This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33392e302f32342d3234203d3e20323637363830.roa
File:                     34352e3136332e33392e302f32342d3234203d3e20323637363830.roa (raw, json)
Hash identifier:          wjmBzMlvDA1WXMQUcvqdgbxf9+HVMfyQRC6CO39ZmDo=
Subject key identifier:   A3:5B:7E:9B:98:21:C7:A2:14:9E:74:D9:C5:DD:12:7A:9C:D0:D8:8C
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       54562C56B91CCCA7CF0FFBA44836F48E949EA4EE
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33392e302f32342d3234203d3e20323637363830.roa
Signing time:             Tue 06 Jan 2026 19:24:27 +0000
ROA not before:           Tue 06 Jan 2026 19:19:27 +0000
ROA not after:            Tue 05 Jan 2027 19:24:27 +0000
asID:                     267680
IP address blocks:        45.163.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:56:2c:56:b9:1c:cc:a7:cf:0f:fb:a4:48:36:f4:8e:94:9e:a4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Jan  6 19:19:27 2026 GMT
            Not After : Jan  5 19:24:27 2027 GMT
        Subject: CN=A35B7E9B9821C7A2149E74D9C5DD127A9CD0D88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:96:c9:05:6c:be:e3:08:26:fd:0e:99:b6:
                    66:56:60:13:3e:68:40:c1:59:f9:92:4d:43:b2:11:
                    c8:b4:90:53:7d:a6:c3:1d:a3:15:f9:b8:51:75:c3:
                    17:a0:57:12:fa:f6:bf:b9:f6:e4:ea:a4:84:64:e8:
                    c9:5b:a6:91:da:95:46:ef:4a:c4:8e:18:bc:82:b2:
                    f8:c6:f8:e9:21:5a:e2:a1:db:a0:37:07:df:82:97:
                    b9:da:5e:52:6e:96:f8:78:3f:7a:bd:d8:bf:76:f6:
                    75:4f:a9:ba:28:43:23:df:4d:a2:dd:a7:3d:3d:f2:
                    ac:71:01:30:89:21:0e:1b:6f:97:86:a0:89:18:a8:
                    e5:b7:b2:c0:bf:9c:8d:6d:35:71:f1:5d:a2:93:98:
                    2d:08:40:2d:26:56:14:9e:c1:40:39:30:fd:bc:b7:
                    ea:60:cf:13:d3:c6:72:09:03:d0:3d:ee:df:a8:d6:
                    1f:e3:01:f7:eb:1f:96:65:00:89:d7:a5:45:26:f6:
                    4a:6b:99:4d:6a:19:8c:fc:4f:b6:af:02:90:eb:b8:
                    c6:67:b7:d1:18:6a:2c:4d:65:fd:d1:e1:a7:1d:05:
                    d9:5a:6f:63:e8:68:b8:a4:3d:fc:27:ad:42:0f:3d:
                    66:97:60:4a:b1:f2:ed:18:c3:81:45:1b:ce:9f:53:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5B:7E:9B:98:21:C7:A2:14:9E:74:D9:C5:DD:12:7A:9C:D0:D8:8C
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33392e302f32342d3234203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d6:b5:b3:9a:6c:62:6a:97:17:06:ea:27:6c:cd:5e:a1:43:
         02:9e:b7:38:7c:86:a8:a9:6c:7c:6e:00:b4:91:93:18:5e:fc:
         89:33:d7:87:0f:0b:0d:17:fc:c1:c7:58:ba:06:c9:0e:0c:00:
         ed:6e:1b:b2:cc:ab:af:19:8e:45:6e:5d:be:4d:e8:0d:b3:2d:
         86:12:e7:3e:45:7d:85:9b:f3:b4:1f:8c:70:13:27:b9:2a:84:
         ba:63:5f:52:3f:d6:84:a3:cb:f4:92:0a:8a:c2:37:f3:58:74:
         9d:21:ec:af:7d:08:3a:c5:83:46:ba:5c:f0:30:a1:6d:cd:e4:
         72:16:b8:98:65:9c:1b:8d:cc:bb:76:8e:e7:27:0e:22:5d:f2:
         96:3e:9f:50:37:8e:af:01:11:c6:8b:7c:0f:63:2f:35:77:58:
         29:87:c5:b1:41:db:e9:56:81:d2:f1:81:28:ed:0a:be:8a:38:
         fb:8e:da:bd:12:ee:06:83:73:03:87:27:87:bb:da:7f:bc:ba:
         56:65:52:3f:e8:38:01:2d:68:96:45:fa:fc:29:56:33:f9:bb:
         03:ef:da:d3:38:58:bd:05:52:06:97:23:70:19:09:51:72:3b:
         b3:17:35:d6:d8:2e:b5:ed:48:85:2c:ab:2d:c3:95:f4:74:04:
         16:7c:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 11:31:32 2026 by rpki-client