This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5E06F7A7E47C80DA82E0BA08FF7A205C42BED713D7E0E703A2108C81024B608/0/34352e3137332e3231322e302f32322d3234203d3e20323634373538.roa
File:                     34352e3137332e3231322e302f32322d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          tv05yhrrTWKfKjtBPVE0a1sHckdfIB2xIv4acxSGlSk=
Subject key identifier:   33:39:57:5F:63:8B:78:1B:67:3A:3A:D1:5E:FC:79:69:94:09:61:CA
Certificate issuer:       /CN=728BC0F7D24F630A286940FF9CAFA557C5824927
Certificate serial:       2D568E3F6155F003B8F137365F6054F399DA5AA5
Authority key identifier: 72:8B:C0:F7:D2:4F:63:0A:28:69:40:FF:9C:AF:A5:57:C5:82:49:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728BC0F7D24F630A286940FF9CAFA557C5824927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5E06F7A7E47C80DA82E0BA08FF7A205C42BED713D7E0E703A2108C81024B608/0/34352e3137332e3231322e302f32322d3234203d3e20323634373538.roa
Signing time:             Tue 06 Jan 2026 20:52:20 +0000
ROA not before:           Tue 06 Jan 2026 20:47:20 +0000
ROA not after:            Tue 05 Jan 2027 20:52:20 +0000
asID:                     264758
IP address blocks:        45.173.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5E06F7A7E47C80DA82E0BA08FF7A205C42BED713D7E0E703A2108C81024B608/0/728BC0F7D24F630A286940FF9CAFA557C5824927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5E06F7A7E47C80DA82E0BA08FF7A205C42BED713D7E0E703A2108C81024B608/0/728BC0F7D24F630A286940FF9CAFA557C5824927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728BC0F7D24F630A286940FF9CAFA557C5824927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 11:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:56:8e:3f:61:55:f0:03:b8:f1:37:36:5f:60:54:f3:99:da:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728BC0F7D24F630A286940FF9CAFA557C5824927
        Validity
            Not Before: Jan  6 20:47:20 2026 GMT
            Not After : Jan  5 20:52:20 2027 GMT
        Subject: CN=3339575F638B781B673A3AD15EFC7969940961CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:96:b8:32:cc:92:f2:45:f2:1e:f5:ac:0d:
                    c6:14:bb:1d:01:a4:90:74:be:6f:c3:ae:4b:52:20:
                    fd:58:d8:d7:68:15:7e:3f:f4:50:d2:d9:e0:37:54:
                    12:0d:fa:43:f6:a0:fb:d2:96:3d:cf:f0:57:57:d5:
                    ca:2e:de:a1:d0:e4:4d:50:2d:5d:c9:9b:2e:47:02:
                    55:d1:35:9b:67:1d:68:d1:27:33:a1:36:0f:d4:c4:
                    60:d3:84:4e:3a:36:3a:8e:86:ef:b2:7d:4d:66:7b:
                    88:b9:f9:76:d6:2e:e5:09:5b:c1:29:3e:dd:6c:c6:
                    f0:b1:e0:6e:55:2c:01:d0:c1:d3:ce:79:20:d4:64:
                    d8:52:98:b3:69:3b:bf:ee:b8:04:d1:76:da:a2:11:
                    4e:29:9e:fe:aa:6a:1f:da:49:69:ee:cc:04:f1:7c:
                    49:ff:2f:b2:c9:25:b0:ac:2e:23:1d:8a:b3:34:bb:
                    13:08:96:a7:eb:d6:91:74:61:6f:71:9c:f3:34:b7:
                    ac:77:b5:14:b9:b0:f8:09:01:25:7e:96:7d:c1:dc:
                    c9:99:63:02:69:a9:b7:43:6d:7f:d3:3d:6c:53:55:
                    04:34:9d:3c:5f:6f:a7:3c:31:96:56:a4:4c:b3:cd:
                    1f:05:37:dc:35:f5:fb:54:42:b7:f5:26:a1:6d:b2:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:39:57:5F:63:8B:78:1B:67:3A:3A:D1:5E:FC:79:69:94:09:61:CA
            X509v3 Authority Key Identifier:
