This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/34352e3138312e34322e302f32382d3332203d3e20323635353834.roa
File:                     34352e3138312e34322e302f32382d3332203d3e20323635353834.roa (raw, json)
Hash identifier:          tg8mQXF7D6EBhIvcTvS+157LW7wcZ2pDXIa5k010k/g=
Subject key identifier:   1C:5B:C8:E2:8B:9B:3B:C3:1E:B6:B7:C0:33:21:60:66:77:E5:99:DE
Certificate issuer:       /CN=CD0B4D24BCD10878701F4C262615351929118638
Certificate serial:       452AC86DCE3D3DC277907253D9907E51193650EE
Authority key identifier: CD:0B:4D:24:BC:D1:08:78:70:1F:4C:26:26:15:35:19:29:11:86:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/34352e3138312e34322e302f32382d3332203d3e20323635353834.roa
Signing time:             Tue 06 Jan 2026 19:36:33 +0000
ROA not before:           Tue 06 Jan 2026 19:31:33 +0000
ROA not after:            Tue 05 Jan 2027 19:36:33 +0000
asID:                     265584
IP address blocks:        45.181.42.0/28 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 07:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2a:c8:6d:ce:3d:3d:c2:77:90:72:53:d9:90:7e:51:19:36:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0B4D24BCD10878701F4C262615351929118638
        Validity
            Not Before: Jan  6 19:31:33 2026 GMT
            Not After : Jan  5 19:36:33 2027 GMT
        Subject: CN=1C5BC8E28B9B3BC31EB6B7C03321606677E599DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:2c:b9:d6:96:ac:ce:f4:b4:9c:9a:e4:7b:
                    b7:35:2f:82:8d:b6:6d:12:28:d3:b5:ac:20:91:c0:
                    9f:f2:bd:fd:d1:e9:25:1a:b0:d7:59:b2:11:82:e7:
                    17:c5:83:20:14:3b:bd:b4:fd:33:8b:a1:72:1c:bb:
                    b1:ab:94:38:32:56:82:77:9e:ec:25:7c:1c:a8:46:
                    1a:da:2a:39:f3:2e:39:31:3a:0f:98:14:3b:5e:e1:
                    7a:2a:af:18:64:04:21:5a:97:9b:2c:69:73:72:f4:
                    ae:29:38:ea:10:6a:7b:d5:66:a3:30:c4:c2:3e:ee:
                    5d:a7:c5:e2:15:0f:44:5c:56:d2:66:a6:a4:e6:fe:
                    1d:0d:d8:4c:56:63:e8:f1:00:e4:e9:4a:ff:d5:24:
                    ab:9a:2b:cc:d7:89:7b:5f:cb:46:1f:f8:a5:59:08:
                    a9:4c:d5:24:88:cc:40:71:ce:5c:7a:35:70:5b:1f:
                    1c:d0:e1:24:f1:8a:13:94:c0:77:d3:8f:7a:bb:ec:
                    96:00:ee:14:84:2d:76:f6:c0:cc:f0:c7:01:b8:c3:
                    19:82:7b:bc:8b:38:12:5f:9b:60:5a:8b:aa:83:8e:
                    9f:4f:a4:7c:b6:85:79:07:76:8c:3c:05:c9:c6:19:
                    37:65:f3:42:bd:ed:ac:41:c0:4f:9f:2d:eb:2b:68:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5B:C8:E2:8B:9B:3B:C3:1E:B6:B7:C0:33:21:60:66:77:E5:99:DE
            X509v3 Authority Key Identifier:
                keyid:CD:0B:4D:24:BC:D1:08:78:70:1F:4C:26:26:15:35:19:29:11:86:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/34352e3138312e34322e302f32382d3332203d3e20323635353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.42.0/28

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:0f:2e:45:3f:64:f3:1c:32:5b:81:18:ee:d4:72:91:21:
         7d:d7:57:70:39:28:ea:32:55:13:6b:d8:b8:c0:45:2c:9e:38:
         ab:24:ce:f5:b9:1b:d4:4e:56:ca:90:57:c5:18:ba:a8:8f:21:
         35:4f:35:e4:15:40:6c:04:ed:11:b3:81:ab:0f:9b:c2:ff:07:
         64:fa:f5:63:4a:bf:30:6b:72:66:43:af:c0:69:0b:ed:5f:63:
         98:82:34:0d:2b:c8:c4:67:38:d6:bc:4c:89:94:dd:10:34:dd:
         aa:57:63:a1:2c:85:78:15:cf:e5:07:bc:aa:c4:0a:58:79:08:
         6c:92:d0:55:81:cf:14:f2:f9:70:2c:50:50:c7:7b:ce:1b:1f:
         9f:45:e3:00:08:35:ce:b0:4c:9f:08:f3:3f:f2:38:cf:13:1f:
         f2:c1:eb:9f:f8:59:19:f5:bd:1c:9e:72:11:8c:71:02:4c:cd:
         82:4e:17:5c:64:43:c1:18:84:c1:69:03:89:99:22:f2:fa:a3:
         03:9e:c9:39:e5:99:ce:a1:28:67:8b:f3:e8:b7:fa:b9:d1:89:
         14:2b:81:28:2d:46:ef:de:6f:48:ba:a4:8c:6b:bd:f3:73:1f:
         93:3d:9c:f9:06:00:9f:6a:69:95:b7:cf:8d:7a:17:1e:46:17:
         23:9a:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:30:03 2026 by rpki-client