This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
File:                     34352e3137362e382e302f32322d3234203d3e20323637383536.roa (raw, json)
Hash identifier:          VeiJuHvnXdMZ53viXIH3GFkczDcZpwN6ZsB8gLg0D0E=
Subject key identifier:   B1:F2:6F:6B:C8:85:2B:8A:F0:10:7F:A7:89:FA:89:1F:54:42:FF:E4
Certificate issuer:       /CN=CE3BBF6B4D984809B9AFC5EDCC482CBD16497274
Certificate serial:       6A12E335782B8717209A4269C35DC795FD57DD52
Authority key identifier: CE:3B:BF:6B:4D:98:48:09:B9:AF:C5:ED:CC:48:2C:BD:16:49:72:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
Signing time:             Tue 06 Jan 2026 19:46:02 +0000
ROA not before:           Tue 06 Jan 2026 19:41:02 +0000
ROA not after:            Tue 05 Jan 2027 19:46:02 +0000
asID:                     267856
IP address blocks:        45.176.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:12:e3:35:78:2b:87:17:20:9a:42:69:c3:5d:c7:95:fd:57:dd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE3BBF6B4D984809B9AFC5EDCC482CBD16497274
        Validity
            Not Before: Jan  6 19:41:02 2026 GMT
            Not After : Jan  5 19:46:02 2027 GMT
        Subject: CN=B1F26F6BC8852B8AF0107FA789FA891F5442FFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:f4:8c:06:e2:4b:b5:25:61:ac:1f:85:0f:
                    ee:f3:47:72:f7:80:c0:41:83:fe:27:b7:ff:7c:0b:
                    b4:92:62:a8:ee:44:a5:a3:1d:41:1c:46:f1:37:fa:
                    47:10:96:bd:55:ac:39:e2:12:f5:bc:dc:cd:e0:72:
                    27:36:85:3a:c7:15:e6:ee:22:56:1f:f5:16:03:ca:
                    ba:3d:40:64:76:0e:ee:bd:92:85:d0:70:66:3a:d0:
                    2e:8e:75:a2:5c:1f:b5:8b:4d:39:58:22:c5:fd:24:
                    14:4f:6a:28:2d:94:16:45:fe:89:df:ba:3a:c3:55:
                    3c:80:61:99:da:e6:d0:d9:ae:1c:4e:7d:7a:ef:20:
                    eb:df:c0:06:9c:f0:f2:ac:f4:71:22:f7:eb:59:9b:
                    e5:35:ea:6c:fb:2c:dd:58:9a:32:23:86:00:29:31:
                    4d:93:91:93:8e:78:b6:d3:8b:8b:a4:4c:30:15:35:
                    62:d0:49:65:b2:0e:86:7b:19:63:20:7d:b7:64:f9:
                    00:0d:8b:16:32:d0:d8:36:54:d9:e0:cd:4a:3b:26:
                    b0:bc:67:91:2c:48:d4:33:e4:b2:bf:de:68:18:12:
                    c7:4c:83:e3:4b:a4:a9:b3:8e:7a:da:f6:8f:bb:46:
                    5c:28:4a:a0:d1:2f:47:a3:40:7a:a9:6f:2e:98:87:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F2:6F:6B:C8:85:2B:8A:F0:10:7F:A7:89:FA:89:1F:54:42:FF:E4
            X509v3 Authority Key Identifier:
                keyid:CE:3B:BF:6B:4D:98:48:09:B9:AF:C5:ED:CC:48:2C:BD:16:49:72:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:4d:d5:c8:6b:51:68:5e:0f:bb:89:7e:ce:fb:11:60:39:da:
         1f:72:85:df:15:e3:af:03:8b:b6:33:42:20:ce:99:31:b6:d8:
         26:42:5d:1e:2c:4a:1c:88:be:89:76:46:4e:f9:8b:74:ed:0d:
         da:61:62:37:7c:9f:50:26:27:74:ba:09:31:0d:4b:03:e5:32:
         97:5f:95:74:da:8b:da:65:c1:8a:f2:43:28:31:7e:a5:a3:68:
         f1:d7:b0:f7:58:e8:2c:a0:d4:8b:a9:ba:e3:32:d7:6a:e1:d5:
         dd:4e:05:e7:12:2c:15:3d:85:8e:65:8a:0a:fe:84:fc:b5:b9:
         f2:5b:07:2c:7d:b2:a2:f3:e5:a7:9e:e5:2c:99:a2:68:93:59:
         82:94:c7:b2:32:71:5c:ff:53:27:25:f2:4a:c4:cd:ab:08:35:
         ce:13:23:33:71:f5:d9:1c:1e:35:bb:4d:6c:64:77:91:36:59:
         6d:34:bf:b5:ca:d0:cd:5a:c1:94:7d:39:a1:29:e9:97:f9:5c:
         1d:03:67:5c:15:89:53:9c:ae:5f:ee:2f:c2:80:6f:35:23:5f:
         90:2d:47:58:db:98:f1:9f:a4:68:e6:9d:c4:c3:e1:f1:c8:1b:
         ef:72:63:23:95:7d:d3:94:39:cb:08:15:e1:77:3e:3c:a6:f2:
         e2:2d:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:58:03 2026 by rpki-client