This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32372e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          /31c/Oqr7EFj3vlCAJi+h/N/5Cl3KyHoi6HmAPDGx20=
Subject key identifier:   AB:95:81:96:1E:68:74:6A:AC:6E:BB:63:5D:1E:D1:D0:E2:40:AC:69
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       2A4809E4D8C4EAC8B287CF40B964C11129BED85E
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 06 Jan 2026 20:53:36 +0000
ROA not before:           Tue 06 Jan 2026 20:48:36 +0000
ROA not after:            Tue 05 Jan 2027 20:53:36 +0000
asID:                     267808
IP address blocks:        45.172.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:48:09:e4:d8:c4:ea:c8:b2:87:cf:40:b9:64:c1:11:29:be:d8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Jan  6 20:48:36 2026 GMT
            Not After : Jan  5 20:53:36 2027 GMT
        Subject: CN=AB9581961E68746AAC6EBB635D1ED1D0E240AC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:36:6b:d1:17:fa:ee:6f:57:35:07:b0:b6:af:
                    51:f2:ec:05:53:f9:5a:a3:ec:21:93:8d:45:cd:73:
                    a6:e9:28:2e:a9:1c:d6:55:f3:20:69:6d:3a:f1:0a:
                    e0:87:6d:8b:47:1b:63:a0:bd:a6:36:56:f4:be:9d:
                    54:a4:5e:82:ee:f2:6a:da:fc:fa:8f:25:6d:1d:67:
                    93:64:14:3e:ce:73:9e:d4:0e:fd:c1:f4:0f:49:f1:
                    65:c1:da:86:28:f9:a5:a0:6d:d6:d6:14:43:8a:60:
                    8a:ae:10:f4:13:7a:9d:bc:ab:56:93:3f:db:da:c5:
                    24:60:f0:90:82:67:da:18:d3:59:9e:46:7b:23:60:
                    a4:3a:0a:cd:65:00:1f:e7:c3:72:fd:2e:2f:ba:28:
                    9c:83:a2:da:ec:cc:be:d6:00:9a:79:77:9e:94:29:
                    6c:48:66:e9:ff:62:8a:6d:52:93:0a:f0:1c:1d:9f:
                    5e:49:44:73:45:a3:de:7a:18:08:7b:78:ba:24:94:
                    f5:15:64:45:8b:d9:c7:e5:d1:ca:fe:b9:8c:39:3d:
                    45:41:77:5d:db:72:1f:8c:d4:1b:b2:89:c3:64:59:
                    58:dd:da:2e:3e:48:8d:44:c0:de:50:8c:78:00:0e:
                    95:b1:27:2d:ad:d9:3b:e7:44:97:39:6c:11:de:e5:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:81:96:1E:68:74:6A:AC:6E:BB:63:5D:1E:D1:D0:E2:40:AC:69
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:92:f0:97:b1:a1:67:a0:83:15:f0:56:f0:3a:10:e6:45:
         dc:b6:95:04:0f:e7:cb:c8:3e:4d:68:1e:8d:02:39:68:47:53:
         11:03:71:70:6b:c1:28:c2:b4:35:10:3c:04:44:3f:48:ce:f3:
         5a:4d:86:b5:d0:e4:b8:dc:69:ab:88:50:1b:06:1b:91:af:8f:
         9e:f1:cc:45:20:5c:1b:00:95:c7:9a:01:9e:9e:34:46:7c:13:
         da:3e:8e:d5:a4:0b:e1:8b:71:ef:94:94:28:7f:b1:1e:61:7e:
         1f:5e:db:cc:57:4d:75:ce:f0:76:25:e4:f4:03:74:57:db:16:
         d3:44:d1:1d:81:27:16:8d:70:b7:5f:a6:6a:04:94:9e:ae:10:
         30:ed:81:06:0c:6b:2c:64:83:64:6f:fa:9a:8f:41:7f:48:96:
         da:48:40:45:e8:f7:61:88:3a:c3:9a:af:96:ca:e2:6e:68:6d:
         a4:ca:63:d9:53:b0:02:24:a9:87:5f:61:c8:2a:ba:14:da:9b:
         9b:ef:b4:95:02:4a:ff:00:ee:0a:6d:7e:4b:63:4a:57:da:04:
         a6:0c:df:eb:45:40:14:bb:a0:e2:c7:24:04:77:4d:36:98:12:
         1a:8a:06:4b:d5:ad:62:28:eb:e5:c2:6e:53:0d:d0:2f:51:c5:
         19:a8:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:46:16 2026 by rpki-client