This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa
File:                     34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier:          g2tiu1Hr97SBYH5uDVdbXoqk1JyhDMNqn0GXPtX2AAY=
Subject key identifier:   FD:07:D7:3E:91:6F:FC:01:5E:D2:FB:4E:97:D2:0E:BC:75:78:BE:AC
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       1E5475B97B6CC4AA0F63295E961367356AAC8FD2
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa
Signing time:             Tue 06 Jan 2026 19:33:21 +0000
ROA not before:           Tue 06 Jan 2026 19:28:21 +0000
ROA not after:            Tue 05 Jan 2027 19:33:21 +0000
asID:                     269858
IP address blocks:        45.189.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:54:75:b9:7b:6c:c4:aa:0f:63:29:5e:96:13:67:35:6a:ac:8f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Jan  6 19:28:21 2026 GMT
            Not After : Jan  5 19:33:21 2027 GMT
        Subject: CN=FD07D73E916FFC015ED2FB4E97D20EBC7578BEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:ea:0f:3a:df:d9:e4:71:a8:92:ea:3a:bc:
                    a5:9c:b7:fc:0c:ad:21:bb:d6:2b:9f:e9:49:1e:7d:
                    75:cb:1b:71:48:f8:d2:7b:75:9e:ab:8b:34:a1:dd:
                    4a:bf:a5:40:0e:2b:e5:9f:98:9b:1b:94:9a:a6:70:
                    6f:cb:7b:87:39:8e:b7:5b:2b:a4:e7:10:bd:3c:c8:
                    40:03:5c:4d:a1:0f:76:8d:ce:ef:3d:9f:b6:e3:33:
                    05:0d:f3:e5:27:63:92:2f:30:87:ff:12:a2:d7:a2:
                    ab:67:41:09:ae:f8:89:49:52:bf:66:3d:3d:9b:8a:
                    e6:24:0e:73:2c:4d:6c:4b:3a:a5:07:2d:0d:52:51:
                    6d:5f:bf:5a:22:4c:36:81:e2:d6:f7:1c:e4:fe:a4:
                    d5:2e:80:52:f2:96:7d:43:d8:77:80:5e:4d:00:02:
                    95:25:9c:62:89:07:21:80:2e:c7:1e:45:d3:77:be:
                    e4:68:1b:07:53:ff:03:c5:c2:01:3a:c6:a0:da:fe:
                    10:6f:8f:84:2a:1c:86:e9:f8:17:c5:af:83:2e:be:
                    4f:31:af:a2:d4:32:6b:18:b8:90:73:bf:d2:01:b2:
                    89:53:57:98:54:6d:8f:92:b5:17:cc:fe:52:26:25:
                    40:d1:71:d7:aa:4c:f0:bd:68:94:11:6b:01:7b:76:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:07:D7:3E:91:6F:FC:01:5E:D2:FB:4E:97:D2:0E:BC:75:78:BE:AC
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:88:00:78:16:11:a1:d2:db:97:16:c5:4d:87:5c:1f:6e:
         ae:ae:88:35:4b:e8:81:50:7d:0d:f4:a1:6d:1f:ef:1b:06:7d:
         c2:56:5d:5c:2a:e2:e9:b3:47:f5:89:20:2c:14:2d:a5:fe:50:
         f6:96:41:cc:55:b8:b6:b8:d0:23:c2:55:76:f3:71:14:15:20:
