This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
File:                     34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa (raw, json)
Hash identifier:          6D9x6VKpdf4jygUG5A4q4B0BcForCgqn9v5QAXgdfig=
Subject key identifier:   67:E7:ED:87:23:4A:4A:6B:A0:45:99:A4:23:E5:14:96:45:7F:4B:D5
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       627903E15A0B26AD925A76086C9E2077BF124A1D
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
Signing time:             Tue 06 Jan 2026 19:25:49 +0000
ROA not before:           Tue 06 Jan 2026 19:20:49 +0000
ROA not after:            Tue 05 Jan 2027 19:25:49 +0000
asID:                     266683
IP address blocks:        45.227.196.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:03:e1:5a:0b:26:ad:92:5a:76:08:6c:9e:20:77:bf:12:4a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: Jan  6 19:20:49 2026 GMT
            Not After : Jan  5 19:25:49 2027 GMT
        Subject: CN=67E7ED87234A4A6BA04599A423E51496457F4BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:ea:c1:bf:24:9d:fa:53:76:94:52:ee:e2:
                    37:ab:59:df:f1:21:f9:c4:a1:d5:d3:2f:f0:b5:0d:
                    07:6d:e5:19:83:2d:30:5e:6e:2e:74:91:91:f9:43:
                    7f:9e:0c:6b:b8:a0:b7:23:6d:99:31:c2:7d:c6:d7:
                    01:97:f4:06:9f:02:ed:7e:bd:ca:62:d8:c1:55:41:
                    a1:53:58:07:cb:88:9e:bd:c9:79:fe:d5:4c:0c:98:
                    b5:64:c6:88:05:d4:44:91:c3:ee:e0:4f:4f:b1:7d:
                    f0:26:be:89:5c:f5:69:83:bd:84:04:cb:39:5d:33:
                    53:7f:b3:0b:0a:df:68:6b:a0:b4:26:2d:64:72:de:
                    d0:1d:92:38:cf:42:04:1b:03:ee:37:5b:a4:c6:a2:
                    93:5b:82:2c:91:f6:d6:a1:ce:2c:f7:d7:c8:45:f9:
                    f2:58:14:02:39:12:bc:ce:c8:4a:80:70:b3:1e:fd:
                    c8:9f:87:1f:b7:ca:b8:74:fd:e5:6e:e9:1f:e0:c6:
                    66:c8:a4:1d:df:63:1f:4e:55:ff:f7:d5:fa:7a:52:
                    63:c8:95:94:c8:4c:c1:ea:fc:42:18:cb:ed:a7:bf:
                    20:69:c2:55:7e:26:73:01:3a:06:15:af:3a:f2:db:
                    af:60:60:1b:c8:ca:5a:7a:55:9a:49:8d:01:16:01:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E7:ED:87:23:4A:4A:6B:A0:45:99:A4:23:E5:14:96:45:7F:4B:D5
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ed:e3:b8:9f:02:09:12:f3:80:62:b9:fd:9b:4b:1e:79:02:
         2f:df:0a:29:9f:c7:f4:e9:f3:03:82:d2:d9:9d:c0:2e:01:c5:
         3c:df:17:7c:63:17:7f:c8:02:18:31:a0:47:ba:76:0b:b7:dc:
         90:ef:36:df:dd:c7:e5:9f:64:5c:cc:d2:0f:12:ba:20:ba:49:
         0d:46:a5:86:25:87:6e:5c:1c:26:60:39:43:b0:65:82:3a:f4:
         e0:49:2a:98:44:08:1b:a8:be:98:22:b8:69:50:8a:2d:e1:1f:
         3f:9f:0f:a4:75:ba:69:dc:66:da:3e:02:82:ef:b1:8e:73:14:
         d9:fc:5a:68:c6:98:e0:24:14:d1:46:f5:3a:08:5b:98:51:51:
         86:49:ec:f2:6b:bd:6d:d2:6a:28:dd:84:f3:1c:34:c3:58:c3:
         78:f5:45:97:05:43:6f:3e:64:87:b1:08:1c:f4:07:42:1b:33:
         e6:f1:9f:d7:b9:91:f1:af:f5:1e:e4:1e:5a:74:7f:50:35:e4:
         fd:f3:3d:13:d5:7e:90:36:fc:75:a1:e1:c0:f6:ad:48:bc:ea:
         62:88:e2:22:76:79:b2:06:d3:85:2e:2e:54:94:ca:8e:e0:c5:
         79:e3:7c:18:d6:cd:f2:66:32:44:dd:4a:c6:20:fb:be:1c:6a:
         01:22:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:40:02 2026 by rpki-client