This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35392e302f32342d3236203d3e20323635353732.roa
File:                     34352e3137342e35392e302f32342d3236203d3e20323635353732.roa (raw, json)
Hash identifier:          9dSEl/U3Ss03FeI51GSKlX/RfrrNeBlY1s9HYhctAxI=
Subject key identifier:   94:0B:28:9F:9C:2B:43:1B:84:95:39:AE:11:10:B0:03:3C:74:69:FB
Certificate issuer:       /CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
Certificate serial:       2EEA2265BEC456EEB7E67D8ECC61FAE599666EB9
Authority key identifier: BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35392e302f32342d3236203d3e20323635353732.roa
Signing time:             Tue 06 Jan 2026 20:58:24 +0000
ROA not before:           Tue 06 Jan 2026 20:53:24 +0000
ROA not after:            Tue 05 Jan 2027 20:58:24 +0000
asID:                     265572
IP address blocks:        45.174.59.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 06:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ea:22:65:be:c4:56:ee:b7:e6:7d:8e:cc:61:fa:e5:99:66:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
        Validity
            Not Before: Jan  6 20:53:24 2026 GMT
            Not After : Jan  5 20:58:24 2027 GMT
        Subject: CN=940B289F9C2B431B849539AE1110B0033C7469FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:8b:66:8e:df:d7:e3:d7:74:70:92:3b:c6:
                    98:8d:0f:b5:ec:cd:e9:85:c9:94:43:02:40:ab:e7:
                    bd:0a:b4:ed:af:51:ec:a9:b3:af:eb:b6:ca:52:9d:
                    6b:b4:78:7d:80:ea:30:ce:ce:fa:f8:63:87:a7:5c:
                    ab:45:a6:63:29:b1:5e:48:43:1e:00:b6:fb:b6:a7:
                    a3:d8:d5:f3:1a:8e:15:d8:68:ff:4f:c9:bf:42:b1:
                    3c:18:d6:3c:2b:b5:67:d7:b9:50:1d:67:2f:6f:e5:
                    3c:67:81:e8:e2:80:b8:26:83:eb:de:97:80:e8:12:
                    5a:a7:d4:d2:d7:60:c3:6d:2a:05:f7:ba:66:5d:cb:
                    fa:b3:2a:51:4a:37:6e:e5:5c:85:ca:9c:c5:92:8b:
                    24:d6:9a:d3:45:09:02:79:cc:01:32:64:c4:8e:58:
                    ff:90:b5:6a:34:d3:5b:e3:a6:63:b1:20:79:fb:29:
                    3d:40:1e:12:9e:39:31:ae:7b:22:10:88:da:ad:c9:
                    3e:f2:a1:13:a4:a6:e8:aa:4d:55:72:05:80:bc:f7:
                    88:5a:5c:20:c2:29:85:3d:5c:1f:61:54:68:71:93:
                    53:aa:d1:e7:3b:7c:50:d0:28:3f:c1:71:0d:6b:aa:
                    2d:3a:1f:92:4a:14:28:c7:88:61:65:ef:63:15:5c:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:28:9F:9C:2B:43:1B:84:95:39:AE:11:10:B0:03:3C:74:69:FB
            X509v3 Authority Key Identifier:
                keyid:BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35392e302f32342d3236203d3e20323635353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:2b:ba:a0:37:97:2d:ec:72:d2:01:87:8d:98:a9:9e:94:
         a4:07:fa:d6:71:38:6b:6b:74:8b:84:00:9f:92:ae:c3:61:12:
         f3:ed:72:6c:9d:26:f3:13:bb:f8:7f:58:0c:97:ea:1d:78:ac:
         f4:e9:41:13:7f:69:c2:e1:ec:80:01:d7:59:8a:a9:cb:2d:08:
         98:8b:e3:ec:8e:27:19:b1:33:29:bb:1e:ac:19:10:4c:15:87:
         ee:e5:be:b6:50:2e:80:09:12:95:42:67:2a:33:40:b5:d1:94:
         d6:95:a3:6a:46:f7:5d:71:ec:c1:e2:ec:4b:2e:2a:77:47:87:
         e1:46:b3:9b:9d:50:67:fb:b0:97:4e:0c:40:95:99:e4:2f:b3:
         72:ab:20:e4:f4:c0:19:75:57:60:ef:87:2d:22:3d:98:05:00:
         53:c4:08:7f:da:69:97:38:f9:b0:de:b1:44:68:80:74:f9:ce:
         25:5b:b8:f5:8a:22:bd:8d:27:95:5e:e6:3b:e5:44:87:c4:ef:
         42:78:ca:1b:dc:2f:1e:9f:96:81:c2:b8:f5:73:6b:3d:35:d8:
         71:c0:2b:f2:6f:14:dc:fd:4e:57:ed:84:fb:95:d2:98:7c:4c:
         ac:0d:0f:b9:c2:44:48:c9:ff:69:45:99:05:13:5e:b5:5f:ad:
         64:ca:f5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:38:32 2026 by rpki-client