This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa
File:                     34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa (raw, json)
Hash identifier:          uD8TRGWpt98/uaxMchXF30A7CI8WJJlP/Vg7s1W0PyM=
Subject key identifier:   30:09:B6:E6:6A:23:1D:A8:59:7C:FA:2C:B2:33:87:8F:D9:1A:C9:E7
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       7C22B4652D157FC22A8AA15869A46B43ABF30727
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa
Signing time:             Tue 06 Jan 2026 19:17:50 +0000
ROA not before:           Tue 06 Jan 2026 19:12:50 +0000
ROA not after:            Tue 05 Jan 2027 19:17:50 +0000
asID:                     267823
IP address blocks:        45.172.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:22:b4:65:2d:15:7f:c2:2a:8a:a1:58:69:a4:6b:43:ab:f3:07:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Jan  6 19:12:50 2026 GMT
            Not After : Jan  5 19:17:50 2027 GMT
        Subject: CN=3009B6E66A231DA8597CFA2CB233878FD91AC9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:b8:26:fe:26:20:d9:51:b4:b8:fe:88:28:
                    24:8f:fa:87:3e:f2:fd:01:ba:e1:ad:24:72:a6:4f:
                    50:20:ac:30:f9:e2:4c:b2:49:06:70:93:a8:83:c6:
                    4b:63:4f:fa:49:d4:3c:9e:49:68:dc:d3:6d:d0:6b:
                    79:3a:31:91:9d:2a:c2:5e:16:e6:ea:fa:4a:b3:9e:
                    e0:05:e1:c7:df:fb:d6:47:ba:6f:00:02:d6:e6:23:
                    36:09:d3:b3:a0:72:1c:f1:93:10:21:03:b6:e3:48:
                    e4:4a:8e:11:53:fc:87:6e:f3:f2:f0:ed:95:61:82:
                    d5:d3:9e:01:3a:2f:6f:90:c9:09:bd:ed:63:d4:8f:
                    de:59:77:cf:2a:a9:ca:e0:3c:83:93:82:74:59:4b:
                    8a:0e:e4:24:96:54:41:dc:d1:45:a4:90:b3:b0:17:
                    93:09:b8:38:3d:a1:9f:f9:2c:a7:f5:c0:dd:49:18:
                    9c:d3:e3:82:75:de:aa:5f:84:1e:1c:ec:0f:32:81:
                    aa:6d:81:83:a3:e1:fc:22:15:40:d3:14:9f:9b:9b:
                    1c:49:ef:1c:4d:82:36:64:9a:e0:1e:25:84:87:18:
                    ac:ee:c2:89:3d:f0:a3:5b:b7:2e:91:64:9e:48:c5:
                    4a:66:f8:06:b8:4e:9e:80:b9:0b:f8:41:50:06:46:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:09:B6:E6:6A:23:1D:A8:59:7C:FA:2C:B2:33:87:8F:D9:1A:C9:E7
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137322e3232322e302f32332d3234203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:99:4a:9f:48:53:a1:b2:87:32:61:b5:92:c5:6e:7a:03:22:
         e4:24:65:b8:cb:e4:df:54:6f:6b:ec:ba:ee:e7:9f:d8:c6:ca:
         6f:de:24:a1:44:5e:37:18:21:4d:d0:36:29:19:6f:8c:14:a2:
         08:0e:92:6a:10:78:91:98:5c:08:b0:85:ef:c6:6d:df:2f:a9:
         92:3a:31:de:7e:90:8c:59:66:88:22:2b:2b:c0:67:59:1d:f2:
         bb:55:3b:43:c7:73:7d:59:af:b2:57:1a:e3:24:61:81:34:54:
         b7:8f:53:d5:9c:1b:56:d4:ac:fe:5d:23:ee:0e:f3:a8:50:81:
         6c:72:d8:51:d8:d0:c9:97:45:60:13:ca:f6:df:dc:42:2d:55:
         e5:6e:41:44:06:2d:f9:f3:36:4d:70:2f:73:38:0c:4d:2d:31:
         07:f6:7c:70:9d:5a:a3:a4:5f:16:32:ed:f8:3f:a5:d5:b5:0d:
         0f:6a:a9:ba:8e:5a:0a:c4:26:ff:e0:47:fb:06:70:b6:c4:23:
         02:5f:11:6e:a6:7b:48:b5:c0:c1:a1:17:13:2d:ab:89:1a:29:
         56:13:88:d8:94:f2:e3:a1:9c:4a:e6:17:45:ad:57:ec:01:d3:
         27:ad:95:62:bc:f3:5b:ae:59:35:fd:56:09:81:a8:46:41:b6:
         08:11:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:49 2026 by rpki-client