This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa
File:                     34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa (raw, json)
Hash identifier:          rCoA1hjC4Vk+rfWC3HQEShnqWqEvwEXe+YJsng2pRnI=
Subject key identifier:   41:97:44:EC:E8:38:44:3E:8D:67:04:AA:02:C4:29:0A:89:51:8C:10
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       26FC87016D25A642133264BB726B1F15E848B9A7
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa
Signing time:             Tue 06 Jan 2026 19:30:11 +0000
ROA not before:           Tue 06 Jan 2026 19:25:11 +0000
ROA not after:            Tue 05 Jan 2027 19:30:11 +0000
asID:                     269811
IP address blocks:        45.185.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fc:87:01:6d:25:a6:42:13:32:64:bb:72:6b:1f:15:e8:48:b9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Jan  6 19:25:11 2026 GMT
            Not After : Jan  5 19:30:11 2027 GMT
        Subject: CN=419744ECE838443E8D6704AA02C4290A89518C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:14:10:ef:6c:f1:bd:fb:11:a6:51:b0:47:
                    b7:ef:88:b3:5b:71:ed:aa:f9:39:5f:25:b6:d7:15:
                    4c:16:79:d7:77:1e:e4:0e:0f:5a:4c:77:c1:b2:f6:
                    89:a0:cf:6f:62:93:02:28:d7:4c:18:dd:82:b8:04:
                    4a:a3:48:d7:19:ee:7c:19:f8:7d:8b:43:bd:95:43:
                    bd:40:e1:19:d7:3c:7c:04:04:ea:0e:7f:15:70:1b:
                    6e:13:1a:35:6a:0a:0f:f4:5c:f8:fe:28:3f:06:ea:
                    e7:c8:86:63:be:36:c4:a6:d3:14:28:45:fc:b7:02:
                    e4:0c:fb:0a:e0:86:1a:6b:cd:9f:b2:8a:c3:d9:02:
                    58:10:a3:7a:b9:d6:67:71:f4:39:5d:e9:56:3f:e3:
                    7d:82:da:c3:69:5d:ef:b9:31:b2:58:6b:89:8f:3c:
                    d3:c0:55:5e:84:d5:27:e8:51:5b:e0:23:5c:85:1d:
                    68:27:56:41:e7:2c:2d:5a:6a:c6:b1:dc:38:2b:6a:
                    19:54:1f:09:d9:e8:d7:d2:71:65:61:1b:94:f3:29:
                    2c:60:46:6d:55:a4:4a:09:73:f5:55:b8:e1:c7:64:
                    e0:78:b5:5e:43:b5:6b:cf:ed:bf:11:05:b3:c1:0b:
                    c4:54:4c:2e:6d:e7:fc:43:4d:92:6c:9c:b8:4b:f0:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:44:EC:E8:38:44:3E:8D:67:04:AA:02:C4:29:0A:89:51:8C:10
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:d9:71:ea:59:58:46:76:2a:b5:5a:52:71:34:1e:03:44:
         32:62:24:5e:96:4b:9e:f0:ae:86:66:b1:fd:e0:fe:ae:0c:e3:
         d2:62:84:a4:81:09:86:f6:01:e2:cd:e0:49:2d:43:8c:29:77:
         4c:fd:e3:71:ef:9d:de:22:38:2a:90:70:0c:49:6a:99:f7:24:
         cf:45:9f:c4:5b:87:45:f0:e5:7e:af:07:10:e6:43:46:1b:b1:
         96:e5:df:58:d1:79:86:4d:e8:83:b9:9e:54:33:33:e0:ed:9d:
         6f:63:b4:a6:e1:20:d4:82:38:ad:27:f7:5b:74:0e:10:de:3d:
         21:8b:62:9f:8c:89:65:1c:fe:93:bc:8d:4a:8c:cd:20:ad:cb:
         32:02:03:76:62:15:80:74:b8:bc:79:a9:9a:76:f2:60:b0:fc:
         c4:f9:7d:a8:ac:73:84:3c:2a:35:97:1b:cc:cf:c3:52:33:18:
         69:9f:a4:59:98:42:ea:7d:05:f7:fc:a7:56:76:6e:a4:76:f3:
         cc:1b:40:e0:1b:a2:d5:3f:1d:65:06:1b:cb:39:4f:d3:98:3c:
         db:1b:4f:da:57:fc:f0:65:bb:87:18:1b:ea:e6:30:d5:fb:85:
         95:b5:75:c4:d1:56:ef:2e:c5:6f:7e:d5:30:45:02:6f:b8:7f:
         f0:0c:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:21:32 2026 by rpki-client