This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/34352e3137342e3130342e302f32322d3234203d3e203230343733.roa
File:                     34352e3137342e3130342e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          X8Icagm8E1ddeHoHLb31gfhvi1wv69yLIkjehUgM81k=
Subject key identifier:   A8:54:9C:11:52:00:15:C8:BA:7F:8C:90:A6:A2:CF:EA:6A:24:47:12
Certificate issuer:       /CN=F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6
Certificate serial:       1DD7AC7DB5870F5A044F37E30A6A376E45B4E156
Authority key identifier: F2:A9:A9:DA:87:D3:2B:11:C2:7F:39:0E:0A:9B:E1:BA:A0:B9:9C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/34352e3137342e3130342e302f32322d3234203d3e203230343733.roa
Signing time:             Tue 06 Jan 2026 19:37:21 +0000
ROA not before:           Tue 06 Jan 2026 19:32:21 +0000
ROA not after:            Tue 05 Jan 2027 19:37:21 +0000
asID:                     20473
IP address blocks:        45.174.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 22:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d7:ac:7d:b5:87:0f:5a:04:4f:37:e3:0a:6a:37:6e:45:b4:e1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6
        Validity
            Not Before: Jan  6 19:32:21 2026 GMT
            Not After : Jan  5 19:37:21 2027 GMT
        Subject: CN=A8549C11520015C8BA7F8C90A6A2CFEA6A244712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:84:f2:ba:8d:24:cb:43:a5:3e:18:cc:b6:e7:
                    76:9d:a3:e6:29:28:6e:3f:bf:35:7e:84:7b:c5:69:
                    34:2d:6b:6e:e6:7d:da:0e:5b:33:7b:bd:a0:51:f4:
                    72:fc:5b:09:06:7e:ff:e4:ca:80:89:f0:f4:28:4c:
                    85:c2:11:8a:0f:8f:d3:9a:57:44:e8:bc:e8:ab:21:
                    ed:03:dc:88:06:99:e9:f7:6b:b0:86:95:e9:bd:e9:
                    57:ab:6f:fc:75:5e:1e:70:53:63:7c:5a:2f:80:4c:
                    2b:8d:18:00:e0:ac:c5:6f:2b:19:3f:fe:82:89:bf:
                    d8:ca:37:0e:a2:85:eb:ca:7b:6b:25:4d:32:0f:a5:
                    37:38:e9:27:73:2a:1f:3e:39:69:3f:57:bc:90:68:
                    07:4b:a2:d2:cd:cc:dd:2f:18:7c:ed:84:98:9a:a1:
                    d3:38:56:6f:0d:20:85:ce:3f:a4:b3:83:3d:1d:a3:
                    b7:b8:f1:53:96:17:03:b7:a6:cd:68:bf:48:f0:c1:
                    94:e5:d3:ed:16:21:2a:60:d0:01:22:45:63:49:f3:
                    2a:2f:fb:30:2d:ee:89:e1:9f:a2:d4:47:0c:98:e1:
                    9e:d8:33:2e:a3:41:05:1a:6c:67:4b:3e:0f:44:4d:
                    bd:06:1e:05:14:3e:ea:35:48:e4:95:ad:30:df:51:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:54:9C:11:52:00:15:C8:BA:7F:8C:90:A6:A2:CF:EA:6A:24:47:12
            X509v3 Authority Key Identifier:
                keyid:F2:A9:A9:DA:87:D3:2B:11:C2:7F:39:0E:0A:9B:E1:BA:A0:B9:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/34352e3137342e3130342e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:c8:db:10:b7:6f:2c:53:8b:d0:fb:18:79:bf:4e:43:01:
         c3:51:74:c4:b5:43:34:01:65:47:17:96:02:36:7c:d4:de:ae:
         a1:03:c8:0c:9a:2a:50:71:97:1d:8b:2b:39:7e:a3:b6:f5:9d:
         d1:80:1e:e6:03:5d:9a:89:db:b9:77:ee:20:2e:f7:0a:28:e0:
         6e:3d:25:2f:d7:99:8d:99:7a:3c:b5:76:03:60:27:85:19:cf:
         e8:33:b5:b1:d4:f6:8a:0b:65:65:92:4d:8c:66:f6:3b:17:67:
         2a:d0:59:dd:9f:eb:40:c4:0c:33:49:7e:67:3b:15:6a:9b:42:
         92:ad:77:01:ff:c1:e6:7f:0b:db:a9:ec:4d:30:19:fc:e4:b9:
         ff:ef:5d:ce:f6:a2:70:5b:57:7b:11:85:6a:d3:59:27:06:dc:
         15:de:50:da:2c:fb:3b:16:7b:50:6e:d8:9a:76:5f:3c:6f:99:
         bc:93:c3:ec:8a:6a:ea:40:f8:3d:aa:ce:e6:4b:c9:ae:5b:9c:
         bf:fe:f2:f4:8b:24:e5:07:7a:d9:99:c6:77:a0:28:15:c0:90:
         5d:a1:dc:76:5a:9c:f4:54:22:38:f6:e9:6c:33:90:34:92:e3:
         72:30:5d:1e:d1:46:b5:42:72:0b:97:27:91:a1:73:d4:13:10:
         ee:d9:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:27:03 2026 by rpki-client