This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa
File:                     34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa (raw, json)
Hash identifier:          FAQMS1tDNF543pZt5afQQOBcBXmPuwrz9wh0+36v16I=
Subject key identifier:   22:58:23:59:73:81:CC:B1:1C:1E:40:F1:5B:84:9F:09:F5:C8:1B:54
Certificate issuer:       /CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92
Certificate serial:       044A0FC5390156EF6746ABD28F9B5A28D97AF69F
Authority key identifier: B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa
Signing time:             Tue 06 Jan 2026 19:18:30 +0000
ROA not before:           Tue 06 Jan 2026 19:13:30 +0000
ROA not after:            Tue 05 Jan 2027 19:18:30 +0000
asID:                     265610
IP address blocks:        45.189.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4a:0f:c5:39:01:56:ef:67:46:ab:d2:8f:9b:5a:28:d9:7a:f6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92
        Validity
            Not Before: Jan  6 19:13:30 2026 GMT
            Not After : Jan  5 19:18:30 2027 GMT
        Subject: CN=225823597381CCB11C1E40F15B849F09F5C81B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:54:0a:02:f3:ca:aa:63:58:2e:70:5e:9b:
                    cb:06:a2:6e:ea:bd:cc:5a:9f:39:da:cd:bf:6c:25:
                    22:0d:49:54:fb:45:d4:23:c2:94:3c:4b:bf:42:2a:
                    8c:ea:bd:c4:d0:1d:98:10:f9:69:63:9c:39:fa:c9:
                    51:c3:26:5d:48:1d:c8:ff:da:18:af:74:6f:3a:51:
                    9b:c8:de:37:15:72:b2:86:cf:85:2e:56:47:aa:5e:
                    01:06:42:1f:0e:96:58:65:b2:78:39:0e:a6:59:31:
                    47:fa:64:0c:d7:29:f5:12:43:b8:7f:8b:0a:51:2b:
                    cf:ba:98:32:71:21:7f:05:5d:a5:5e:0b:47:4f:7a:
                    be:7d:5a:cc:30:b3:1b:3b:53:b2:b9:ce:db:84:d7:
                    c4:50:3a:77:28:ab:3a:d0:f0:dd:a5:02:01:a1:a4:
                    8f:f1:43:20:f5:91:8f:10:4a:38:b0:81:b5:01:65:
                    f9:9e:76:e2:4c:c2:87:22:42:66:f8:1e:c4:58:dc:
                    12:c9:25:5f:a6:81:ba:23:e7:ae:50:6e:76:a9:27:
                    9f:19:0c:15:92:11:4b:a9:e0:28:5d:7b:93:c8:e2:
                    48:f8:a2:1c:fc:b8:ec:dc:a1:ed:6f:a4:27:c1:73:
                    bf:b4:8c:7b:27:71:ee:25:c6:74:17:ec:dd:9c:ea:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:23:59:73:81:CC:B1:1C:1E:40:F1:5B:84:9F:09:F5:C8:1B:54
            X509v3 Authority Key Identifier:
                keyid:B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:0f:b6:b5:8e:6d:7d:57:ce:67:3f:eb:3e:fc:9b:5d:66:37:
         55:a9:68:2f:db:e0:ee:e8:41:ed:2b:7c:89:0c:bc:b5:c2:7d:
         fa:4f:69:e0:39:31:79:2f:6f:a6:04:07:f8:f7:b7:dc:fa:58:
         e2:be:21:ef:bc:cb:8e:50:90:dc:41:fd:c8:5a:12:7e:16:d4:
         f6:2c:a3:cd:ce:53:22:38:ff:84:70:c8:6c:cf:a9:43:49:13:
         c4:9d:fb:1e:d9:5e:a1:b5:9c:64:57:00:e5:ff:b8:b1:2f:de:
         d8:0b:57:13:3d:8c:72:46:98:04:e4:ad:21:c7:25:5e:bb:1e:
         76:a0:ef:a2:6f:04:da:c8:fd:16:e3:99:a0:c5:cd:45:ed:98:
         cb:82:75:34:98:62:ee:38:20:40:dd:65:b1:4e:a6:c0:13:85:
         34:c3:df:49:69:62:6b:65:68:ae:b6:e2:68:d2:2d:6a:d8:71:
         9f:79:ba:aa:b6:c9:f9:77:a2:3b:9d:62:6a:41:ba:ae:ed:9c:
         9a:87:12:45:59:76:5b:ea:aa:8e:ae:cb:6c:16:80:44:db:55:
         c7:22:bf:50:24:23:d5:6b:d4:19:68:69:23:75:48:c4:ae:80:
         ad:92:c8:be:34:0a:30:69:e7:16:ae:84:1a:cf:5d:0c:2b:6b:
         2e:f2:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 06:13:42 2026 by rpki-client