This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
File:                     34352e342e3230302e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          osmZs5SJVh7BiG7DaHUCngZha/xvCbnMItmBipFtLpE=
Subject key identifier:   22:60:7D:94:17:85:9C:77:FD:4E:30:F5:ED:1D:93:28:DB:EE:17:05
Certificate issuer:       /CN=74CB08D6E0688F8E499DD91190E49000CC837759
Certificate serial:       186EDBA5719E4609D0BB3026E257BEE2119335B4
Authority key identifier: 74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 06 Jan 2026 20:57:54 +0000
ROA not before:           Tue 06 Jan 2026 20:52:54 +0000
ROA not after:            Tue 05 Jan 2027 20:57:54 +0000
asID:                     263238
IP address blocks:        45.4.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Jan 2026 17:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:db:a5:71:9e:46:09:d0:bb:30:26:e2:57:be:e2:11:93:35:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CB08D6E0688F8E499DD91190E49000CC837759
        Validity
            Not Before: Jan  6 20:52:54 2026 GMT
            Not After : Jan  5 20:57:54 2027 GMT
        Subject: CN=22607D9417859C77FD4E30F5ED1D9328DBEE1705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:3e:10:d4:35:e7:db:d3:6c:c7:bd:29:97:
                    bd:f1:1d:66:c0:34:7f:d9:1c:e4:bf:51:21:40:a9:
                    cc:80:da:99:1f:d9:78:fa:d0:4c:73:16:5c:99:e6:
                    85:25:20:c5:58:70:9f:42:30:5f:d8:4c:89:6f:21:
                    f7:0c:ce:f6:ae:73:bd:c3:a5:5a:6b:7f:c6:e6:c7:
                    ed:9c:64:49:9c:ec:fd:4f:d6:a0:c5:6d:23:3d:a5:
                    f3:bf:06:25:02:f2:83:40:12:cc:39:ef:2c:7f:38:
                    ae:0b:6e:f2:c3:19:43:cd:01:d4:ff:19:0f:3c:44:
                    b9:db:09:ed:d9:9c:9c:d4:77:38:77:10:f2:77:68:
                    c3:fb:a8:3c:07:9d:3e:09:b4:1f:2b:aa:52:b9:dd:
                    37:58:fb:9e:b2:47:25:c3:db:7f:be:f3:bf:1a:d7:
                    01:27:0d:ef:0c:df:db:f0:b8:1e:e1:72:b4:67:70:
                    18:9c:72:c6:79:7a:c7:4a:8b:50:84:79:8f:b9:d8:
                    ff:4e:4a:c7:e1:85:d4:8d:24:2f:4b:a6:85:df:32:
                    06:dc:49:c2:0f:b1:aa:dc:18:6e:9e:9f:62:b8:ec:
                    a2:f4:16:f7:bb:a3:bf:5a:ac:c8:4b:8c:bf:11:45:
                    78:a8:5e:04:49:bf:39:04:cf:72:d8:e8:20:62:e5:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:60:7D:94:17:85:9C:77:FD:4E:30:F5:ED:1D:93:28:DB:EE:17:05
            X509v3 Authority Key Identifier:
                keyid:74:CB:08:D6:E0:68:8F:8E:49:9D:D9:11:90:E4:90:00:CC:83:77:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/74CB08D6E0688F8E499DD91190E49000CC837759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74CB08D6E0688F8E499DD91190E49000CC837759.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECFAF658C8C32CE263DD54C900F5D06264C438464CF92632DCEDBBA291229C1F/0/34352e342e3230302e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:17:86:99:59:15:bd:49:5d:e0:1e:54:4e:a4:3b:bd:c4:60:
         68:0c:86:3f:47:43:9a:55:b1:06:36:a5:66:af:88:ce:e5:c6:
         64:67:3e:4d:70:e1:36:06:93:bb:16:f1:a0:ed:60:e4:ef:c2:
         97:2e:44:9f:fa:bd:5b:f1:18:cf:75:67:05:d5:e9:3f:a6:df:
         e0:1a:3f:46:27:59:41:44:34:97:b4:48:8a:99:2c:1b:b5:44:
         99:16:27:6d:e3:6c:03:f0:6b:48:19:2f:80:e5:1e:4f:d9:ef:
         27:3d:7d:a3:f5:1c:08:37:3a:03:e5:e6:64:ac:4a:2d:b2:cd:
         d6:27:d0:d3:3e:56:21:6b:6a:95:5e:6d:bb:54:34:10:85:06:
         92:2d:81:09:d7:16:94:fb:46:5a:62:fa:db:36:a8:26:9b:f9:
         59:0d:ea:9f:82:28:fc:eb:42:73:00:eb:98:09:32:fc:4c:47:
         1d:76:1e:6a:f0:4e:2d:0c:62:f8:7e:d3:9f:6c:e2:f3:dc:f6:
         31:70:79:d2:f4:1b:ea:a0:bb:59:22:c0:da:00:47:00:4d:e3:
         46:57:d0:14:dc:cf:4d:2b:9c:07:5d:8c:27:b5:ca:fb:5a:93:
         62:5d:8d:9f:eb:76:fa:2e:28:c8:05:f6:e5:13:93:d7:82:e9:
         86:32:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 06:48:30 2026 by rpki-client