This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/34352e3232392e3230342e302f32322d3234203d3e20323636373231.roa
File:                     34352e3232392e3230342e302f32322d3234203d3e20323636373231.roa (raw, json)
Hash identifier:          GCX5aET24Cn2c+NVewBTDDRaY8xBnUyxIBQLQVP8Mu0=
Subject key identifier:   0F:D6:E3:40:41:A4:5C:64:1B:35:62:62:34:28:18:0A:CA:B7:C8:7B
Certificate issuer:       /CN=E84F144969E820C9D6A078340F2D2DFBB8604F63
Certificate serial:       5E1F8E91107B82988EB239B5CE6DFFB05B5B371A
Authority key identifier: E8:4F:14:49:69:E8:20:C9:D6:A0:78:34:0F:2D:2D:FB:B8:60:4F:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/34352e3232392e3230342e302f32322d3234203d3e20323636373231.roa
Signing time:             Tue 06 Jan 2026 20:58:37 +0000
ROA not before:           Tue 06 Jan 2026 20:53:37 +0000
ROA not after:            Tue 05 Jan 2027 20:58:37 +0000
asID:                     266721
IP address blocks:        45.229.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 00:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1f:8e:91:10:7b:82:98:8e:b2:39:b5:ce:6d:ff:b0:5b:5b:37:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84F144969E820C9D6A078340F2D2DFBB8604F63
        Validity
            Not Before: Jan  6 20:53:37 2026 GMT
            Not After : Jan  5 20:58:37 2027 GMT
        Subject: CN=0FD6E34041A45C641B3562623428180ACAB7C87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:5e:48:c1:21:de:77:34:71:77:f0:5b:be:
                    b3:db:db:78:1d:69:6e:60:5e:1e:8e:a1:e4:47:e4:
                    14:84:f6:19:62:f6:57:a4:ac:e0:0e:c6:9c:6d:d6:
                    ba:e3:93:8b:38:af:63:33:d8:97:1e:dc:d5:65:a2:
                    fc:8d:d6:29:4e:c6:f1:cb:8f:21:bd:b5:5e:d9:07:
                    6c:d2:13:90:47:af:8b:8e:bb:d5:b5:5d:cd:56:48:
                    4c:bd:71:39:2a:01:06:bb:04:05:d0:e6:bb:ad:9e:
                    4e:b8:56:12:9b:32:e6:af:c6:07:ed:46:4e:5d:c9:
                    3a:b0:45:14:e2:43:06:d6:a7:fd:78:2a:e5:99:7e:
                    2d:9c:9e:eb:4c:4b:22:82:0e:f9:01:eb:da:5e:bc:
                    2a:24:a6:7d:ef:c4:b2:12:20:93:a8:bc:27:fd:f9:
                    97:c6:3a:dd:b0:89:73:fb:f3:07:1c:0f:0a:b7:06:
                    c5:22:2c:ff:61:ae:d5:af:43:cf:88:61:3a:6d:de:
                    5a:5d:59:3e:52:18:f3:98:78:70:4f:ec:8e:fd:f9:
                    9b:dc:ec:4a:9e:b1:68:6f:7c:bc:28:2b:57:d8:83:
                    fd:d3:00:7c:bc:66:46:3c:4e:b9:47:fd:e8:35:bc:
                    09:48:82:b0:cc:08:4e:97:fc:c5:6a:1c:8e:b5:26:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:E3:40:41:A4:5C:64:1B:35:62:62:34:28:18:0A:CA:B7:C8:7B
            X509v3 Authority Key Identifier:
                keyid:E8:4F:14:49:69:E8:20:C9:D6:A0:78:34:0F:2D:2D:FB:B8:60:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E84F144969E820C9D6A078340F2D2DFBB8604F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBD96401DE4D7188856DD4964F02A94BC693C863352C2C186F6237F91268715E/0/34352e3232392e3230342e302f32322d3234203d3e20323636373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:d4:d9:31:4d:b3:bd:d6:76:d8:6c:2c:77:2c:cb:07:df:
         c1:44:2c:73:79:86:0f:ba:a8:c2:c5:f0:b0:11:b4:57:76:be:
         76:68:db:5f:a7:43:6b:ed:cc:1e:ab:0b:39:4f:15:70:a2:62:
         79:55:b8:25:79:d7:ba:be:a5:11:15:60:d2:5b:0e:6b:9e:19:
         c4:f2:4f:46:44:11:77:2e:cd:a4:be:2a:10:67:cc:ad:50:97:
         fd:5a:94:9e:a6:a3:46:13:0d:44:df:c4:34:3e:4c:da:b5:48:
         32:54:10:f3:8b:ac:ff:58:4b:35:94:84:c5:00:56:90:74:65:
         44:a9:fb:9e:cf:cf:fc:1a:a5:49:31:1a:16:70:7b:5d:4b:9c:
         cb:37:4e:d5:2e:9d:02:4d:87:ea:1b:28:44:84:33:e4:d6:59:
         84:80:65:1e:0c:14:77:5b:e9:02:fb:98:0d:32:a9:ac:8c:78:
         73:19:6b:d7:9c:3b:05:a8:0b:d5:99:34:50:c7:34:ed:14:0c:
         41:08:23:6e:cf:e8:73:d1:f9:fa:3b:37:97:05:af:8d:f3:ab:
         c2:5f:ca:14:4b:82:a8:a3:e8:04:cf:5a:2f:49:2a:0a:17:f3:
         cd:e7:9d:8e:fc:79:a9:5f:76:29:84:2f:98:cc:ba:33:7e:40:
         95:ab:6b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:19:35 2026 by rpki-client