This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa
File:                     34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa (raw, json)
Hash identifier:          QePPwbBj+/dWXlayPqRgvGAeRN8ekof4kComWmuqQM4=
Subject key identifier:   46:9E:72:6B:A5:6E:A7:97:39:C0:9C:C0:33:03:B7:9A:BB:FC:CA:0F
Certificate issuer:       /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
Certificate serial:       346D0069390F3254A69845C12AF1789D2368BA2D
Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa
Signing time:             Tue 06 Jan 2026 19:47:44 +0000
ROA not before:           Tue 06 Jan 2026 19:42:44 +0000
ROA not after:            Tue 05 Jan 2027 19:47:44 +0000
asID:                     267859
IP address blocks:        45.176.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:00:69:39:0f:32:54:a6:98:45:c1:2a:f1:78:9d:23:68:ba:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
        Validity
            Not Before: Jan  6 19:42:44 2026 GMT
            Not After : Jan  5 19:47:44 2027 GMT
        Subject: CN=469E726BA56EA79739C09CC03303B79ABBFCCA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:e8:5c:3d:14:e0:6e:8f:8e:0d:ba:0f:95:
                    10:51:8a:53:55:5d:ed:80:71:40:0f:a6:92:cb:82:
                    cd:e8:e0:ee:21:c1:84:a5:58:b7:ba:9c:31:81:ce:
                    a1:91:ef:76:19:a9:14:28:09:f6:e2:87:df:d1:c3:
                    03:f2:29:32:6b:82:5c:ed:5b:ee:70:90:f3:be:05:
                    08:6a:9b:81:0a:69:f9:dd:a1:3a:e1:9b:e8:06:2f:
                    36:e6:23:37:0a:df:ea:9c:b9:cd:4e:25:67:1c:d9:
                    c7:8d:63:d2:2a:be:02:55:fd:03:a7:a3:bf:01:a6:
                    73:c8:97:e2:a0:2f:09:10:46:72:c7:a3:90:b9:3e:
                    52:b8:83:1d:1e:cb:3c:57:ec:0c:ac:ec:1d:81:0c:
                    ed:03:ac:7e:da:65:b1:b1:38:a7:c3:03:dc:15:72:
                    b4:54:70:2c:5c:88:49:41:1b:69:c2:5e:cb:8b:c3:
                    b0:f0:8a:24:c7:94:b4:5e:d3:32:4e:c3:dd:79:b8:
                    41:6b:82:a4:3a:4c:cf:01:26:d2:ec:63:43:c4:d3:
                    e7:9b:e9:b5:4d:55:75:f8:43:14:a1:cd:85:c0:7a:
                    d1:9b:ee:7b:42:ef:66:b2:a1:9f:e5:fd:b8:fb:9c:
                    3f:03:a1:6c:29:4c:ae:77:70:1f:21:a8:15:c8:c8:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9E:72:6B:A5:6E:A7:97:39:C0:9C:C0:33:03:B7:9A:BB:FC:CA:0F
            X509v3 Authority Key Identifier:
                keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:5f:ed:db:b2:8c:71:51:77:3a:ac:87:a6:5b:1f:68:a5:
         bc:bc:85:ff:f5:59:0d:91:56:89:22:5d:db:9c:21:aa:47:9a:
