This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/34352e3138352e32302e302f32322d3234203d3e20323633323232.roa
File:                     34352e3138352e32302e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          1vRGJlxEBOq+/cu+9DAujMdCDa8FXVVA7pvHRqj4ZgA=
Subject key identifier:   9A:32:6A:C1:15:C7:BE:5B:F8:F9:EE:C4:DB:1E:AC:80:E1:02:A6:6C
Certificate issuer:       /CN=303D9AA210B739FDFB020F6AEAF9959B0A8B94F6
Certificate serial:       1349866F6A1DA46C8B562A3297553E5E9D95F509
Authority key identifier: 30:3D:9A:A2:10:B7:39:FD:FB:02:0F:6A:EA:F9:95:9B:0A:8B:94:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/34352e3138352e32302e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 06 Jan 2026 19:26:32 +0000
ROA not before:           Tue 06 Jan 2026 19:21:32 +0000
ROA not after:            Tue 05 Jan 2027 19:26:32 +0000
asID:                     263222
IP address blocks:        45.185.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:49:86:6f:6a:1d:a4:6c:8b:56:2a:32:97:55:3e:5e:9d:95:f5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D9AA210B739FDFB020F6AEAF9959B0A8B94F6
        Validity
            Not Before: Jan  6 19:21:32 2026 GMT
            Not After : Jan  5 19:26:32 2027 GMT
        Subject: CN=9A326AC115C7BE5BF8F9EEC4DB1EAC80E102A66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:cc:04:18:d8:0d:d2:2a:d6:07:63:f0:5e:
                    9b:11:1c:3a:17:c5:13:dc:78:d5:01:0a:63:80:a7:
                    b3:da:7f:66:94:85:70:9f:b2:4c:fa:57:b5:35:a3:
                    61:5a:fb:08:a4:07:7c:9e:84:cb:48:5a:f1:b9:91:
                    1f:5b:81:6a:59:d5:cb:d5:8c:90:22:60:0c:ec:e5:
                    11:3a:1e:82:18:9e:fe:68:2b:60:45:91:ea:0c:cb:
                    83:bd:d7:31:4c:b8:a0:1c:94:6d:e7:e9:df:60:bb:
                    7a:cb:3a:e3:66:d9:db:ae:67:d8:41:df:6c:33:c4:
                    34:89:63:8a:75:d7:88:5b:b0:02:e7:e3:e9:f9:19:
                    01:a5:5a:af:f3:9d:30:ed:5c:c4:6a:5a:a3:45:06:
                    09:1c:2a:92:ec:7d:40:6d:04:5d:98:1d:a0:84:0b:
                    db:f7:00:0c:b9:8a:f0:7e:f0:6d:e5:ef:33:56:d6:
                    ef:65:fb:21:8d:20:34:27:f1:99:47:11:10:d9:ef:
                    ee:35:8f:da:06:15:bd:c7:5c:56:b9:4a:e4:2e:97:
                    f7:88:ac:4a:5b:33:87:44:35:c3:c1:97:72:8a:c6:
                    54:bb:a6:d2:3f:c0:c0:d7:b9:13:6b:0b:17:9f:63:
                    e5:f6:05:83:b8:a6:06:56:7e:c9:6b:db:37:b9:58:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:32:6A:C1:15:C7:BE:5B:F8:F9:EE:C4:DB:1E:AC:80:E1:02:A6:6C
            X509v3 Authority Key Identifier:
                keyid:30:3D:9A:A2:10:B7:39:FD:FB:02:0F:6A:EA:F9:95:9B:0A:8B:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/34352e3138352e32302e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:51:bf:01:4a:36:56:63:d7:41:ba:80:15:7f:59:ce:7f:
         af:4f:0b:15:3c:91:4a:c6:49:53:50:5c:5d:c2:15:f9:e9:9d:
         cc:e3:fc:2d:6e:10:00:63:f5:6f:e6:e2:73:95:e3:a5:bf:c7:
         06:78:8f:2c:64:2c:d4:c6:fc:87:4a:34:a7:14:61:df:c8:da:
         83:7a:5f:df:86:cf:6f:d4:5a:16:c1:90:f9:74:90:aa:ac:c5:
         13:1e:22:bc:0f:28:5f:03:25:c1:0d:9c:f4:b3:29:32:97:6e:
         7f:ce:a0:81:19:03:bf:0c:df:4a:14:31:4e:93:d4:56:58:8d:
         83:69:ac:49:49:92:3a:51:72:80:1f:98:12:a9:07:e6:12:c9:
         66:5e:0a:28:35:86:b9:78:9a:2c:b5:9f:3a:81:08:12:04:80:
         c8:b7:98:2d:8f:a9:7a:1b:e9:cd:6e:c4:8f:74:cf:96:02:97:
         df:ef:28:7b:b0:bf:5f:5c:82:50:65:91:49:46:1f:7b:f7:bc:
         a9:2a:ae:a5:cf:42:8d:86:33:c4:74:7d:a0:33:68:64:fa:cc:
         ec:38:a4:79:34:05:4b:cd:79:1c:c2:76:d4:ed:65:4e:7e:94:
         85:ce:9f:15:7f:a8:4b:fe:00:65:5b:92:08:32:43:c3:cf:08:
         b8:e5:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:08:18 2026 by rpki-client