This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32322d3232203d3e20323634373538.roa
File:                     34352e3137382e36382e302f32322d3232203d3e20323634373538.roa (raw, json)
Hash identifier:          FwrvQq6UKt+c+hP3YPnSJLgUSsMWLaNJa/cuVCb+A6U=
Subject key identifier:   55:E0:24:E9:8C:8B:78:58:E1:49:AD:0F:BF:09:8F:33:AD:05:4C:99
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       5C66BDDFCC3A1EAB44D9D306F590DCA7E550C522
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32322d3232203d3e20323634373538.roa
Signing time:             Tue 20 Jan 2026 16:26:19 +0000
ROA not before:           Tue 20 Jan 2026 16:21:19 +0000
ROA not after:            Tue 19 Jan 2027 16:26:19 +0000
asID:                     264758
IP address blocks:        45.178.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:66:bd:df:cc:3a:1e:ab:44:d9:d3:06:f5:90:dc:a7:e5:50:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Jan 20 16:21:19 2026 GMT
            Not After : Jan 19 16:26:19 2027 GMT
        Subject: CN=55E024E98C8B7858E149AD0FBF098F33AD054C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:3d:34:11:ff:a9:27:2a:47:2d:04:c1:d0:
                    90:d6:eb:67:61:c7:c9:eb:ab:8b:f6:0a:c1:b1:e1:
                    3d:b9:3a:14:d7:71:d7:84:08:19:45:1d:4d:35:25:
                    d4:8a:87:5f:cb:40:02:f6:56:16:a3:aa:34:bc:7e:
                    9b:3f:21:50:81:bb:e9:71:c9:d9:ae:8f:1d:41:75:
                    9d:3f:72:0a:4f:50:9e:fd:a4:c6:d0:88:2d:84:29:
                    c3:70:f1:f8:26:3f:ce:35:12:83:d6:8a:e9:fd:77:
                    8f:53:4e:ef:7f:60:db:de:08:1d:e7:34:e9:7f:5e:
                    9f:95:b0:c6:61:7c:12:3f:cd:35:3a:3d:ae:d1:42:
                    42:79:be:9a:8d:4e:d5:30:42:fa:7f:5f:70:29:22:
                    0d:82:16:ec:09:6e:88:e8:52:32:b4:d7:67:b0:91:
                    97:78:da:a9:a3:60:99:0f:b4:b8:dd:d9:6a:2b:4f:
                    80:ce:4b:22:3d:46:82:8e:53:fe:7c:cf:2a:e6:ab:
                    df:9e:fe:b1:df:4d:71:1c:45:b5:74:3c:71:36:04:
                    bf:bd:9a:51:91:e8:4c:05:4e:9c:e2:f5:3c:d6:7a:
                    92:32:e1:3b:5c:77:5c:bf:6c:7a:39:66:81:46:30:
                    17:c8:fd:25:36:d3:66:45:cb:b7:08:e5:ba:ed:d3:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:24:E9:8C:8B:78:58:E1:49:AD:0F:BF:09:8F:33:AD:05:4C:99
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32322d3232203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:00:57:91:40:9c:cb:c6:6f:aa:24:c5:a2:f5:6d:f3:8b:6d:
         e0:fc:ef:89:6f:e5:cb:df:fd:0c:b5:ad:1b:e6:24:4a:af:29:
         60:99:41:34:0f:52:1b:95:eb:0d:b6:50:67:8b:a7:6c:dd:6a:
         e5:67:3a:67:0b:fc:d3:21:e1:86:4f:bc:17:88:0c:f8:bd:b0:
         a7:e0:72:f3:3b:20:ea:78:14:f6:fd:d0:16:51:fe:06:07:8b:
         e0:74:f3:e4:3d:b4:de:ae:f6:6c:e0:73:e3:b1:70:ee:79:1b:
         f0:b8:0d:28:61:44:4c:6c:94:26:ef:b9:59:7e:1e:38:f5:6e:
         73:c5:6d:6e:e1:8e:51:3d:d5:f5:9d:50:5a:95:77:51:ba:13:
         62:d8:cd:cb:90:5c:eb:ac:3e:a8:e6:70:6c:7f:d6:53:b4:28:
         4f:0e:4b:1f:bb:5b:87:39:28:31:79:c6:b8:d9:2d:06:14:5c:
         8b:9f:1a:bb:94:e1:4e:c7:c2:29:ce:85:71:70:70:b2:e4:da:
         33:5b:b7:0b:6a:80:67:de:b4:68:94:40:8a:a8:a3:f6:ed:9e:
         1c:4c:80:e3:47:01:3f:ee:39:a2:e8:0b:43:e1:68:44:3f:93:
         5a:a9:78:3d:0e:d9:ab:85:5f:3a:01:c3:4c:c4:3f:f2:46:da:
         9f:ea:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 20:51:12 2026 by rpki-client