                keyid:72:8B:C0:F7:D2:4F:63:0A:28:69:40:FF:9C:AF:A5:57:C5:82:49:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5E06F7A7E47C80DA82E0BA08FF7A205C42BED713D7E0E703A2108C81024B608/0/728BC0F7D24F630A286940FF9CAFA557C5824927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/728BC0F7D24F630A286940FF9CAFA557C5824927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5E06F7A7E47C80DA82E0BA08FF7A205C42BED713D7E0E703A2108C81024B608/0/34352e3137332e3231322e302f32322d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:39:03:5d:25:90:46:69:9d:83:1c:a4:1c:1a:b4:81:be:
         35:2d:65:c3:cb:d3:e5:15:22:e0:c9:06:33:b4:7b:11:29:02:
         75:98:09:0c:99:21:29:7e:08:54:9f:b2:63:b2:e4:13:74:3b:
         37:b6:71:a4:3b:0b:56:88:ff:85:0f:5d:60:d2:a8:02:af:12:
         27:bd:ee:0c:d9:b7:6e:f1:9d:32:06:a7:99:93:fd:26:7e:3d:
         bd:99:f9:b9:15:3a:83:b6:14:1e:b3:e2:2f:4f:cf:f9:c4:e0:
         f1:90:f5:9a:83:b4:aa:a6:3c:28:cc:1f:28:28:86:a9:3c:84:
         6c:a1:32:c8:90:1b:f4:32:a1:b5:ac:58:bb:ab:83:21:b7:fe:
         92:39:17:f1:55:d9:86:4d:66:5a:05:bc:25:60:3b:05:70:32:
         a2:9f:b9:e6:0d:eb:40:5a:d5:1c:dc:fe:70:3c:ff:f8:1a:7a:
         ec:fe:21:77:c4:e5:00:90:5c:49:7f:db:b6:b0:65:98:b8:f8:
         2b:da:ac:ab:1f:32:16:84:c1:e2:74:15:43:ff:f2:44:98:5d:
         ec:31:92:d5:a3:0a:76:18:89:b9:e9:2e:0e:df:76:31:f1:a4:
         6e:1c:ef:fb:e1:7e:98:77:14:b8:47:3e:76:8c:85:e4:3d:79:
         ec:c3:18:cb
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULVaOP2FV8AO48Tc2X2BU85naWqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI4QkMwRjdEMjRGNjMwQTI4Njk0MEZGOUNBRkE1NTdD
NTgyNDkyNzAeFw0yNjAxMDYyMDQ3MjBaFw0yNzAxMDUyMDUyMjBaMDMxMTAvBgNV
BAMTKDMzMzk1NzVGNjM4Qjc4MUI2NzNBM0FEMTVFRkM3OTY5OTQwOTYxQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPZa4MsyS8kXyHvWsDcYUux0B
pJB0vm/DrktSIP1Y2NdoFX4/9FDS2eA3VBIN+kP2oPvSlj3P8FdX1cou3qHQ5E1Q
LV3Jmy5HAlXRNZtnHWjRJzOhNg/UxGDThE46NjqOhu+yfU1me4i5+XbWLuUJW8Ep
Pt1sxvCx4G5VLAHQwdPOeSDUZNhSmLNpO7/uuATRdtqiEU4pnv6qah/aSWnuzATx
fEn/L7LJJbCsLiMdirM0uxMIlqfr1pF0YW9xnPM0t6x3tRS5sPgJASV+ln3B3MmZ
YwJpqbdDbX/TPWxTVQQ0nTxfb6c8MZZWpEyzzR8FN9w19ftUQrf1JqFtss/1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMzlXX2OLeBtnOjrRXvx5aZQJYcowHwYDVR0j
BBgwFoAUcovA99JPYwooaUD/nK+lV8WCSScwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUUwNkY3QTdFNDdDODBEQTgyRTBCQTA4RkY3QTIwNUM0
MkJFRDcxM0Q3RTBFNzAzQTIxMDhDODEwMjRCNjA4LzAvNzI4QkMwRjdEMjRGNjMw
QTI4Njk0MEZGOUNBRkE1NTdDNTgyNDkyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjhCQzBGN0QyNEY2MzBBMjg2
OTQwRkY5Q0FGQTU1N0M1ODI0OTI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVFMDZGN0E3RTQ3QzgwREE4MkUwQkEwOEZGN0EyMDVDNDJCRUQ3MTNE
N0UwRTcwM0EyMTA4QzgxMDI0QjYwOC8wLzM0MzUyZTMxMzczMzJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzczNTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLa3U
MA0GCSqGSIb3DQEBCwUAA4IBAQBMfTkDXSWQRmmdgxykHBq0gb41LWXDy9PlFSLg
yQYztHsRKQJ1mAkMmSEpfghUn7JjsuQTdDs3tnGkOwtWiP+FD11g0qgCrxInve4M
2bdu8Z0yBqeZk/0mfj29mfm5FTqDthQes+IvT8/5xODxkPWag7SqpjwozB8oKIap
PIRsoTLIkBv0MqG1rFi7q4Mht/6SORfxVdmGTWZaBbwlYDsFcDKin7nmDetAWtUc
3P5wPP/4Gnrs/iF3xOUAkFxJf9u2sGWYuPgr2qyrHzIWhMHidBVD//JEmF3sMZLV
owp2GIm56S4O33Yx8aRuHO/74X6YdxS4Rz52jIXkPXnswxjL
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:20:35 2026 by rpki-client