This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/34352e3137312e38312e302f32342d3234203d3e20323731373736.roa
File:                     34352e3137312e38312e302f32342d3234203d3e20323731373736.roa (raw, json)
Hash identifier:          DTGls1BfL1JBnGhWLlXfrhIqKAjkalNXtZmx9OQxLzM=
Subject key identifier:   34:11:96:9C:6A:5A:27:60:99:BE:8D:15:17:CD:16:2F:7F:D9:85:B9
Certificate issuer:       /CN=FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28
Certificate serial:       73819696858337E5E06FCB990DA2AD071DC67F18
Authority key identifier: FE:8F:8D:A2:CA:31:F6:36:CF:FA:E2:53:DD:8F:62:F8:4E:08:BE:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/34352e3137312e38312e302f32342d3234203d3e20323731373736.roa
Signing time:             Tue 06 Jan 2026 20:49:31 +0000
ROA not before:           Tue 06 Jan 2026 20:44:31 +0000
ROA not after:            Tue 05 Jan 2027 20:49:31 +0000
asID:                     271776
IP address blocks:        45.171.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:96:96:85:83:37:e5:e0:6f:cb:99:0d:a2:ad:07:1d:c6:7f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28
        Validity
            Not Before: Jan  6 20:44:31 2026 GMT
            Not After : Jan  5 20:49:31 2027 GMT
        Subject: CN=3411969C6A5A276099BE8D1517CD162F7FD985B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:12:27:84:b2:90:44:0d:f1:24:a5:8a:5f:
                    bc:c1:fa:0f:28:db:2c:7f:2c:4d:5d:a6:5f:63:8e:
                    29:96:9a:05:2b:b1:02:d8:1e:a1:76:e4:68:63:30:
                    56:4c:c5:12:e9:6f:ac:5e:b0:ff:73:f4:7a:00:b3:
                    c3:30:16:4a:6e:ce:dd:a0:be:54:b2:d5:24:e8:9a:
                    48:23:36:b8:2e:7d:55:e0:7a:b5:bd:cf:4f:cc:92:
                    d9:e9:0b:ca:02:c1:92:18:3c:3b:db:31:dc:79:f0:
                    f1:f5:0b:a5:d0:98:b9:80:ce:17:28:6c:34:7e:6e:
                    3e:91:3e:55:7e:32:fb:b6:e7:fd:ad:a7:8c:ba:07:
                    1f:b3:6b:9d:82:f8:e5:2c:c3:3a:28:d7:91:0c:0e:
                    79:63:c0:43:34:7e:28:05:58:af:75:70:75:59:de:
                    3c:39:80:7d:cc:c8:b2:24:ad:f4:ba:83:d8:8b:76:
                    7b:86:fc:d7:02:cc:00:bd:3e:5c:42:c6:95:02:13:
                    47:17:44:d3:6a:c6:83:7f:63:b3:bf:34:95:1a:69:
                    a0:88:0f:1a:7d:af:49:8f:5f:1e:f0:34:e7:b4:2c:
                    fb:34:98:69:cc:8f:fb:8f:bb:49:3f:09:31:eb:c5:
                    0c:f7:2a:fe:c5:ac:b6:14:6e:63:84:d4:93:37:b3:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:11:96:9C:6A:5A:27:60:99:BE:8D:15:17:CD:16:2F:7F:D9:85:B9
            X509v3 Authority Key Identifier:
                keyid:FE:8F:8D:A2:CA:31:F6:36:CF:FA:E2:53:DD:8F:62:F8:4E:08:BE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/34352e3137312e38312e302f32342d3234203d3e20323731373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:32:fd:cc:43:cb:1d:fa:74:93:e5:77:29:0d:10:98:be:70:
         26:c1:8b:40:83:be:85:f3:6d:36:20:16:95:25:cf:9a:90:e7:
         7a:45:c2:15:53:8f:92:ae:4f:9d:75:99:ad:a0:48:56:3c:41:
         61:49:d1:e6:de:63:76:36:fd:d5:08:72:f2:82:e4:c7:4e:91:
         05:38:6f:d0:01:7c:e1:55:ef:45:cd:07:ca:0e:ac:90:64:53:
         40:20:56:38:6b:11:de:91:96:ba:ae:41:8f:4f:ab:a5:15:f7:
         00:de:d5:83:20:38:10:f6:ee:38:ba:ef:c8:62:d1:d7:20:5a:
         af:11:ca:c7:dd:21:d6:f0:d2:8c:d1:92:48:1a:c3:1a:f5:ef:
         c2:68:a0:77:0f:33:ae:c4:dd:5c:44:37:ce:e0:55:e3:10:83:
         00:1a:86:8f:03:fe:c9:a9:76:f5:f6:c6:32:8d:eb:ce:a1:05:
         91:df:1f:1a:44:69:51:de:7a:3c:74:e8:00:a0:d5:d2:24:62:
         5d:d8:7d:06:8c:2d:bc:2c:57:ad:3b:0f:a8:fd:70:77:de:2c:
         73:02:8c:e3:af:9b:84:fd:ac:b4:8e:3a:3b:a4:0f:57:f9:92:
         59:ff:a4:fc:5f:08:62:82:33:8d:5c:83:76:97:3a:08:5c:95:
         c7:0a:68:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:02:46 2026 by rpki-client