This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa
File:                     34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          6iJ3t6NosmRYb3QdRRMNHPUJrt8I050YP0x0pT7PLEg=
Subject key identifier:   99:5A:57:48:3C:80:D1:E0:33:40:02:75:8A:39:30:C3:89:B7:A3:51
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       192E64AA8054AC228F58CC5EA1FE92EF0AA49B0D
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa
Signing time:             Tue 06 Jan 2026 19:27:14 +0000
ROA not before:           Tue 06 Jan 2026 19:22:14 +0000
ROA not after:            Tue 05 Jan 2027 19:27:14 +0000
asID:                     266694
IP address blocks:        45.229.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 05:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2e:64:aa:80:54:ac:22:8f:58:cc:5e:a1:fe:92:ef:0a:a4:9b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: Jan  6 19:22:14 2026 GMT
            Not After : Jan  5 19:27:14 2027 GMT
        Subject: CN=995A57483C80D1E0334002758A3930C389B7A351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:52:99:bf:e4:df:bd:1f:fa:de:d8:d3:d8:46:
                    0a:bf:08:f3:51:02:28:70:54:ae:77:32:48:6c:a6:
                    13:87:e9:f8:1d:95:5b:00:cc:f6:c3:0c:01:7d:46:
                    c6:d5:48:b0:41:39:db:49:e6:80:af:37:28:19:59:
                    b0:05:a6:ce:48:f6:2e:91:59:e6:e7:34:3d:3b:56:
                    7d:5e:b4:87:67:a1:3f:8f:f8:cb:61:46:aa:97:79:
                    97:58:ac:96:75:ba:e5:34:9f:1e:15:84:9b:68:19:
                    a8:d3:66:96:5e:0c:e2:b4:5c:7a:c3:fa:2a:2c:b8:
                    33:41:d7:8f:76:8a:3a:8b:d3:b3:85:a1:f4:b4:da:
                    17:8a:20:49:c3:5a:25:3f:4b:d7:fd:1b:8f:67:36:
                    ca:6b:47:bb:d9:af:a5:08:df:77:0b:e3:68:7f:b0:
                    fc:bc:d6:63:3a:08:41:6e:22:10:6d:6c:d4:4b:cb:
                    99:5b:4d:92:a0:58:fb:64:b2:84:99:71:2e:ab:98:
                    6f:be:8c:0d:68:fc:8b:5b:2a:63:4d:e2:ff:b2:ab:
                    b2:b9:df:b2:9c:f9:7a:19:2f:51:43:bf:96:86:a6:
                    e5:a6:3f:dc:ef:c3:dc:c9:77:a7:99:ee:8f:f9:af:
                    fa:83:89:67:8b:de:22:91:42:de:df:93:5b:d3:68:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:57:48:3C:80:D1:E0:33:40:02:75:8A:39:30:C3:89:B7:A3:51
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:83:70:36:4b:c3:66:30:c9:18:10:77:a3:c8:41:f6:94:
         33:08:55:ea:70:b1:8e:26:12:15:1f:13:bd:3b:be:16:4e:8e:
         52:28:ff:1d:c7:66:44:bd:a1:0b:17:5b:21:78:b9:b5:7c:66:
         9f:3b:92:6c:c9:c3:14:15:f7:ee:42:8d:dc:56:4d:9e:d1:66:
         8d:9d:73:4e:a0:8e:4d:43:69:c8:a8:26:af:ad:59:d5:09:ea:
         fe:d9:70:38:49:37:62:86:34:24:c9:17:68:83:ba:54:af:3e:
         0d:88:de:e8:fb:b4:48:4b:0c:9c:0d:23:54:7b:a9:61:f1:79:
         f0:57:cc:bd:b4:68:80:e4:33:53:b6:18:09:1e:fe:18:79:44:
         67:c8:b5:41:e5:6f:82:14:1f:38:5a:71:44:a3:d2:ba:99:a4:
         85:95:fb:18:1f:05:3c:65:96:25:24:05:07:cf:66:a3:cf:36:
         ed:08:6c:29:d0:98:67:ff:04:26:78:38:06:29:e7:5b:de:ae:
         4e:dc:db:55:ab:af:4b:b6:5f:ea:b8:91:2e:41:68:c9:7a:57:
         7c:06:64:74:aa:3d:46:cf:a3:60:c6:c4:f1:94:49:fe:14:b8:
         94:80:3c:d0:cf:f3:c3:b6:d8:28:29:98:2c:54:6c:83:7a:df:
         fb:9f:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:38:23 2026 by rpki-client