This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233342e302f32342d3234203d3e2033353439.roa
File:                     34352e3137362e3233342e302f32342d3234203d3e2033353439.roa (raw, json)
Hash identifier:          g4ribeOSWEtzrTgSnGaMVjCDjbpQUT5lognEbl7MCbY=
Subject key identifier:   9F:4E:E7:5C:3E:34:68:8F:F0:D6:D5:82:E4:0E:AD:08:76:07:56:68
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       7B65316713351206C1E9AEDC0EFF27226855984E
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233342e302f32342d3234203d3e2033353439.roa
Signing time:             Tue 06 Jan 2026 19:41:48 +0000
ROA not before:           Tue 06 Jan 2026 19:36:48 +0000
ROA not after:            Tue 05 Jan 2027 19:41:48 +0000
asID:                     3549
IP address blocks:        45.176.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:31:67:13:35:12:06:c1:e9:ae:dc:0e:ff:27:22:68:55:98:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Jan  6 19:36:48 2026 GMT
            Not After : Jan  5 19:41:48 2027 GMT
        Subject: CN=9F4EE75C3E34688FF0D6D582E40EAD0876075668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:14:0c:02:01:05:0f:a1:62:dd:8b:a1:92:
                    fa:7d:52:3f:53:eb:52:48:62:95:50:b0:cb:7e:a3:
                    3f:c5:ee:65:9c:c5:f7:e3:eb:61:77:78:e9:76:b3:
                    b5:1a:35:c6:34:72:91:47:f1:ab:6f:47:1c:ef:a2:
                    30:51:c5:35:5a:f4:bd:33:52:80:92:1c:4b:1b:04:
                    3e:99:b1:06:db:e0:0b:37:8c:92:bb:fc:ea:53:a8:
                    df:4d:69:11:9f:c4:ec:a8:7c:fa:84:c1:cf:d7:dc:
                    4b:5b:d8:27:81:cb:6e:93:de:c7:69:4c:96:f1:52:
                    3b:c0:ea:a2:fe:f0:c1:fb:71:a0:5a:ec:d5:e3:27:
                    5c:ef:18:5c:d7:39:a7:1e:e8:c5:29:21:6b:36:e2:
                    0a:bf:c7:7a:e9:ec:19:c8:41:1b:a7:c5:ee:94:8a:
                    ad:15:fa:e6:94:2a:01:1b:cf:15:80:5d:9d:9e:4d:
                    c3:0b:d5:c3:13:02:47:99:57:e9:a3:a5:5f:26:b5:
                    ae:44:0e:33:42:3d:bd:36:c1:4c:a3:b5:2b:72:cb:
                    82:7d:7f:b1:1d:36:c1:9a:82:8d:87:56:62:e9:a1:
                    9c:c4:d4:ec:d3:4a:89:56:87:b3:36:fc:d4:e2:71:
                    2b:f3:8a:8f:22:40:60:c1:7d:84:f4:11:b7:c5:a9:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4E:E7:5C:3E:34:68:8F:F0:D6:D5:82:E4:0E:AD:08:76:07:56:68
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233342e302f32342d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:ef:50:0b:ad:50:0e:cc:13:e2:cb:83:34:ed:65:5b:f6:90:
         f7:06:a7:4b:89:09:d6:2f:79:cf:89:4e:2e:6b:e0:b0:91:52:
         17:dd:e1:a3:c6:87:e4:8d:d0:c7:41:35:85:3a:00:e0:68:11:
         1d:0b:12:7f:0b:a2:4b:af:be:21:4b:4c:eb:da:b7:a2:f1:9e:
         f9:28:ab:ac:db:28:6c:7c:b7:2c:13:a9:d0:40:bc:7c:61:0a:
         f9:e1:d8:d5:f1:3c:5f:68:59:4c:cb:c9:6c:49:fa:8a:1d:ce:
         72:9a:b0:4c:cf:97:c7:d3:98:fb:ae:13:d2:a2:7b:ab:57:40:
         13:0e:25:2d:ab:79:04:2c:64:86:1a:d7:b8:03:4b:50:55:2e:
         f4:a0:8f:4e:57:f2:0f:ec:26:e5:b2:82:61:b5:07:48:06:3b:
         d5:0b:48:85:49:5c:4d:82:28:e1:5c:9c:65:31:e5:ef:09:5d:
         07:e7:22:87:23:45:64:b5:37:8c:89:5d:bb:87:60:44:10:a3:
         66:36:a6:fb:e0:78:9b:f0:82:10:0b:5d:e7:81:5d:3f:7f:48:
         15:4c:3a:e9:9b:9a:19:d4:aa:62:13:8e:a9:42:3d:bc:cf:e1:
         53:c9:e9:6b:e8:23:33:a6:33:73:40:e5:98:4b:ff:5f:00:7a:
         e2:25:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:46:11 2026 by rpki-client