This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa
File:                     34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa (raw, json)
Hash identifier:          eMjwqC9F42YRrQegU6xnkp+ie7Fl9am5sraPpFr0D4M=
Subject key identifier:   82:E1:A2:37:09:D9:B8:C7:25:8A:B2:36:05:96:DA:6A:A5:05:3A:3A
Certificate issuer:       /CN=FCD0BC7A73B5457DC06566536ED52A642564A6F1
Certificate serial:       62FFC2B807494F815911BF0FF60D7BD6C003D38D
Authority key identifier: FC:D0:BC:7A:73:B5:45:7D:C0:65:66:53:6E:D5:2A:64:25:64:A6:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa
Signing time:             Tue 06 Jan 2026 19:17:18 +0000
ROA not before:           Tue 06 Jan 2026 19:12:18 +0000
ROA not after:            Tue 05 Jan 2027 19:17:18 +0000
asID:                     267724
IP address blocks:        45.166.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ff:c2:b8:07:49:4f:81:59:11:bf:0f:f6:0d:7b:d6:c0:03:d3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD0BC7A73B5457DC06566536ED52A642564A6F1
        Validity
            Not Before: Jan  6 19:12:18 2026 GMT
            Not After : Jan  5 19:17:18 2027 GMT
        Subject: CN=82E1A23709D9B8C7258AB2360596DA6AA5053A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:08:6b:04:ab:da:15:42:8c:30:ba:72:3c:
                    10:3b:bb:43:77:31:9e:62:e8:58:e8:22:b7:13:f4:
                    66:96:59:86:71:0f:ed:ea:4e:02:39:36:6e:76:aa:
                    d2:2b:78:a8:01:43:d2:0b:e9:47:13:8f:10:bf:81:
                    5d:2a:11:ce:55:a2:eb:b5:d6:b4:2f:50:51:86:78:
                    30:cb:8f:1c:3d:3e:72:44:32:a7:5e:0b:e8:85:7c:
                    c5:7f:ef:06:dd:e7:56:34:24:79:91:cd:2a:44:98:
                    ed:15:74:de:39:32:1f:52:50:3c:06:b2:5d:ee:3f:
                    c3:ad:40:7d:1a:0e:a8:3c:32:54:bf:27:0f:d5:68:
                    8d:55:aa:c3:a2:10:5c:ea:1f:1c:52:65:96:a3:bf:
                    57:e8:cf:51:e5:10:23:58:68:22:40:10:ad:33:f6:
                    9b:db:70:79:5e:ae:24:db:80:15:0b:47:71:3a:1b:
                    90:e0:b6:09:a4:13:3e:22:bf:66:b9:af:b9:ae:71:
                    4e:9e:4f:ee:d4:59:c1:d8:77:96:19:23:f9:77:ca:
                    a2:7c:e1:c1:36:16:9b:42:43:73:62:32:a9:cf:04:
                    b1:1e:63:6d:07:9b:17:ff:d9:a6:09:14:95:98:e2:
                    e2:54:4e:b5:8c:65:6e:1c:49:56:b8:0e:20:f4:58:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E1:A2:37:09:D9:B8:C7:25:8A:B2:36:05:96:DA:6A:A5:05:3A:3A
            X509v3 Authority Key Identifier:
                keyid:FC:D0:BC:7A:73:B5:45:7D:C0:65:66:53:6E:D5:2A:64:25:64:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:86:00:01:57:5f:bc:99:70:f5:42:7a:65:eb:43:d0:db:
         4b:c5:0d:8d:34:03:df:c1:48:e2:48:43:f3:78:ab:61:a4:1a:
         6f:e6:b5:e0:c7:28:fa:ef:cf:ff:69:af:a5:60:ea:6e:b0:74:
         43:76:51:e9:4f:38:d7:40:65:65:f7:0d:df:ba:fb:a6:f4:2f:
         98:1d:c7:71:e5:3d:9d:d9:11:da:41:28:a9:85:a2:c6:c1:b6:
         12:31:f7:2d:a8:44:eb:ab:ec:62:fc:81:21:19:ad:3d:62:12:
         52:2d:36:02:42:ef:35:09:bd:09:7e:3a:7e:e9:9c:8c:35:fa:
         1e:19:10:79:ae:55:f4:53:89:e4:6b:12:17:89:45:2e:f6:40:
         7d:e3:42:1e:21:4b:4e:8c:05:70:e9:2e:5c:b1:4f:ac:f1:c0:
         1d:fb:02:ea:20:7f:4a:40:18:46:ed:7b:8b:5b:ca:22:6f:2e:
         cf:96:8e:44:1d:bf:cf:6f:f2:99:a3:b0:23:c7:ef:23:d0:8b:
         6a:3b:e3:ee:cb:51:d1:e4:13:f1:b5:4f:b2:e6:dc:9f:b8:a4:
         0e:88:b1:62:a2:a2:b1:cb:e4:92:c8:ae:45:2e:32:22:6e:05:
         4f:cf:45:2c:a3:74:58:62:69:0a:6c:7c:b7:0d:9a:87:56:1c:
         8e:ff:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:33:31 2026 by rpki-client