This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136342e302f32322d3234203d3e20323637383439.roa
File:                     34352e3137352e3136342e302f32322d3234203d3e20323637383439.roa (raw, json)
Hash identifier:          7LKsZDtzti7DrcLRK9h5OisdA9xFZY3KQ9/j+Fr9ns0=
Subject key identifier:   02:BD:A3:A8:5A:F1:DF:0D:67:C3:63:B0:E5:F6:30:30:3D:38:68:13
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       790343B686C745CF832A625CF13468BB7DE6DEC9
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136342e302f32322d3234203d3e20323637383439.roa
Signing time:             Tue 06 Jan 2026 19:37:04 +0000
ROA not before:           Tue 06 Jan 2026 19:32:04 +0000
ROA not after:            Tue 05 Jan 2027 19:37:04 +0000
asID:                     267849
IP address blocks:        45.175.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:03:43:b6:86:c7:45:cf:83:2a:62:5c:f1:34:68:bb:7d:e6:de:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Jan  6 19:32:04 2026 GMT
            Not After : Jan  5 19:37:04 2027 GMT
        Subject: CN=02BDA3A85AF1DF0D67C363B0E5F630303D386813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:0a:ae:49:ae:0f:0d:7a:84:68:17:a3:41:
                    4c:ad:8f:b3:a6:1a:7d:5d:0f:72:e8:0d:7a:34:95:
                    35:1c:10:56:6f:16:cb:5b:5c:c5:23:36:90:ba:e3:
                    a4:07:a0:8d:cf:3b:e1:02:f2:05:2b:78:32:92:cb:
                    c4:e0:6b:98:3c:4e:c0:75:15:5a:aa:6b:0b:b5:ee:
                    9a:ec:ff:3f:44:f0:56:a3:bd:0d:eb:6f:77:55:43:
                    fc:d7:25:c8:29:3c:c0:ca:72:45:1e:c8:50:78:d0:
                    69:76:f4:1d:c3:cc:af:dc:82:4e:82:00:6f:d5:63:
                    25:77:cb:61:af:b5:db:19:dc:ba:91:89:96:dd:ed:
                    33:8c:b2:7e:f3:dc:af:f8:38:ca:81:3e:0b:c8:40:
                    5d:9a:e6:36:d2:11:92:1f:dc:c5:a1:4e:9b:dc:68:
                    44:8b:53:5a:8e:03:3e:60:64:27:1b:53:28:26:c9:
                    12:fb:38:2b:52:cc:85:cb:b1:9a:24:92:cf:58:d5:
                    5d:7b:e4:2a:6f:b1:1c:db:53:3d:45:bc:17:1f:04:
                    61:5e:9a:54:c2:f6:20:73:13:32:f7:14:6b:57:da:
                    18:40:d1:b1:f1:21:fa:ac:7f:2e:e3:c0:34:04:78:
                    06:67:10:65:0f:56:a0:db:c8:a4:e4:f8:b6:1d:2d:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:A3:A8:5A:F1:DF:0D:67:C3:63:B0:E5:F6:30:30:3D:38:68:13
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136342e302f32322d3234203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:aa:ce:8e:aa:0d:46:48:47:e2:d8:d2:e7:e6:78:ee:bf:
         5a:52:c8:b7:7c:cb:b5:da:57:03:69:91:a5:92:f6:72:52:ea:
         82:0e:5b:bb:51:16:fd:ce:90:d7:d0:22:bf:34:ab:4b:de:5c:
         54:06:c0:fa:f0:fd:78:9b:8e:06:44:0c:24:c8:78:16:d6:17:
         c0:53:16:07:b2:2b:a6:d7:1b:2a:bb:ff:8b:7a:db:7b:7a:47:
         f9:de:de:50:aa:9f:9d:1e:83:79:1c:67:0a:c1:c2:8d:45:85:
         d9:4b:13:e3:f7:cd:16:28:80:64:e8:af:23:8c:8a:6a:41:f8:
         05:aa:c8:3e:c4:9f:87:1e:3c:0f:ea:6f:31:6e:37:70:9d:03:
         ae:a0:8e:2d:11:36:b6:1f:8e:38:27:c6:3d:08:09:ce:9f:07:
         b1:2c:4d:ee:f7:0f:3b:ea:59:05:c4:f5:a2:12:74:f9:f1:11:
         ee:04:96:ae:f0:7d:cd:07:c6:87:d0:48:76:e7:cd:06:d3:92:
         72:51:a2:1a:e0:6b:c9:9f:ff:06:18:cc:74:d8:bf:c4:be:c1:
         e0:a2:52:fb:1a:ff:cf:3b:c6:84:b5:70:7f:8b:28:da:ab:e8:
         39:a2:ac:a2:7b:a3:c6:e8:87:ed:b5:63:98:72:fb:c3:85:81:
         93:17:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 13:08:29 2026 by rpki-client