This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa
File:                     34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa (raw, json)
Hash identifier:          z9ZmVvni7vYmNH6evuiQmo8HusafeMec3lpc3Tq3pWs=
Subject key identifier:   61:8C:AC:6C:3D:06:DB:6C:81:F8:30:61:97:57:F7:3A:32:A2:52:9C
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       3404AEFAB525AFA32B5B1E1C50C70BF21B582D20
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa
Signing time:             Tue 06 Jan 2026 19:37:03 +0000
ROA not before:           Tue 06 Jan 2026 19:32:03 +0000
ROA not after:            Tue 05 Jan 2027 19:37:03 +0000
asID:                     267849
IP address blocks:        45.175.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:04:ae:fa:b5:25:af:a3:2b:5b:1e:1c:50:c7:0b:f2:1b:58:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Jan  6 19:32:03 2026 GMT
            Not After : Jan  5 19:37:03 2027 GMT
        Subject: CN=618CAC6C3D06DB6C81F830619757F73A32A2529C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:39:d1:3d:6b:fd:2c:ce:c7:ef:c1:49:4b:
                    f0:df:31:f8:ad:c2:13:24:9c:68:2f:0b:bf:e2:39:
                    82:e7:2d:ae:af:fc:77:59:b9:1b:d9:a3:fa:0f:25:
                    ac:b5:d7:18:30:ca:d4:f5:97:d5:a1:8e:d7:c0:a5:
                    0b:5e:78:10:fc:5b:2f:25:f5:97:75:4f:43:98:35:
                    01:5b:44:b6:5e:9a:29:63:5a:fd:a4:46:d2:9f:14:
                    9e:68:83:f5:a7:6a:a5:58:53:b7:f3:09:12:4a:0d:
                    ed:d1:b0:77:98:1c:4b:f1:46:f7:83:f4:6c:87:39:
                    95:65:c1:fe:6b:d0:7d:e7:21:69:27:23:62:5d:3a:
                    fc:b4:83:59:b8:19:b7:53:79:8e:cc:d2:55:8b:1a:
                    dd:02:56:61:a1:78:b6:e6:39:f2:18:9d:dc:ad:14:
                    4c:94:b5:fe:06:38:71:af:ec:51:95:47:45:61:88:
                    75:a0:d6:51:e3:2f:05:57:d3:1b:31:5b:fc:ae:e7:
                    f3:4d:3e:51:a4:8c:91:4f:7b:a5:ed:ef:16:18:d1:
                    71:8e:97:b4:a3:98:c1:25:d8:64:cc:32:1e:85:01:
                    2a:b0:d3:b8:f3:2e:7f:9f:b5:5e:0f:da:ad:83:bb:
                    40:90:af:84:79:c8:2a:7e:0f:72:40:28:01:4e:04:
                    66:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8C:AC:6C:3D:06:DB:6C:81:F8:30:61:97:57:F7:3A:32:A2:52:9C
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:da:b2:0f:18:b5:2b:2b:ed:f7:0f:71:d3:6a:83:37:a4:81:
         b9:dd:b9:2a:d8:9c:0a:49:69:f0:df:e0:e4:82:a6:18:0a:95:
         cc:50:44:2b:6f:7e:82:c2:e9:9d:7a:18:da:5c:33:76:4a:b6:
         b8:ef:6b:5d:52:4b:ca:2a:8e:e0:d8:58:4b:f5:88:4b:7d:4a:
         5c:f8:d1:a7:a1:da:8e:88:74:c6:d4:d0:5c:7e:b4:f0:44:bb:
         43:db:6a:e4:52:15:90:54:e4:6e:d3:5a:b9:df:9b:4f:42:31:
         91:1f:ac:90:6c:85:88:55:8f:c7:23:3e:a1:07:a5:ed:e5:86:
         85:9c:aa:3a:0d:92:c4:5b:b5:56:eb:11:be:3b:63:e3:45:43:
         98:3f:69:91:05:5f:50:22:6b:67:55:36:5b:81:09:bd:ee:9c:
         19:b8:da:b7:3e:d4:63:76:94:e4:3d:6b:74:62:9f:ef:a5:0b:
         65:19:b0:07:e2:e7:1b:77:c3:d6:f3:37:a1:48:65:97:7f:6f:
         c6:bd:99:d5:06:94:72:41:49:1c:39:e1:bc:c1:55:c3:95:ca:
         66:bd:51:b1:02:fd:e7:6b:11:f3:aa:6b:73:8e:c0:31:a0:e0:
         85:aa:d3:88:d9:23:43:b6:40:63:9d:6b:4c:97:4c:e5:db:56:
         bc:9c:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 13:08:30 2026 by rpki-client