This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa
File:                     34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa (raw, json)
Hash identifier:          gg1REKFQIlh64jKp9A0Ntyis5ZX0KfKBxcyP7zaQkjw=
Subject key identifier:   C3:55:F1:C0:7C:6A:E9:CD:CD:19:F1:6E:E9:44:77:AF:B8:47:93:9F
Certificate issuer:       /CN=277CF92D43DFA7251206BD015C9A1B143C90C8FD
Certificate serial:       1D0597073BEB3B28EB30917485533AF2DF700199
Authority key identifier: 27:7C:F9:2D:43:DF:A7:25:12:06:BD:01:5C:9A:1B:14:3C:90:C8:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa
Signing time:             Tue 06 Jan 2026 18:57:53 +0000
ROA not before:           Tue 06 Jan 2026 18:52:53 +0000
ROA not after:            Tue 05 Jan 2027 18:57:53 +0000
asID:                     270094
IP address blocks:        45.237.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 22:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:05:97:07:3b:eb:3b:28:eb:30:91:74:85:53:3a:f2:df:70:01:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277CF92D43DFA7251206BD015C9A1B143C90C8FD
        Validity
            Not Before: Jan  6 18:52:53 2026 GMT
            Not After : Jan  5 18:57:53 2027 GMT
        Subject: CN=C355F1C07C6AE9CDCD19F16EE94477AFB847939F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:29:bd:27:dd:49:9e:57:e5:94:70:05:6d:
                    d4:b6:d8:52:81:3f:af:e8:de:bb:ad:4f:9c:56:aa:
                    c6:b7:90:25:3c:a0:fc:8e:4b:33:97:30:71:ce:0a:
                    56:82:14:b8:fc:9d:15:a0:e3:45:9c:1f:7e:94:78:
                    e1:14:61:d7:67:83:2a:e5:e7:83:6f:28:68:bf:59:
                    b8:28:99:e8:17:7a:1e:54:92:7f:48:72:02:cd:d6:
                    30:67:c3:81:6d:4d:40:c5:08:a7:99:0a:f8:56:a1:
                    2c:a2:1f:6b:1a:77:0a:34:9b:a3:a3:51:a4:d3:b6:
                    92:17:4a:f4:f2:b6:64:d9:4c:47:39:54:eb:e6:2a:
                    e5:aa:b5:ef:86:ce:9b:fc:3a:eb:ba:9e:72:ea:fb:
                    96:22:2d:43:74:fe:0d:5f:53:fe:18:8a:45:20:cb:
                    6e:88:7a:78:1b:fe:92:32:0e:e7:76:1a:2e:08:0b:
                    0a:4f:1d:66:c0:cd:f4:aa:da:93:9f:bd:cc:fb:4b:
                    c9:d8:8e:53:cf:dd:59:17:ee:e8:bc:6d:2e:61:d8:
                    5a:e9:70:85:85:e4:46:23:1b:15:9b:90:f9:23:96:
                    10:26:f7:7f:b0:05:32:66:c0:02:ed:be:fd:9e:92:
                    5a:08:f0:e3:14:3d:31:81:70:e7:bb:e3:1a:b5:b5:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:F1:C0:7C:6A:E9:CD:CD:19:F1:6E:E9:44:77:AF:B8:47:93:9F
            X509v3 Authority Key Identifier:
                keyid:27:7C:F9:2D:43:DF:A7:25:12:06:BD:01:5C:9A:1B:14:3C:90:C8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/277CF92D43DFA7251206BD015C9A1B143C90C8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E57A47B4F28A080B07D53B4693E7379F8999540D08464E6B58B3DF442AA86EDA/0/34352e3233372e3133322e302f32342d3234203d3e20323730303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:30:25:90:1b:af:bd:c0:4c:70:e9:5c:b2:25:fd:d9:07:
         1a:7b:ba:f3:07:db:22:35:52:e5:03:58:4c:a2:ed:96:9a:c2:
         24:e0:8e:82:08:98:49:e0:36:6d:ae:71:9c:78:a1:d8:ab:9f:
         f4:bf:16:e1:64:fc:c2:3c:90:a6:49:c5:3f:3a:cc:a7:46:22:
         15:bf:6a:ac:16:13:13:71:c9:7a:d2:22:7d:88:06:fa:a5:48:
         7c:0b:01:f1:3e:ca:e8:49:ad:bd:43:61:bd:f5:17:c7:c2:a2:
         a1:32:62:c4:23:18:15:94:1f:99:66:65:9d:9e:ee:0e:44:46:
         0c:c7:e9:f4:11:e9:55:9f:06:18:c5:f3:2a:bf:9f:58:a7:63:
         7e:a6:9b:50:2d:c0:c6:25:19:f7:ca:4c:40:fd:cb:ac:42:e1:
         dd:f7:bb:e7:32:2d:de:19:28:53:c5:8c:4d:f1:e2:90:0b:e7:
         14:51:52:12:05:8e:97:0b:b1:d6:59:33:03:16:9b:84:fb:48:
         e2:ac:e2:63:4a:3b:0d:cd:3f:54:a6:4c:2f:84:09:ce:df:a1:
         d5:81:ea:2b:b3:c3:9c:ab:1d:d5:b0:3d:05:65:c1:f6:00:bb:
         e1:54:45:d3:76:dc:ca:92:71:03:09:11:ba:58:9a:2e:4c:25:
         fd:d6:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:01:13 2026 by rpki-client