This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/34352e3137382e31322e302f32322d3332203d3e20323637383930.roa
File:                     34352e3137382e31322e302f32322d3332203d3e20323637383930.roa (raw, json)
Hash identifier:          DYt5mTp/d65dWNC/jGDRj9BfszAQ1HwlSti3YBLPH5o=
Subject key identifier:   CB:78:10:5A:2C:E8:C0:72:17:2B:B4:7B:99:DA:30:40:88:3C:85:1A
Certificate issuer:       /CN=3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F
Certificate serial:       590FBC04CD275260C5E2C6C4E2A98B9E98C469FE
Authority key identifier: 3C:E8:6C:C1:C9:4E:C0:C2:A8:D0:C6:68:C7:AA:44:FC:5E:3D:E9:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/34352e3137382e31322e302f32322d3332203d3e20323637383930.roa
Signing time:             Tue 06 Jan 2026 19:16:10 +0000
ROA not before:           Tue 06 Jan 2026 19:11:10 +0000
ROA not after:            Tue 05 Jan 2027 19:16:10 +0000
asID:                     267890
IP address blocks:        45.178.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0f:bc:04:cd:27:52:60:c5:e2:c6:c4:e2:a9:8b:9e:98:c4:69:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F
        Validity
            Not Before: Jan  6 19:11:10 2026 GMT
            Not After : Jan  5 19:16:10 2027 GMT
        Subject: CN=CB78105A2CE8C072172BB47B99DA3040883C851A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:3e:a8:bc:d3:75:e7:70:72:34:7f:dc:78:
                    8e:8d:0f:ee:4b:79:df:46:ca:e8:05:90:02:ed:79:
                    87:c9:a0:78:a4:5e:a2:0e:9f:1d:e2:70:aa:fe:34:
                    1d:37:56:99:9c:99:85:0a:32:d3:35:07:9c:ee:01:
                    aa:15:46:dd:73:67:bd:de:7d:70:21:ca:4a:57:b0:
                    c7:de:cf:f7:d1:d9:c0:3e:74:70:a8:ce:6c:80:87:
                    89:7f:6e:94:6a:d1:50:3f:81:2b:43:f8:ae:c8:e5:
                    7a:74:ac:4a:47:df:0d:b9:12:a7:99:10:fe:e0:b9:
                    a2:dc:b0:2f:af:6a:bd:7f:50:0b:b3:9b:85:4d:37:
                    1b:fb:2f:4d:d2:5f:cb:79:25:56:c0:bc:43:7d:21:
                    bc:8a:51:ad:82:88:2e:1a:42:16:2b:a6:2b:aa:07:
                    d1:fb:28:2a:98:bc:24:92:e0:04:3e:05:d3:5e:64:
                    7a:bb:c6:5c:b6:fb:84:0b:25:b9:43:63:7b:4c:91:
                    7f:1d:15:1c:d4:e2:e9:e2:8f:a4:b4:6c:74:f0:49:
                    1f:2d:1c:bb:df:e6:43:3a:e7:16:e4:b2:08:58:fe:
                    03:6c:79:9b:b5:d9:ef:44:10:bd:4b:a9:97:54:2b:
                    76:16:62:69:fa:81:f4:15:71:97:69:62:df:15:f6:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:10:5A:2C:E8:C0:72:17:2B:B4:7B:99:DA:30:40:88:3C:85:1A
            X509v3 Authority Key Identifier:
                keyid:3C:E8:6C:C1:C9:4E:C0:C2:A8:D0:C6:68:C7:AA:44:FC:5E:3D:E9:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/34352e3137382e31322e302f32322d3332203d3e20323637383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:90:8b:18:5e:7f:d0:3f:cb:60:76:8b:bf:34:b8:dc:37:20:
         ab:22:34:d6:b8:62:be:a0:b1:29:6f:b7:43:9e:9a:46:71:46:
         8e:41:b2:d7:54:f0:56:57:32:cd:16:db:ed:86:b6:e4:c8:89:
         45:6c:37:e9:d3:2d:16:61:3c:48:ce:85:01:ab:8e:4b:f2:a0:
         71:aa:98:20:37:15:e7:63:7a:5e:ce:a0:50:aa:73:12:bf:b3:
         d8:64:6d:b9:66:74:1c:38:a5:7a:2e:45:81:86:10:01:26:4b:
         1f:38:07:3a:a3:bd:55:52:96:0e:0d:fb:9b:f8:e6:e9:86:f1:
         33:aa:c5:e2:77:e6:45:fe:80:85:da:55:3b:f8:26:5b:10:d2:
         ee:cc:2e:b7:0e:9f:cf:4e:85:82:e5:87:f6:48:a4:2e:22:d5:
         ee:e4:62:57:8e:12:65:38:76:c7:9a:a5:0c:62:2a:e1:00:6a:
         ae:84:70:a2:39:5b:cd:45:94:38:60:6d:9f:64:ff:97:26:8e:
         bb:c5:8f:bb:9c:8d:d2:0f:03:3a:3e:9e:66:9a:39:3e:46:2e:
         9e:b1:56:ad:de:bd:a5:29:3e:8c:de:be:03:3d:b4:58:c3:4e:
         25:29:1f:04:a2:70:82:1c:0d:f8:2f:79:41:c8:88:19:0a:c8:
         88:10:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:10:17 2026 by rpki-client