This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
File:                     34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier:          Zfm2WDv38VzXLi7WtL99B7fNylRa6l5WsaU5Dr4CaBg=
Subject key identifier:   2E:71:06:44:50:32:84:F1:10:FA:78:59:E8:77:7B:9A:03:BC:98:0A
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       678D504408DD924B113A69401C40D8141D418B1E
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa
Signing time:             Tue 06 Jan 2026 19:33:22 +0000
ROA not before:           Tue 06 Jan 2026 19:28:22 +0000
ROA not after:            Tue 05 Jan 2027 19:33:22 +0000
asID:                     269858
IP address blocks:        45.189.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8d:50:44:08:dd:92:4b:11:3a:69:40:1c:40:d8:14:1d:41:8b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Jan  6 19:28:22 2026 GMT
            Not After : Jan  5 19:33:22 2027 GMT
        Subject: CN=2E710644503284F110FA7859E8777B9A03BC980A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:75:11:c6:85:e9:1a:db:65:eb:0b:04:35:
                    32:39:90:73:cb:0a:34:92:5d:c5:3d:8e:49:c1:ba:
                    8c:b8:23:96:10:38:e3:a1:e3:7e:9e:90:a2:ea:e7:
                    f3:30:80:57:fb:68:1d:c7:28:f7:20:bc:1b:62:53:
                    24:b0:01:bd:fe:4d:4b:66:d7:7d:89:39:e2:0c:6a:
                    43:30:7e:9d:31:e1:a7:40:ba:87:d7:93:a8:5d:05:
                    fe:02:06:54:f2:4a:9f:f8:2e:fe:83:f0:7a:45:bf:
                    66:c7:cb:03:99:4c:f6:af:b9:57:4b:2d:9e:97:9f:
                    1b:7d:bf:97:5b:98:45:ce:14:74:fb:b1:d6:e6:4a:
                    2a:d5:09:93:6a:eb:5a:7a:98:54:6c:9d:9b:cc:51:
                    6b:63:0c:93:d0:f4:6a:04:24:d1:b4:cf:70:54:2a:
                    84:b9:3d:24:63:05:da:aa:d1:39:39:06:a9:db:86:
                    79:cd:0d:b5:e0:5e:cd:7c:b8:8e:24:44:2b:46:70:
                    16:8d:8a:ee:7f:79:ee:56:a3:c2:9d:d1:c6:a0:95:
                    9e:c8:4f:d2:ff:89:d1:16:b6:e3:b5:35:ee:8f:ed:
                    03:e5:d3:c2:3f:40:b6:ca:af:19:0b:77:73:58:87:
                    47:5a:0d:ad:ae:bf:7b:4c:77:70:ee:d0:8d:19:cf:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:71:06:44:50:32:84:F1:10:FA:78:59:E8:77:7B:9A:03:BC:98:0A
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139382e302f32342d3234203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:22:7b:f7:dd:6c:30:e9:c4:9d:c2:4e:ae:c4:5f:a3:d1:00:
         4c:57:65:34:c2:7e:f3:e7:39:e6:c9:62:7e:a4:98:c1:32:27:
         e1:dd:3d:7e:49:48:33:0b:b3:01:52:c7:8c:2d:52:34:38:6f:
         7b:28:69:43:b0:a5:93:9a:c6:47:bc:ca:f0:14:28:0a:de:4e:
         f4:90:e5:71:d4:37:ab:4d:49:c9:7a:5e:ea:40:62:f0:a9:57:
         4a:d5:25:2f:5c:ed:a8:e1:7d:0e:25:f0:1a:11:60:93:16:34:
         7a:fd:68:05:9d:01:62:66:f6:fc:8d:b3:1d:c3:24:03:f9:d6:
         ae:31:03:82:27:c8:d7:7f:c9:93:b5:21:4b:83:d2:bb:f5:c8:
         6e:ba:2a:c4:af:cc:9e:19:66:b2:b4:23:b3:6e:47:f7:62:bb:
         f4:51:f8:a7:50:74:5a:8d:59:f8:6a:21:07:a4:f5:7f:dd:76:
         ec:c2:d8:e5:c5:97:6f:5f:fe:29:aa:59:a8:86:d3:db:20:36:
         9e:a8:23:6a:40:75:93:eb:23:5a:e6:81:50:f0:55:8b:56:bd:
         fa:93:61:7f:dd:c3:73:f3:bd:23:e9:05:b6:63:cd:ac:01:2e:
         e9:79:30:d8:04:3b:35:92:c0:fd:46:4c:1e:00:e6:ef:3d:87:
         44:ac:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:28:44 2026 by rpki-client