This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          sjWn70DdajB4rqAs/d1F09Drg85QUfidA+4DiR+JDQA=
Subject key identifier:   EC:D1:94:3A:E3:B0:F3:BC:78:26:9B:25:A5:DE:97:69:0D:3D:62:C4
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       1780AAD4ED277E1AD876D2E465DA8E8D10106F64
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 06 Jan 2026 20:49:59 +0000
ROA not before:           Tue 06 Jan 2026 20:44:59 +0000
ROA not after:            Tue 05 Jan 2027 20:49:59 +0000
asID:                     269886
IP address blocks:        45.191.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:80:aa:d4:ed:27:7e:1a:d8:76:d2:e4:65:da:8e:8d:10:10:6f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Jan  6 20:44:59 2026 GMT
            Not After : Jan  5 20:49:59 2027 GMT
        Subject: CN=ECD1943AE3B0F3BC78269B25A5DE97690D3D62C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:26:9f:31:b2:ad:3c:a8:9c:ca:d0:cf:5a:
                    d1:9c:0a:59:9b:ad:be:f1:86:ff:b3:c3:35:49:dc:
                    6c:97:b9:5a:e3:a3:57:8a:0c:52:e5:6f:d3:c1:21:
                    d5:57:43:25:d7:a6:42:bd:6c:1b:43:d2:be:c0:9b:
                    d1:47:bf:0c:f3:59:5f:c7:a2:13:43:cf:32:c9:95:
                    f6:87:f7:16:e9:4c:cc:37:9d:b4:59:07:24:0e:8f:
                    1a:dd:bc:38:fd:5e:9c:3b:01:e4:a9:3e:28:ed:00:
                    68:59:c2:59:75:50:9f:79:6e:bd:e3:50:9a:6b:a9:
                    aa:9d:d3:ee:03:08:e3:8f:61:26:94:f7:6a:9f:f1:
                    ee:fc:3f:9f:2c:9a:61:a8:06:d2:35:96:8f:e4:b7:
                    28:34:96:05:67:5a:29:91:b7:1b:06:99:17:92:54:
                    ff:bd:b1:59:c6:95:7d:96:6f:2a:f8:d8:cb:ca:4c:
                    40:60:07:ed:d3:3c:a6:35:9e:c1:ab:a6:44:da:0e:
                    58:de:81:9d:d9:5b:dc:76:fc:5e:5d:8b:0c:eb:f6:
                    dc:fd:b9:60:d9:b2:8c:43:54:1e:b8:3c:f7:be:02:
                    9a:52:0b:13:a6:51:a6:34:a3:14:76:8e:67:db:06:
                    a8:83:a0:2c:04:69:77:46:31:4e:04:d4:9f:9e:4f:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D1:94:3A:E3:B0:F3:BC:78:26:9B:25:A5:DE:97:69:0D:3D:62:C4
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131312e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:fc:68:a9:48:62:da:94:f3:b2:40:65:49:9f:14:0a:c2:c5:
         0b:0d:67:08:e9:49:3c:51:dc:8b:a4:83:13:f3:bc:fc:80:af:
         1f:99:32:18:0b:40:8f:24:7d:e1:7b:3f:30:03:12:5c:3f:bb:
         7e:d7:db:41:21:0f:0c:42:de:36:81:12:62:7c:a6:23:c3:4e:
         cb:d1:ba:84:b9:37:d5:9e:a8:30:db:fd:16:4e:8d:c9:f2:55:
         40:09:f2:d8:76:b3:67:01:47:f3:7a:b7:58:bb:9b:24:e9:e6:
         3f:2b:33:d3:10:35:1d:c8:2e:bf:bd:94:a2:af:da:f7:ea:ff:
         7d:4d:f3:87:e3:de:fe:97:d7:72:54:54:c5:1b:4d:b9:e9:28:
         9c:98:38:27:74:6f:a3:90:14:ab:05:6d:0e:6a:6c:2b:6c:a0:
         5c:3d:95:b8:6c:70:b4:7c:16:62:05:1f:c6:20:47:0e:f5:e3:
         8c:67:aa:73:0e:54:1a:22:3f:41:b2:f8:67:da:82:42:76:80:
         43:b2:d0:69:ff:c8:4d:a6:a5:21:78:12:0e:d9:66:21:f0:6d:
         6d:86:3b:99:12:d9:e1:46:24:9a:fd:4e:0e:c8:ea:48:64:15:
         2c:d1:cc:21:b3:38:3e:d6:e9:87:8f:4c:61:f4:6c:72:6c:b5:
         1d:e7:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:42 2026 by rpki-client