67:5a:ab:84:6e:e6:97:69:51:ac:21:a5:1f:b4:50:
         f1:ec:82:14:74:24:f7:b7:90:e3:2b:93:d6:2c:9c:e2:27:8b:
         94:c3:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:28:07 2026 by rpki-client