         bc:2f:95:9d:86:b9:50:66:7d:34:cd:a4:6d:02:a6:78:0d:78:
         90:37:e7:ec:54:7e:a5:07:91:46:87:8e:1e:13:da:30:59:52:
         81:33:87:b1:83:ba:37:98:c0:63:e9:51:5e:a9:e4:39:d7:65:
         03:88:eb:72:47:bc:f9:61:f4:3d:25:49:28:31:db:05:dc:1a:
         07:63:58:8d:16:41:a9:d7:72:c5:c0:91:28:2d:8d:81:fd:20:
         eb:27:0e:34:42:21:21:e5:8b:ae:35:1a:3b:94:03:47:55:8f:
         5a:b7:ff:6f:21:40:2f:ff:02:ff:51:d1:56:81:ae:5f:50:45:
         1f:9f:d3:25:53:a5:c1:a8:83:54:45:7a:34:9f:8d:ab:03:27:
         0b:44:fd:d1:8d:32:18:d4:bc:ea:d2:b1:c9:a5:e8:e6:c7:01:
         3f:ae:11:a2:04:9e:ba:9e:97:06:48:c9:64:df:1f:97:98:23:
         02:6c:39:f9:1c:ba:1c:57:25:8b:9a:2d:88:15:e9:e6:8b:65:
         c3:c3:3e:25:8b:4c:ec:80:6c:5d:f1:1a:ee:04:08:3f:e2:c4:
         88:d5:f6:d8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNG0AaTkPMlSmmEXBKvF4nSNoui0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0NThCQ0Y2Q0Y0MERGRTNFNDNCQzA1NEJGNTIwNjkw
NTk2NjQyNzAeFw0yNjAxMDYxOTQyNDRaFw0yNzAxMDUxOTQ3NDRaMDMxMTAvBgNV
BAMTKDQ2OUU3MjZCQTU2RUE3OTczOUMwOUNDMDMzMDNCNzlBQkJGQ0NBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WehcPRTgbo+ODboPlRBRilNV
Xe2AcUAPppLLgs3o4O4hwYSlWLe6nDGBzqGR73YZqRQoCfbih9/RwwPyKTJrglzt
W+5wkPO+BQhqm4EKafndoTrhm+gGLzbmIzcK3+qcuc1OJWcc2ceNY9IqvgJV/QOn
o78BpnPIl+KgLwkQRnLHo5C5PlK4gx0eyzxX7Ays7B2BDO0DrH7aZbGxOKfDA9wV
crRUcCxciElBG2nCXsuLw7DwiiTHlLRe0zJOw915uEFrgqQ6TM8BJtLsY0PE0+eb
6bVNVXX4QxShzYXAetGb7ntC72ayoZ/l/bj7nD8DoWwpTK53cB8hqBXIyCi1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURp5ya6Vup5c5wJzAMwO3mrv8yg8wHwYDVR0j
BBgwFoAU/0WLz2z0Df4+Q7wFS/UgaQWWZCcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNzcxNjAzQjI2ODY5QTAwRjY2MTc1NEQxMDM3MjgzQUE4
Qjk2NTI0MUU4RkRFMjlDMUM4NTk0MkExMjNFRkE0LzAvRkY0NThCQ0Y2Q0Y0MERG
RTNFNDNCQzA1NEJGNTIwNjkwNTk2NjQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjQ1OEJDRjZDRjQwREZFM0U0
M0JDMDU0QkY1MjA2OTA1OTY2NDI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzc3MTYwM0IyNjg2OUEwMEY2NjE3NTREMTAzNzI4M0FBOEI5NjUyNDFF
OEZERTI5QzFDODU5NDJBMTIzRUZBNC8wLzM0MzUyZTMxMzczNjJlMzEzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbB0
MA0GCSqGSIb3DQEBCwUAA4IBAQCbL1/t27KMcVF3OqyHplsfaKW8vIX/9VkNkVaJ
Il3bnCGqR5q8L5WdhrlQZn00zaRtAqZ4DXiQN+fsVH6lB5FGh44eE9owWVKBM4ex
g7o3mMBj6VFeqeQ512UDiOtyR7z5YfQ9JUkoMdsF3BoHY1iNFkGp13LFwJEoLY2B
/SDrJw40QiEh5YuuNRo7lANHVY9at/9vIUAv/wL/UdFWga5fUEUfn9MlU6XBqINU
RXo0n42rAycLRP3RjTIY1Lzq0rHJpejmxwE/rhGiBJ66npcGSMlk3x+XmCMCbDn5
HLocVyWLmi2IFenmi2XDwz4li0zsgGxd8RruBAg/4sSI1fbY
-----END CERTIFICATE-----
Generated at Tue Jan 13 23:19:04 2026 by rpki-client