This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa
File:                     34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier:          UA6w77cJgLNBhiunwKFAvazCS6sbh0YIOkMAMpgXJ10=
Subject key identifier:   86:7A:EE:46:B2:3F:B0:93:B9:4C:DC:1F:C5:8A:C3:37:F8:94:3B:09
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       7D46D4A8CA18526DEFBF08871560502411CC9B38
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa
Signing time:             Tue 06 Jan 2026 19:33:21 +0000
ROA not before:           Tue 06 Jan 2026 19:28:21 +0000
ROA not after:            Tue 05 Jan 2027 19:33:21 +0000
asID:                     269858
IP address blocks:        45.189.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:46:d4:a8:ca:18:52:6d:ef:bf:08:87:15:60:50:24:11:cc:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Jan  6 19:28:21 2026 GMT
            Not After : Jan  5 19:33:21 2027 GMT
        Subject: CN=867AEE46B23FB093B94CDC1FC58AC337F8943B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:67:4d:90:98:09:62:83:24:7e:87:73:b2:
                    e4:a4:e7:fa:5e:06:4e:96:26:a6:81:d9:77:1e:15:
                    77:04:f8:90:92:05:e7:0a:b7:84:b0:97:42:d2:8a:
                    48:17:ac:86:bf:71:07:49:00:dc:0a:20:c8:02:01:
                    a9:6e:68:f9:c1:01:c9:45:b8:c2:96:76:e0:8c:4e:
                    21:26:f7:c2:2d:fb:5a:03:98:bb:3c:9b:2e:4f:4d:
                    2c:aa:a9:a2:7d:40:95:36:42:da:1a:c6:24:70:d7:
                    bb:51:9f:11:52:30:74:fe:5f:b2:4d:5b:3c:30:b4:
                    54:cf:77:9f:37:5e:02:ce:72:d0:13:a5:7a:2e:f7:
                    5c:58:cf:ed:84:a0:da:10:e0:bb:e6:58:4d:6d:fd:
                    50:69:a6:3b:a8:36:24:67:c3:22:5a:03:f2:cc:40:
                    46:b5:26:cf:9a:0b:5c:cc:58:f0:8e:23:7d:4e:35:
                    be:66:12:ea:36:31:df:9e:ab:5f:5f:79:c3:ae:c5:
                    fc:0d:c0:13:ec:7a:62:5f:02:55:4e:2d:d8:c7:bc:
                    78:4c:62:32:71:b0:91:d2:f0:94:9d:8a:aa:53:d4:
                    89:0c:5f:69:45:e6:f7:dd:14:72:20:76:69:92:99:
                    0a:ec:a6:e2:e6:b4:f2:0a:f6:fd:72:14:e6:08:1e:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:EE:46:B2:3F:B0:93:B9:4C:DC:1F:C5:8A:C3:37:F8:94:3B:09
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139392e302f32342d3234203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:cd:d1:9a:eb:d9:41:1b:18:2f:37:b4:80:ed:2c:ad:74:
         6a:f1:72:82:23:63:b4:fb:01:e2:da:be:c2:ab:fc:10:51:9a:
         ac:17:a2:b5:32:6c:8b:38:91:74:18:36:aa:ac:ff:3f:ad:4b:
         97:51:aa:01:09:1f:c0:6e:2f:22:55:4d:6e:9e:7d:e4:f4:cc:
         2b:a2:d9:ac:c8:36:27:bd:e0:39:9a:b4:a6:15:fd:2a:8a:72:
         7a:7b:aa:6a:0a:ff:2a:7d:1d:08:7b:1e:81:1e:35:d5:45:fa:
         ad:54:24:1a:0c:0d:33:7c:68:22:f9:3a:82:e3:75:39:36:57:
         78:ff:f4:30:2a:ae:bc:dd:e1:ff:73:69:97:df:bc:e3:da:91:
         2b:e1:ca:db:23:21:cc:bc:33:8a:2c:4e:c8:8b:51:66:2a:21:
         79:a3:b4:5f:ef:30:ce:dd:80:fa:ac:9f:ff:9c:99:35:71:d0:
         7a:65:03:d9:6c:a6:7d:10:04:68:17:8b:e5:85:69:f0:57:f1:
         55:fd:1f:23:98:8a:c9:8a:50:eb:4e:c1:68:fb:70:3c:9d:e4:
         0e:fb:2c:e1:f9:4f:ce:93:fc:c5:11:6d:5c:3f:1d:10:bb:5e:
         f1:e7:78:d4:2e:91:33:fc:d6:9d:4c:15:7d:96:21:0f:2c:3d:
         5b:46:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:28:40 2026 by rpki-client