This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          yrzi1+6pUPJ6kEHIpBAe5fVIo9d+69k4eA0w4Y89w+g=
Subject key identifier:   83:54:22:A6:BA:98:D4:90:9B:1B:62:E0:A2:A2:54:DE:FC:E2:9B:D3
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       3C42F79F0599542D88DAA2DF1F27BBC37EF3631B
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 06 Jan 2026 20:49:59 +0000
ROA not before:           Tue 06 Jan 2026 20:44:59 +0000
ROA not after:            Tue 05 Jan 2027 20:49:59 +0000
asID:                     269886
IP address blocks:        45.191.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:42:f7:9f:05:99:54:2d:88:da:a2:df:1f:27:bb:c3:7e:f3:63:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Jan  6 20:44:59 2026 GMT
            Not After : Jan  5 20:49:59 2027 GMT
        Subject: CN=835422A6BA98D4909B1B62E0A2A254DEFCE29BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:43:a5:85:3b:97:02:06:57:70:4c:b9:7c:
                    0a:71:8a:69:2c:ef:b5:58:3a:c1:47:30:6a:e3:00:
                    b3:ce:40:71:38:ec:84:04:14:85:80:8f:c1:a1:71:
                    3b:f7:9a:ab:ad:b3:dc:ad:36:95:37:ea:ac:d5:64:
                    9d:85:81:ed:df:ec:8c:3a:19:1f:02:59:76:98:72:
                    f9:3c:e0:5d:3c:df:6d:61:8d:2d:04:e6:f6:23:35:
                    96:99:59:7d:01:29:d9:d1:1f:fb:23:0b:06:45:e0:
                    28:8e:49:80:88:b0:41:09:aa:66:11:4e:1b:58:18:
                    86:f8:4c:3f:6a:52:fa:cb:ab:63:50:1b:43:67:16:
                    e8:e4:95:c4:bd:d3:db:6b:29:3c:4a:35:89:c8:a5:
                    1d:5c:44:a5:42:87:8f:72:ef:39:e8:15:44:54:1e:
                    a3:01:c2:8c:31:d8:fe:61:22:55:f5:fc:98:75:6b:
                    79:b4:42:81:24:a2:cb:5d:8c:95:9f:07:05:c3:33:
                    cf:ed:0d:88:7c:23:8b:58:e8:68:c2:e3:1b:22:59:
                    30:24:ba:4b:47:25:5b:fa:2f:fe:4b:d4:3f:4e:43:
                    dd:0b:cb:25:a3:29:38:8f:9f:24:c7:f3:3f:f4:7e:
                    f9:e1:a5:99:7e:c2:0f:1f:8f:5f:1e:84:95:3f:02:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:22:A6:BA:98:D4:90:9B:1B:62:E0:A2:A2:54:DE:FC:E2:9B:D3
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:94:ab:dc:8c:a3:bf:7d:a9:85:fb:03:10:e8:c3:1c:00:
         e3:80:8c:87:3d:b7:98:58:da:64:85:76:6f:47:de:ea:00:20:
         13:06:ec:33:93:d4:ac:ad:f8:63:0e:21:37:c7:74:6d:ef:ad:
         4c:4a:5a:25:f1:70:cf:e8:05:90:f0:5a:ed:02:9d:d0:79:5f:
         9b:51:6c:49:6f:9d:ec:1e:24:d3:3f:b9:e6:a0:97:14:da:79:
         47:d9:e5:34:17:99:70:df:a0:80:d1:46:c4:99:30:9d:28:5f:
         37:ec:e1:e9:0e:d8:16:04:d2:1d:57:94:ee:6d:4c:e4:5b:d7:
         e8:49:80:f1:00:a6:11:25:01:a2:db:4b:06:4f:3e:12:e3:b7:
         a4:e3:5a:5c:bb:85:f5:36:6f:38:e1:bb:43:ab:67:dd:37:fb:
         cb:24:2e:4d:34:a6:89:bb:cf:62:24:5b:ff:6b:87:c7:bb:eb:
         38:0e:ad:eb:2b:9f:e5:26:46:17:65:76:96:6b:03:c4:c1:ac:
         0f:04:9e:97:c7:6a:8b:2c:7d:7e:ed:fd:c1:f3:b8:78:bc:d1:
         15:e3:19:b6:64:c8:d4:f2:f6:1f:1b:24:de:80:25:76:e5:be:
         8e:08:0d:e3:2e:9d:ef:76:19:e9:5d:4f:96:a4:48:eb:79:eb:
         ce:d1:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:17 2026 by rpki-client