         4a:fa:c2:29:5b:d9:05:05:55:00:59:5b:fd:ae:18:9c:15:94:
         77:26:1c:cb:f2:2a:00:37:22:b7:ab:88:ba:d0:98:a6:ec:6a:
         72:48:01:65:90:44:5f:ee:7c:63:a3:e3:30:bb:1f:7c:7d:5a:
         aa:ad:1e:d0:c4:86:49:16:a9:36:f4:48:57:c7:80:94:ad:74:
         37:77:56:9f:db:6a:13:55:b4:8f:e8:b0:b6:c7:db:3a:f6:ef:
         63:b5:87:fc:ac:0d:df:cc:17:28:4f:a2:af:34:b2:ff:c8:f4:
         ed:60:6b:f0:73:bb:4f:f8:e3:1e:2f:81:4c:82:6c:bf:86:4d:
         ef:03:c8:45:34:23:79:c2:77:74:1f:13:31:26:e3:ea:90:73:
         c3:d9:2f:48:77:20:81:fc:44:1a:cf:8d:a5:a4:42:b2:ce:90:
         ad:12:25:ec:e7:35:be:af:f5:2e:a4:8b:2e:e6:67:95:12:6e:
         2b:61:d3:90
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHlR1uXtsxKoPYylelhNnNWqsj9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE5N0I3RDlEQkQyNzBBNTYwNjRCNTYwRTMyQzQ2QTVF
MkJEODU3RDAeFw0yNjAxMDYxOTI4MjFaFw0yNzAxMDUxOTMzMjFaMDMxMTAvBgNV
BAMTKEZEMDdENzNFOTE2RkZDMDE1RUQyRkI0RTk3RDIwRUJDNzU3OEJFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQ+oPOt/Z5HGokuo6vKWct/wM
rSG71iuf6UkefXXLG3FI+NJ7dZ6rizSh3Uq/pUAOK+WfmJsblJqmcG/Le4c5jrdb
K6TnEL08yEADXE2hD3aNzu89n7bjMwUN8+UnY5IvMIf/EqLXoqtnQQmu+IlJUr9m
PT2biuYkDnMsTWxLOqUHLQ1SUW1fv1oiTDaB4tb3HOT+pNUugFLyln1D2HeAXk0A
ApUlnGKJByGALsceRdN3vuRoGwdT/wPFwgE6xqDa/hBvj4QqHIbp+BfFr4Muvk8x
r6LUMmsYuJBzv9IBsolTV5hUbY+StRfM/lImJUDRcdeqTPC9aJQRawF7dh49AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/QfXPpFv/AFe0vtOl9IOvHV4vqwwHwYDVR0j
BBgwFoAUCpe32dvScKVgZLVg4yxGpeK9hX0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMjg0ODBGMTg1NTA2NzNDQTc0MDQyQTk2MUQ3RjU3MEUz
RTM5NTZBQzhFQjRBRjJCRUIxODgyRjM3NkM5OUUzLzAvMEE5N0I3RDlEQkQyNzBB
NTYwNjRCNTYwRTMyQzQ2QTVFMkJEODU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQTk3QjdEOURCRDI3MEE1NjA2
NEI1NjBFMzJDNDZBNUUyQkQ4NTdELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjI4NDgwRjE4NTUwNjczQ0E3NDA0MkE5NjFEN0Y1NzBFM0UzOTU2QUM4
RUI0QUYyQkVCMTg4MkYzNzZDOTlFMy8wLzM0MzUyZTMxMzgzOTJlMzEzOTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALb3F
MA0GCSqGSIb3DQEBCwUAA4IBAQA5+IgAeBYRodLblxbFTYdcH26urog1S+iBUH0N
9KFtH+8bBn3CVl1cKuLps0f1iSAsFC2l/lD2lkHMVbi2uNAjwlV283EUFSBK+sIp
W9kFBVUAWVv9rhicFZR3JhzL8ioANyK3q4i60Jim7GpySAFlkERf7nxjo+Mwux98
fVqqrR7QxIZJFqk29EhXx4CUrXQ3d1af22oTVbSP6LC2x9s69u9jtYf8rA3fzBco
T6KvNLL/yPTtYGvwc7tP+OMeL4FMgmy/hk3vA8hFNCN5wnd0HxMxJuPqkHPD2S9I
dyCB/EQaz42lpEKyzpCtEiXs5zW+r/UupIsu5meVEm4rYdOQ
-----END CERTIFICATE-----
Generated at Thu Jan 29 06:54:03 2026 by rpki-client