This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/34352e3233362e39322e302f32322d3234203d3e203237393833.roa
File:                     34352e3233362e39322e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          BlAa6K6YmyMWiJm/2+Gl2xxW5zeY3HcsRLBTi6NyrcA=
Subject key identifier:   78:08:46:13:E7:43:27:85:C5:5C:C1:D7:60:B1:3B:0D:4B:1A:81:12
Certificate issuer:       /CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA
Certificate serial:       0F0119CC53F2B76D5821923941B713CCEFB9EB59
Authority key identifier: 7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/34352e3233362e39322e302f32322d3234203d3e203237393833.roa
Signing time:             Tue 06 Jan 2026 20:50:22 +0000
ROA not before:           Tue 06 Jan 2026 20:45:22 +0000
ROA not after:            Tue 05 Jan 2027 20:50:22 +0000
asID:                     27983
IP address blocks:        45.236.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:19:cc:53:f2:b7:6d:58:21:92:39:41:b7:13:cc:ef:b9:eb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA
        Validity
            Not Before: Jan  6 20:45:22 2026 GMT
            Not After : Jan  5 20:50:22 2027 GMT
        Subject: CN=78084613E7432785C55CC1D760B13B0D4B1A8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:a9:e8:68:78:27:3e:aa:c3:94:84:97:17:
                    cc:f1:31:1e:23:e5:7f:13:db:9b:c9:0f:7c:d0:1d:
                    ec:de:07:c0:84:64:ba:df:39:88:8a:fd:bc:2e:be:
                    6a:28:be:f1:bf:19:c7:1a:d3:01:e6:3f:24:ce:f2:
                    37:b7:ed:f2:f6:a9:f9:9c:85:f9:2b:a8:bf:0f:31:
                    af:12:8b:b5:ec:bf:5a:30:e4:c5:d4:b0:53:f4:b2:
                    0c:a3:19:be:f0:38:45:85:f9:02:2f:29:86:d7:a1:
                    3a:f7:7f:c2:a3:4b:43:e9:c0:e7:a7:0c:fc:7c:f7:
                    3a:d5:5f:f1:05:af:7d:3d:b8:02:8d:3e:35:bc:64:
                    df:c9:00:de:b1:41:89:13:d0:98:aa:04:f9:45:85:
                    d6:d3:af:47:2b:0c:35:78:43:3a:f1:f8:60:8d:cd:
                    2c:21:31:fa:81:6d:c2:8a:1d:19:34:38:d8:00:7c:
                    8a:f6:64:2f:99:05:1e:3c:98:eb:77:01:69:15:f0:
                    7e:43:8b:62:e3:0d:0a:ec:e5:87:3c:51:5e:7b:56:
                    05:d8:c3:00:1a:a9:fc:c5:b7:2e:47:10:b2:92:0a:
                    24:bd:6b:60:1a:b4:3a:fa:d1:9f:5d:e0:3b:78:e1:
                    79:24:3b:e7:b8:1e:ac:b8:5b:44:a7:f0:6b:a1:05:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:46:13:E7:43:27:85:C5:5C:C1:D7:60:B1:3B:0D:4B:1A:81:12
            X509v3 Authority Key Identifier:
                keyid:7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/34352e3233362e39322e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:15:ef:2d:d3:67:4f:ad:00:7d:e6:51:d3:70:64:51:c0:84:
         6a:b9:46:32:02:5c:ce:8c:28:6e:d0:4c:f8:82:56:31:b3:28:
         f1:05:a8:a8:74:d0:7d:32:96:b6:e2:c8:2d:53:02:46:d0:d4:
         16:95:85:67:50:e0:08:4b:14:1f:35:e6:c0:be:0f:5a:a3:e7:
         f1:a6:2b:b6:8b:20:41:17:4d:ab:f5:a3:96:55:60:da:10:06:
         45:62:ca:98:d4:bd:33:94:7c:16:dd:7f:17:c8:53:66:1e:3a:
         8a:69:bd:53:b8:10:37:7e:48:a5:9d:4f:61:83:4b:b2:29:c7:
         61:91:e0:88:30:a2:4e:2d:c0:c8:42:4b:65:47:4c:56:56:a7:
         9f:6a:e6:64:e2:6c:f6:cf:f1:e5:0c:db:cf:5e:28:1e:9f:40:
         17:a8:2f:81:13:6c:d6:f7:77:4d:af:a9:62:7a:31:d1:d7:04:
         61:4f:a2:2e:df:97:ce:f5:61:52:00:59:5b:a5:a4:10:81:de:
         86:97:24:8f:5b:72:4b:43:dc:86:52:f2:2f:df:d7:b9:8a:b1:
         e9:eb:fc:3a:d8:69:74:d9:a2:c2:b1:38:02:bd:25:51:4b:47:
         96:f3:30:4f:a8:f3:96:f5:dc:28:6c:1f:d1:81:8a:c1:d2:12:
         5f:38:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:52 2026 by rpki-client