This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6170FA3C2CBE8EC1A80B1737E9EE6E8A83F0AF10BBF391052265C8D5557B3DC9/0/34352e3137332e3132302e302f32322d3234203d3e20323637383138.roa
File:                     34352e3137332e3132302e302f32322d3234203d3e20323637383138.roa (raw, json)
Hash identifier:          rN2H1IL4Dg+2WCDFKpGMrsruBU43AmbQTJoh93h+blQ=
Subject key identifier:   05:D2:DB:1A:16:A1:3E:70:AD:9A:2B:59:E2:F1:2C:8F:99:87:A9:98
Certificate issuer:       /CN=6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E
Certificate serial:       5C04341CEDC592CD9EAB7ADF935446FD12B9E6C2
Authority key identifier: 67:61:70:3D:ED:8E:BE:50:76:EC:69:C5:D5:5A:FD:7D:4E:E0:D3:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6170FA3C2CBE8EC1A80B1737E9EE6E8A83F0AF10BBF391052265C8D5557B3DC9/0/34352e3137332e3132302e302f32322d3234203d3e20323637383138.roa
Signing time:             Tue 06 Jan 2026 19:13:56 +0000
ROA not before:           Tue 06 Jan 2026 19:08:56 +0000
ROA not after:            Tue 05 Jan 2027 19:13:56 +0000
asID:                     267818
IP address blocks:        45.173.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6170FA3C2CBE8EC1A80B1737E9EE6E8A83F0AF10BBF391052265C8D5557B3DC9/0/6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6170FA3C2CBE8EC1A80B1737E9EE6E8A83F0AF10BBF391052265C8D5557B3DC9/0/6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 01:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:04:34:1c:ed:c5:92:cd:9e:ab:7a:df:93:54:46:fd:12:b9:e6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E
        Validity
            Not Before: Jan  6 19:08:56 2026 GMT
            Not After : Jan  5 19:13:56 2027 GMT
        Subject: CN=05D2DB1A16A13E70AD9A2B59E2F12C8F9987A998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:9b:ac:d6:41:05:22:5c:a1:ba:b4:6a:4e:
                    b5:6d:34:ab:08:0c:1b:68:20:90:a2:42:fb:b4:04:
                    96:f0:8b:87:c7:ac:87:e2:70:a4:6d:69:4a:88:33:
                    82:36:d6:ec:f0:2e:ef:60:65:eb:50:fc:7f:73:a8:
                    3c:30:37:9b:31:53:ed:5f:48:26:85:f1:86:d0:06:
                    6e:20:50:bb:0a:c9:79:67:ad:b9:ee:7f:4c:06:88:
                    d5:de:ff:8e:35:b9:6d:00:12:36:0d:77:3f:d1:f1:
                    2d:f6:4c:f3:3c:b5:7e:32:13:0b:52:6c:43:93:05:
                    ac:59:75:b4:a7:e0:ac:a5:d4:51:b5:19:3e:4c:a3:
                    bb:34:d6:72:38:f3:68:82:55:33:7e:f1:6f:ce:99:
                    13:66:05:b3:45:21:06:29:cf:e5:e7:41:c3:08:4a:
                    03:fe:18:9b:dc:6d:5f:42:07:1e:24:3c:e8:b0:11:
                    f2:04:44:4a:b7:56:b9:05:ac:0b:d5:f4:8d:84:23:
                    a4:97:7a:75:bd:67:b1:51:2f:2b:2b:91:ad:8b:d4:
                    5d:53:99:d3:4b:38:f8:f9:0f:61:32:5b:05:5e:14:
                    63:a1:98:6f:6d:50:d9:31:66:f0:c4:1e:fa:69:72:
                    f0:a7:ad:56:dc:97:2d:00:2f:00:04:6f:97:ae:8d:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D2:DB:1A:16:A1:3E:70:AD:9A:2B:59:E2:F1:2C:8F:99:87:A9:98
            X509v3 Authority Key Identifier:
                keyid:67:61:70:3D:ED:8E:BE:50:76:EC:69:C5:D5:5A:FD:7D:4E:E0:D3:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6170FA3C2CBE8EC1A80B1737E9EE6E8A83F0AF10BBF391052265C8D5557B3DC9/0/6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6761703DED8EBE5076EC69C5D55AFD7D4EE0D38E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6170FA3C2CBE8EC1A80B1737E9EE6E8A83F0AF10BBF391052265C8D5557B3DC9/0/34352e3137332e3132302e302f32322d3234203d3e20323637383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:17:e7:c3:7c:71:9f:33:a0:3f:82:2d:31:00:64:fe:63:df:
         12:b6:86:e8:44:e0:52:54:84:8c:b1:e5:8e:79:d9:c3:af:8a:
         a0:c5:55:b5:5d:f8:81:e5:80:b0:0c:b5:fe:d5:93:6f:11:93:
         1d:2b:81:6f:db:e3:2b:40:85:f1:31:7e:53:92:ff:2b:6c:f8:
         26:5a:3b:e3:93:22:9d:81:7b:30:fc:b9:0f:36:91:58:ec:aa:
         5c:25:9d:06:9b:8d:6f:b1:31:22:76:60:b9:e1:88:27:01:3d:
         28:ef:c5:77:e9:43:ce:1b:84:d2:1b:ef:95:6f:1e:d9:fe:05:
         ba:d9:7b:d2:c4:42:85:5a:de:2e:86:6f:03:72:cc:f7:c9:87:
         14:5f:ee:9f:a9:f8:7c:94:d4:1a:23:a6:c4:43:c8:72:34:30:
         56:75:54:db:35:e1:47:da:e1:a4:28:f3:ec:2e:bc:5e:70:f0:
         95:26:2d:7b:b8:59:7d:0d:14:d2:63:07:fb:bd:f7:59:52:6a:
         b0:bb:fa:a0:9f:99:5c:d7:33:04:24:b9:b5:28:bc:d5:b5:2f:
         34:f5:f1:17:af:b3:bc:25:ad:32:b4:d9:02:b5:01:8d:4c:c1:
         d7:88:46:dc:e0:1c:0f:40:b3:01:f4:ef:c3:bc:b1:d6:c9:50:
         5f:46:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 03:47:17 2026 by rpki-client