This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/34352e342e3133362e302f32322d3234203d3e203237383834.roa
File:                     34352e342e3133362e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          vpUKemOLqDRnzu2fkqA5TUl9fP/J+QZzT4L+X5BRdsI=
Subject key identifier:   6E:7A:F3:5E:B8:7E:C9:4F:BF:29:FD:CB:53:A5:D6:4C:A1:F0:52:08
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       7DC2B1D421DED52BCBA8BE7C7C470036EE35A613
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/34352e342e3133362e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 06 Jan 2026 20:52:31 +0000
ROA not before:           Tue 06 Jan 2026 20:47:31 +0000
ROA not after:            Tue 05 Jan 2027 20:52:31 +0000
asID:                     27884
IP address blocks:        45.4.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c2:b1:d4:21:de:d5:2b:cb:a8:be:7c:7c:47:00:36:ee:35:a6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Jan  6 20:47:31 2026 GMT
            Not After : Jan  5 20:52:31 2027 GMT
        Subject: CN=6E7AF35EB87EC94FBF29FDCB53A5D64CA1F05208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:1e:79:84:1b:d7:e1:64:4c:28:7c:6c:2b:
                    ca:14:fb:1b:cc:47:01:c4:20:59:dc:b6:8e:67:ec:
                    67:2b:48:82:ee:72:04:db:e7:f5:e4:b1:92:7e:73:
                    87:02:ac:56:13:f2:a0:8d:6e:20:66:df:97:91:b8:
                    81:91:9b:bb:b8:16:3e:0f:5b:4e:02:24:f3:9f:39:
                    36:bc:88:7e:cf:9d:8e:71:ae:5d:ea:09:10:74:0d:
                    5a:20:0b:43:cc:10:d8:a2:57:28:f1:44:1f:f5:7c:
                    9f:8f:54:a4:61:93:da:39:aa:a6:8c:43:c7:3d:ba:
                    d2:26:78:fb:c1:08:4f:e6:07:8d:12:99:b2:e1:21:
                    06:bc:52:c8:09:1e:b9:95:b4:a3:65:3f:57:59:dc:
                    cd:65:a6:1a:92:71:2b:84:e9:a4:94:6f:0b:d0:c8:
                    3c:2d:8a:0a:d3:37:6f:35:1f:41:7e:d1:b4:ce:98:
                    87:28:cb:7a:ed:1f:db:d4:ce:98:f5:9b:c5:7f:7e:
                    35:30:77:bb:74:58:ed:4a:8c:43:9a:30:28:ab:ca:
                    3f:94:56:37:34:50:38:9e:9a:d9:2f:21:5f:25:d3:
                    07:55:0f:dc:ba:e2:c4:ad:89:54:bb:d4:d4:13:1b:
                    af:60:f9:94:f9:db:5f:70:65:19:98:c9:9a:da:41:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:F3:5E:B8:7E:C9:4F:BF:29:FD:CB:53:A5:D6:4C:A1:F0:52:08
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/34352e342e3133362e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:0c:a4:51:08:b7:62:b7:89:1f:0f:99:ab:3c:5f:5c:6b:fc:
         4f:02:c8:c9:6a:86:07:ea:c3:5d:5b:07:fc:0c:8f:f3:0e:6c:
         f3:91:b8:1c:30:db:4d:e9:cb:b3:73:36:21:83:e2:9f:7e:45:
         f2:11:05:fa:2c:04:4a:a5:9f:1a:ce:35:13:97:35:1b:8f:3d:
         a5:60:a1:5e:6b:05:47:8c:2c:c8:62:96:02:dd:7a:3d:7b:de:
         a8:52:58:ad:00:1b:b0:da:33:4e:a6:0f:04:32:32:eb:a8:97:
         a8:f2:87:35:d1:be:0c:8d:fd:32:08:f6:de:bf:4d:2f:a6:af:
         bc:57:a4:53:28:55:60:c8:fb:ec:b8:42:0e:30:86:68:29:0e:
         f1:d7:e5:b4:b2:38:04:55:ad:63:4d:8f:bd:8b:7e:3e:22:8c:
         31:ad:c0:e3:d9:9d:cb:12:fc:c0:ae:d2:b2:50:3a:60:ac:57:
         91:1f:65:03:51:8f:7f:ed:8e:24:e6:be:4d:a5:8f:aa:32:35:
         d3:cc:70:90:23:1e:ef:24:cd:c6:53:88:47:ad:ca:b5:ad:a0:
         93:89:d2:53:94:13:8e:48:8f:31:30:f6:77:19:5e:45:81:58:
         ad:d0:42:e4:97:2d:0f:72:43:4f:c0:3e:05:e3:b5:a2:a8:1d:
         0f:4c:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:00:32 2026 by rpki-client