This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/34352e3138302e3132302e302f32322d3233203d3e20323637393332.roa
File:                     34352e3138302e3132302e302f32322d3233203d3e20323637393332.roa (raw, json)
Hash identifier:          jBHGm/CMiXES0MuuVvA8aZzy0FltSIjn7Sjr7jhfO9g=
Subject key identifier:   D5:50:56:48:89:0B:B9:BD:BA:94:FF:5A:10:8D:9A:CC:90:D6:01:D0
Certificate issuer:       /CN=6783113CE361998A62AFBD1EB4EB0442B6FE1A19
Certificate serial:       409A63A836E8D9BF0A5109F5EC2BF947FD52E4E5
Authority key identifier: 67:83:11:3C:E3:61:99:8A:62:AF:BD:1E:B4:EB:04:42:B6:FE:1A:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/34352e3138302e3132302e302f32322d3233203d3e20323637393332.roa
Signing time:             Tue 06 Jan 2026 19:42:46 +0000
ROA not before:           Tue 06 Jan 2026 19:37:46 +0000
ROA not after:            Tue 05 Jan 2027 19:42:46 +0000
asID:                     267932
IP address blocks:        45.180.120.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9a:63:a8:36:e8:d9:bf:0a:51:09:f5:ec:2b:f9:47:fd:52:e4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6783113CE361998A62AFBD1EB4EB0442B6FE1A19
        Validity
            Not Before: Jan  6 19:37:46 2026 GMT
            Not After : Jan  5 19:42:46 2027 GMT
        Subject: CN=D5505648890BB9BDBA94FF5A108D9ACC90D601D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:dd:3a:5c:fa:35:95:0a:d4:eb:5e:c5:c7:
                    6a:01:0a:72:fa:85:90:f9:7d:f9:1b:09:5b:b7:14:
                    00:47:4c:52:4b:df:dc:de:20:80:6f:01:83:51:3d:
                    d4:21:d8:91:ee:07:50:1a:82:9f:f4:b7:9f:f0:a3:
                    4b:6b:83:42:11:c8:b0:56:63:9b:7b:e7:e4:36:2e:
                    54:55:e9:6a:c0:1d:f5:48:e5:43:ef:0c:be:80:f1:
                    60:04:cc:ee:ae:55:88:88:ea:f7:ff:f2:ef:99:94:
                    3f:e7:89:a9:7b:67:41:2c:35:48:b0:79:7a:2f:fb:
                    f2:e4:ee:50:0b:ae:e9:4e:df:c3:36:cb:4d:17:50:
                    4d:b8:11:d0:69:ea:c5:42:12:ff:a1:1a:b3:3f:43:
                    c7:fc:25:78:9e:56:5c:48:45:bb:d0:12:34:22:71:
                    a4:11:9c:e4:4e:ac:4f:36:a3:0e:27:73:c4:6b:95:
                    dc:b8:f5:bb:a6:a0:de:79:94:46:c7:aa:5c:62:95:
                    83:66:49:30:f9:ea:33:ef:ba:24:b0:1e:34:d0:5f:
                    21:4a:45:de:ca:e3:65:7d:21:3e:27:b2:e0:60:2e:
                    d0:f6:cf:c3:52:02:29:fa:47:41:f0:59:f9:65:04:
                    f3:13:b5:af:40:52:8a:dc:10:af:7a:60:cd:2f:6b:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:50:56:48:89:0B:B9:BD:BA:94:FF:5A:10:8D:9A:CC:90:D6:01:D0
            X509v3 Authority Key Identifier:
                keyid:67:83:11:3C:E3:61:99:8A:62:AF:BD:1E:B4:EB:04:42:B6:FE:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/34352e3138302e3132302e302f32322d3233203d3e20323637393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:61:94:b6:40:f4:89:ee:5f:d9:b5:2f:2b:d9:61:28:3a:70:
         96:28:aa:ed:15:6c:43:af:43:c3:16:9d:38:33:65:1d:e8:53:
         d8:03:84:fe:04:c3:92:2b:de:7f:98:fd:f1:11:94:5a:8b:3d:
         b3:f5:78:fe:be:fe:08:6d:2d:2c:54:14:d5:b5:ce:0b:9d:3d:
         76:19:d7:d5:af:85:fb:e6:aa:bd:57:b2:ed:43:87:09:7b:99:
         83:9d:a8:55:25:27:d4:96:83:83:1e:12:54:4a:7f:29:77:c7:
         dd:33:a1:90:09:9e:49:8e:8d:e6:75:f1:3c:18:32:a5:c7:48:
         47:30:89:89:26:1e:3d:a2:b1:b6:44:2a:91:ed:11:5c:86:35:
         f9:8f:c5:6e:8f:43:3a:de:bb:52:0e:34:7d:9e:25:67:e3:71:
         50:59:ae:b1:2e:97:df:4a:aa:13:65:a5:98:c4:65:4d:62:77:
         05:01:83:e1:47:bd:11:95:4a:92:64:4f:8e:9d:09:47:6d:01:
         3e:1c:67:7e:d7:d2:41:27:90:be:ea:26:d7:36:11:0c:9f:7f:
         88:9f:d8:57:b2:5f:21:77:85:bb:79:94:fb:0c:fe:20:46:10:
         93:8b:a7:fe:0b:9b:c7:fd:8e:f5:f5:00:06:6a:8e:0a:6a:3d:
         87:c4:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:39:13 2026 by rpki-client