This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32342e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          Bx7z7KsEfOp2pSO/Un3nDHaCqF0v7ZnSMHvwFC3bpBs=
Subject key identifier:   FE:D1:1D:3C:4D:76:EB:75:FB:B0:59:F4:06:A7:6D:EE:09:8C:2A:C0
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       75C7C5C354922B054D14A8FDA3ED3357703D1ECC
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 06 Jan 2026 20:53:36 +0000
ROA not before:           Tue 06 Jan 2026 20:48:36 +0000
ROA not after:            Tue 05 Jan 2027 20:53:36 +0000
asID:                     267808
IP address blocks:        45.172.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c7:c5:c3:54:92:2b:05:4d:14:a8:fd:a3:ed:33:57:70:3d:1e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Jan  6 20:48:36 2026 GMT
            Not After : Jan  5 20:53:36 2027 GMT
        Subject: CN=FED11D3C4D76EB75FBB059F406A76DEE098C2AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:09:78:72:0a:1c:80:c0:e5:99:47:29:d6:
                    d1:f4:10:7e:90:d8:81:dc:07:6b:90:5a:49:a7:a2:
                    f4:8a:73:52:9b:05:c4:dd:f7:b1:aa:b6:28:61:98:
                    7e:d0:d9:77:cf:4a:73:d7:fc:94:70:68:e5:92:27:
                    e4:12:97:aa:c2:58:bc:c9:8c:29:ee:64:ca:4b:c2:
                    11:2e:b7:a5:4d:8e:24:8c:81:84:5e:c4:e8:79:20:
                    a8:a7:06:fc:c7:82:8f:c6:2f:d0:66:fc:4a:3b:21:
                    5e:b5:9d:ab:49:b8:bc:8a:5c:ed:30:8f:db:47:d2:
                    e7:44:25:fa:76:c9:e1:5e:65:c5:35:c0:c8:bc:31:
                    87:c5:95:7f:a3:b5:96:a2:de:c1:73:d5:ef:87:3c:
                    0f:6c:3b:d7:47:23:d2:52:16:fc:77:01:1f:a0:a7:
                    b0:5c:c6:7b:ee:c9:5e:52:d9:8d:c8:1b:ac:c8:2f:
                    9e:b8:6e:65:5d:5c:0e:08:f0:37:60:e1:92:a7:36:
                    7a:0f:be:eb:17:38:b8:9f:82:3a:a9:b4:fb:b3:4b:
                    e3:7e:33:f1:64:bd:6c:2b:68:3e:2f:03:55:39:25:
                    26:a8:ba:d5:33:91:01:4e:db:ad:bd:dc:6f:a8:c1:
                    6f:75:60:d1:04:12:88:33:61:34:56:0d:59:f1:c7:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:1D:3C:4D:76:EB:75:FB:B0:59:F4:06:A7:6D:EE:09:8C:2A:C0
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:87:0e:0f:08:84:97:fe:bc:39:d6:cf:3c:8c:47:b1:b1:c9:
         f5:8d:03:49:5f:00:b1:53:18:d6:05:3b:7e:40:09:44:2f:7d:
         5f:75:c8:5f:f4:0f:93:77:1e:42:45:ca:8f:e0:d9:a1:f2:a2:
         3d:65:e6:86:3f:51:42:c8:08:37:7d:6d:dc:be:7b:fa:f1:03:
         97:4b:26:53:4f:14:49:c4:fc:92:16:b8:f6:22:94:6a:45:45:
         30:1b:22:1a:74:17:7e:34:57:64:a8:e4:48:de:62:ab:1f:e7:
         fb:b4:d4:9d:bb:81:ad:c7:b4:af:5d:f6:29:f5:f6:46:63:1c:
         9f:94:43:a4:99:c5:cc:77:14:4f:d2:be:5c:b6:b3:9a:ee:dc:
         73:d1:07:f5:d3:4e:e8:c2:2e:e3:6c:85:2c:07:43:b9:e0:fe:
         64:f2:9c:7f:fe:54:fb:09:f8:9d:4d:8d:30:33:ca:cb:80:09:
         4f:9d:7c:61:8f:52:a8:b0:6b:fd:fb:b1:71:49:09:ae:32:c1:
         1f:66:13:06:0c:c5:5c:3d:16:db:77:64:d9:0f:8d:29:a0:2d:
         c5:43:cb:ee:5e:fb:5c:63:1a:0c:69:fa:76:01:14:e2:f9:af:
         b0:e1:93:d8:2b:09:07:98:da:91:2c:4b:14:4f:b8:22:b0:c1:
         0e:10:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:24 2026 by rpki-client