This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203237393531.roa
File:                     34352e3137362e3233322e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier:          biGQ1u1/3KdVVxIejFYbSG1w2sbdwPz2sC2PXXxhiso=
Subject key identifier:   91:C7:D3:94:AF:66:B9:3A:45:A3:76:97:0C:A6:2E:F4:EE:9F:34:BE
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       7AE1BCD54B56534615476587857523F013BA4B76
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 19:41:49 +0000
ROA not before:           Tue 06 Jan 2026 19:36:49 +0000
ROA not after:            Tue 05 Jan 2027 19:41:49 +0000
asID:                     27951
IP address blocks:        45.176.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Feb 2026 16:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:bc:d5:4b:56:53:46:15:47:65:87:85:75:23:f0:13:ba:4b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Jan  6 19:36:49 2026 GMT
            Not After : Jan  5 19:41:49 2027 GMT
        Subject: CN=91C7D394AF66B93A45A376970CA62EF4EE9F34BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:e4:dc:aa:e2:64:8f:6b:6a:75:66:cc:1d:
                    2b:90:23:4d:92:5e:1c:f9:9b:ab:69:d6:5c:36:cc:
                    f9:db:8e:4d:a7:64:49:11:68:f4:8d:2e:97:e7:2e:
                    25:1f:5f:d0:32:02:18:d0:db:67:4c:ba:95:a4:11:
                    d1:7c:04:ff:26:62:20:c9:b4:2d:ac:63:8a:b0:b3:
                    fc:77:d6:99:35:e9:f9:68:da:bf:57:ca:9f:e6:1c:
                    2c:d0:2f:58:a0:d1:29:d0:80:1c:7d:a0:d2:1e:b0:
                    c5:4d:98:bf:5d:61:f5:28:c0:8f:61:e9:49:e8:a1:
                    cd:a3:b8:33:12:ad:e7:21:44:99:ec:97:27:75:e9:
                    43:4c:de:bf:a5:47:59:e4:54:8d:79:5c:e6:fd:41:
                    7e:b7:8b:ce:6d:9b:2f:9e:64:be:dc:f3:f9:71:5d:
                    1b:b9:e3:7b:4c:c5:dc:e5:74:ed:b5:43:56:5a:b4:
                    3b:16:66:48:0a:3b:50:90:ed:12:89:18:48:69:c9:
                    63:92:e4:07:10:58:3c:72:b3:2e:3c:4b:f9:92:c1:
                    c3:91:57:7b:65:fb:57:91:4f:42:fc:df:b8:a6:3e:
                    f7:0f:2b:89:fa:5d:ff:81:da:ae:87:e5:e7:c6:7e:
                    c4:44:86:37:46:0c:40:3b:13:fe:e7:ad:cb:0e:28:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C7:D3:94:AF:66:B9:3A:45:A3:76:97:0C:A6:2E:F4:EE:9F:34:BE
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:75:f9:c9:00:cd:3c:8a:21:49:25:6a:80:ab:50:f6:f9:85:
         9e:94:bf:7f:bc:7e:e5:b6:6a:3a:16:67:8b:8f:43:d9:79:b2:
         2e:1e:77:45:32:34:4d:10:3f:ac:f3:29:2c:ab:3f:08:9a:a5:
         0d:c5:aa:8f:57:94:50:6a:19:90:aa:94:a6:d7:c0:38:e1:19:
         51:e9:8c:e0:de:00:a7:6c:b1:3a:65:bb:f5:7c:c2:ab:08:61:
         c4:aa:07:14:33:2d:00:f4:de:40:df:6e:12:bb:d5:bf:98:04:
         8b:b7:07:0b:67:04:f3:71:77:be:fb:df:d3:9f:08:41:46:86:
         3e:54:b2:73:a1:ef:21:b0:f4:a5:f1:c1:e9:58:0f:06:37:d0:
         7d:78:b5:28:e4:7d:4a:a7:43:2d:fe:6e:c7:97:63:9d:8f:0b:
         09:9e:4f:69:dc:ce:a0:24:91:a1:4f:7d:0a:14:6f:04:45:47:
         8d:ab:96:22:87:74:12:c0:7a:bd:6a:92:38:5c:06:42:ae:85:
         1c:75:d3:10:bd:87:70:8c:01:84:93:23:19:f5:3c:3c:74:55:
         5f:a7:15:3f:7b:0f:bc:df:b2:d8:08:73:10:83:96:4c:ba:e8:
         bd:6f:95:45:37:12:92:53:54:cb:1b:9d:4a:47:fe:ef:a7:8b:
         7a:8a:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 19:49:19 2026 by rpki-client