This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39322e302f32322d3234203d3e20323639383738.roa
File:                     34352e3139302e39322e302f32322d3234203d3e20323639383738.roa (raw, json)
Hash identifier:          lUjz+Y8HvI5Kc8btkSXxqddRUZTDmQbBaQE9ASWFoAc=
Subject key identifier:   5A:3C:26:6B:DD:84:11:60:C0:AC:65:32:F2:FC:6A:4A:60:1A:8D:A7
Certificate issuer:       /CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
Certificate serial:       7B88F40735AE77E972FE7493DBF086E19F76D7D9
Authority key identifier: 0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39322e302f32322d3234203d3e20323639383738.roa
Signing time:             Tue 06 Jan 2026 18:59:21 +0000
ROA not before:           Tue 06 Jan 2026 18:54:21 +0000
ROA not after:            Tue 05 Jan 2027 18:59:21 +0000
asID:                     269878
IP address blocks:        45.190.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 01:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:88:f4:07:35:ae:77:e9:72:fe:74:93:db:f0:86:e1:9f:76:d7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
        Validity
            Not Before: Jan  6 18:54:21 2026 GMT
            Not After : Jan  5 18:59:21 2027 GMT
        Subject: CN=5A3C266BDD841160C0AC6532F2FC6A4A601A8DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:89:19:dd:ad:0f:b5:37:43:78:d4:6c:4f:
                    3c:7e:5e:48:59:d4:8f:bb:50:6b:19:f1:6f:7f:e6:
                    cd:4c:f2:8e:31:63:53:0f:a8:29:d2:0c:61:97:3c:
                    c2:71:b4:10:92:32:da:58:6f:29:33:c5:cd:80:c8:
                    25:09:20:5b:a8:b9:aa:6d:e5:56:4a:31:2d:a5:d1:
                    df:79:c1:52:33:dd:07:be:21:4e:6c:b9:79:46:4a:
                    85:54:88:38:97:75:8d:78:58:8f:61:c1:e0:9f:73:
                    ef:80:a7:d8:a7:67:88:10:d2:7f:46:ff:ac:93:2a:
                    ee:f9:ee:3b:83:68:ed:77:25:cf:ff:d6:23:18:83:
                    a3:fc:60:71:ca:1c:6c:cb:a9:c4:67:b1:2a:ad:99:
                    ce:3d:2c:d2:9e:3e:92:8f:9c:3b:6c:4c:f2:6f:c0:
                    d2:d8:14:28:47:53:0c:2c:93:d4:2f:c1:03:82:a8:
                    94:87:ea:11:2b:f4:dd:6c:fe:fd:0d:5a:75:bd:35:
                    32:d6:60:7a:fe:5b:04:47:5e:f8:69:ec:03:ce:b7:
                    9d:a1:83:b5:fc:9b:eb:e2:64:72:4b:96:c0:69:6c:
                    93:48:73:d2:9f:7b:0e:a2:08:ad:c0:5e:81:65:35:
                    4d:d2:ea:25:ef:47:fe:b6:08:ff:11:ba:8b:3d:ad:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3C:26:6B:DD:84:11:60:C0:AC:65:32:F2:FC:6A:4A:60:1A:8D:A7
            X509v3 Authority Key Identifier:
                keyid:0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39322e302f32322d3234203d3e20323639383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:08:04:ce:05:bc:7c:1f:14:3b:ae:ca:39:ad:dc:a3:32:90:
         9b:1a:80:08:30:db:e2:6f:81:51:83:8e:e4:9a:f7:53:06:f8:
         74:84:32:72:40:86:83:16:ff:73:8c:de:b4:68:05:aa:e0:1c:
         3c:77:0e:0c:e9:5e:1a:23:e9:32:78:62:4b:f7:60:b9:7c:77:
         2a:65:3e:7d:52:31:9e:7f:60:93:d4:3e:4b:d1:96:df:44:8f:
         49:f0:0d:b0:c6:d1:10:65:51:4e:c2:f8:55:d4:25:bf:96:38:
         f7:b3:d5:3b:c0:14:64:44:4d:9b:bd:d9:c1:05:32:62:b8:48:
         3d:73:a4:0b:02:a4:ea:8c:2d:95:ca:e1:73:07:8a:51:bc:3f:
         91:af:4a:32:ef:de:56:47:75:c7:41:1b:4d:7f:43:f8:b4:e4:
         7d:51:78:6d:d2:88:ef:90:c4:1f:1f:dc:c6:dc:b6:68:28:9b:
         97:68:ee:44:71:5b:42:d6:70:0d:29:a7:9d:31:0a:2e:13:9f:
         07:19:e0:a3:00:f9:dd:80:e9:b0:5a:20:74:89:e1:0d:ff:86:
         b5:23:78:d9:32:ce:7f:6f:86:32:e6:4f:2f:49:a6:46:cc:2a:
         ee:8a:5f:f8:4a:9b:4f:92:c4:a7:1d:8d:e8:ce:6b:a3:61:7f:
         a7:53:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 03:48:45 2026 by rpki-client