This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32322d3232203d3e20323637383038.roa
File:                     34352e3137322e32342e302f32322d3232203d3e20323637383038.roa (raw, json)
Hash identifier:          zlPIgQC/4PwPWEFMyB9ubM/y1vHabWbHIeU0h2WGbIA=
Subject key identifier:   00:E0:B4:8D:CF:4F:48:33:01:54:46:04:00:DB:97:EA:F9:4B:32:AB
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       5A57A9D80790275BFEEF2BA39B233DE4CD132E2D
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32322d3232203d3e20323637383038.roa
Signing time:             Tue 06 Jan 2026 20:53:35 +0000
ROA not before:           Tue 06 Jan 2026 20:48:35 +0000
ROA not after:            Tue 05 Jan 2027 20:53:35 +0000
asID:                     267808
IP address blocks:        45.172.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:57:a9:d8:07:90:27:5b:fe:ef:2b:a3:9b:23:3d:e4:cd:13:2e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Jan  6 20:48:35 2026 GMT
            Not After : Jan  5 20:53:35 2027 GMT
        Subject: CN=00E0B48DCF4F48330154460400DB97EAF94B32AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:ff:f4:04:33:67:75:8e:76:d1:0d:07:aa:
                    ab:95:3d:92:35:e6:74:6f:4b:be:1c:4a:73:58:8b:
                    c3:ce:4c:1f:e3:d1:d5:05:ca:28:14:19:c0:a9:b7:
                    d9:fe:45:d0:94:af:77:39:e6:db:52:dc:2a:ff:ea:
                    0e:5f:10:cb:28:6e:cd:3a:b2:ce:34:00:28:f3:97:
                    1a:36:33:37:55:7c:e6:ce:28:66:fa:3c:b3:a2:7f:
                    36:aa:90:79:e0:8d:d5:17:9f:cf:b0:47:d8:0a:8b:
                    0b:31:9c:8a:d6:0b:08:28:66:5e:38:04:21:48:4d:
                    41:bb:95:4d:d5:41:e0:98:7d:2c:5f:b8:f8:43:3c:
                    c4:24:06:4e:56:d7:9e:2b:12:56:90:78:31:84:e0:
                    27:64:a4:31:c3:4f:ac:aa:a5:98:29:c0:1a:7b:6f:
                    1e:96:d1:0f:01:88:07:ea:18:33:aa:d7:e2:0e:76:
                    6e:06:6d:13:c9:12:fd:b5:ff:c1:8d:27:ea:06:0d:
                    ec:d8:65:d7:65:66:33:ca:a5:28:1e:bf:fb:e0:88:
                    87:37:e6:b0:da:15:b9:f8:e4:b7:58:1a:6d:ee:cb:
                    74:9b:d8:3b:ca:3e:9c:27:df:46:6c:e9:fd:e9:4b:
                    46:cb:4e:ea:53:2c:3c:64:6f:ed:61:ad:4d:bf:27:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:B4:8D:CF:4F:48:33:01:54:46:04:00:DB:97:EA:F9:4B:32:AB
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32322d3232203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:3f:87:de:48:4f:19:7e:cc:6f:c5:9e:8a:58:36:f1:87:
         2e:c6:a5:cb:dc:b1:eb:e4:1e:0f:44:be:6d:43:f0:b2:0a:de:
         e7:1b:0c:e8:cc:34:6f:cc:96:33:59:0d:3d:d7:7b:25:b7:40:
         e4:05:8d:51:13:0d:af:79:ff:8a:dc:32:f6:df:19:2a:aa:82:
         d8:eb:fa:56:fb:a4:31:7e:bf:a6:0f:c9:77:73:dd:dc:a5:df:
         e2:a5:ee:b6:18:96:33:fb:c8:11:37:6a:e2:3d:05:7f:5f:94:
         e1:5e:f7:3b:45:7c:9a:6e:cc:03:fc:8a:03:8d:ec:4c:d8:92:
         2b:1c:3b:30:6d:0c:02:3e:d4:bd:17:1b:d4:74:cb:e0:3a:72:
         f9:44:b3:0a:72:87:1e:2c:cb:59:3c:9c:cb:13:d7:82:b1:a7:
         11:44:7f:95:2f:f8:d4:78:4e:2b:48:41:0f:87:b0:3f:f2:39:
         79:6a:cc:38:07:85:ca:8c:dd:0b:6c:85:28:e5:33:46:bd:b8:
         a3:09:57:ca:0b:b9:86:4f:13:ce:18:ab:17:37:71:ed:28:b1:
         3b:9a:8e:e8:49:f1:75:69:ef:ef:25:91:cf:9b:4b:33:64:37:
         9e:9b:be:9d:f3:56:0d:e1:fe:f9:0b:66:23:28:29:f7:b9:96:
         f4:90:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:24 2026 by rpki-client