This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/34352e37312e31362e302f32322d3234203d3e20323635383237.roa
File:                     34352e37312e31362e302f32322d3234203d3e20323635383237.roa (raw, json)
Hash identifier:          SG7bn2C4BkXz7eU8Y9gZHiP2hRZshq40AG/gX+wNlws=
Subject key identifier:   BF:EB:D2:76:E0:15:D1:08:F8:2E:44:4D:6E:8D:9C:B7:3F:68:73:C9
Certificate issuer:       /CN=6573871E9B3F666876C77FFBBF374043AB7939BA
Certificate serial:       49FBEE77649F933FCEC56B80AB88CE4A00353407
Authority key identifier: 65:73:87:1E:9B:3F:66:68:76:C7:7F:FB:BF:37:40:43:AB:79:39:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6573871E9B3F666876C77FFBBF374043AB7939BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/34352e37312e31362e302f32322d3234203d3e20323635383237.roa
Signing time:             Tue 06 Jan 2026 19:12:30 +0000
ROA not before:           Tue 06 Jan 2026 19:07:30 +0000
ROA not after:            Tue 05 Jan 2027 19:12:30 +0000
asID:                     265827
IP address blocks:        45.71.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/6573871E9B3F666876C77FFBBF374043AB7939BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/6573871E9B3F666876C77FFBBF374043AB7939BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6573871E9B3F666876C77FFBBF374043AB7939BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 10:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fb:ee:77:64:9f:93:3f:ce:c5:6b:80:ab:88:ce:4a:00:35:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6573871E9B3F666876C77FFBBF374043AB7939BA
        Validity
            Not Before: Jan  6 19:07:30 2026 GMT
            Not After : Jan  5 19:12:30 2027 GMT
        Subject: CN=BFEBD276E015D108F82E444D6E8D9CB73F6873C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:fa:53:92:84:06:32:3c:1d:08:7c:24:fe:
                    e2:5b:36:e1:80:56:cc:9b:4b:ca:b1:9b:ac:a9:d5:
                    ca:42:63:c8:96:19:b3:11:20:df:5d:f5:da:b5:ed:
                    b0:90:ff:d1:e1:c2:28:0a:db:1b:42:93:61:b4:6a:
                    6f:40:7d:4f:1e:7e:78:46:97:e9:5b:5d:d7:5e:0b:
                    2f:10:9d:96:dc:b4:f3:bb:67:6a:4a:98:d9:7c:31:
                    a4:ee:0b:f6:7a:a7:8d:0c:9b:b5:a9:f2:72:e7:ad:
                    a0:45:0a:7c:65:f7:7a:2f:79:cc:52:59:cc:21:69:
                    a9:15:7e:7d:30:87:ba:bf:44:e9:b8:73:e0:48:af:
                    76:52:38:8a:c6:cc:8a:17:1e:00:3f:4a:98:fe:b3:
                    01:6c:dd:14:97:1c:58:6b:a5:cc:e4:82:b7:c8:c4:
                    9b:cf:be:c0:ee:96:de:86:12:01:85:43:1c:f7:0f:
                    78:e3:3c:b7:0a:b1:2c:44:6a:ee:ec:8c:67:68:fb:
                    63:34:7d:4b:90:80:8d:fe:83:06:a5:92:c2:8c:d0:
                    64:8d:0e:9a:b4:c5:5f:9b:60:97:eb:b7:d6:58:4e:
                    43:c0:e6:df:6c:9c:f5:4c:35:65:48:95:c4:31:2b:
                    05:05:85:5d:17:cf:ba:97:ef:ed:cb:90:74:bb:c3:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:D2:76:E0:15:D1:08:F8:2E:44:4D:6E:8D:9C:B7:3F:68:73:C9
            X509v3 Authority Key Identifier:
                keyid:65:73:87:1E:9B:3F:66:68:76:C7:7F:FB:BF:37:40:43:AB:79:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/6573871E9B3F666876C77FFBBF374043AB7939BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6573871E9B3F666876C77FFBBF374043AB7939BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/34352e37312e31362e302f32322d3234203d3e20323635383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:a7:db:6a:a9:5f:9b:bf:68:0d:0b:8f:ce:fd:ac:ec:8d:fa:
         8c:99:a5:cf:c8:cb:40:1e:8d:26:cc:42:e3:ea:32:18:b3:0b:
         64:ad:e4:4b:55:37:36:26:49:f8:98:95:b7:ec:a2:af:b8:58:
         06:4a:c5:03:55:18:fb:9e:97:0a:b4:a4:1e:71:f2:62:f7:20:
         0f:d0:30:6a:4d:5f:7a:77:0e:db:b3:cf:e9:66:b6:11:70:5e:
         f8:16:b7:1c:ef:e4:60:64:02:4b:e3:a0:5d:66:9d:1f:a6:52:
         58:89:72:24:a7:1b:eb:7f:72:c8:5a:1c:85:72:d8:47:45:26:
         bf:0b:26:f8:fc:45:44:79:a5:ba:32:5d:cd:fd:b5:b7:54:af:
         a2:a4:5a:15:76:36:86:03:71:72:e5:65:83:70:84:56:14:4a:
         6e:e5:92:5e:ba:d4:49:f8:c3:f0:26:32:e3:63:ba:74:11:94:
         ef:4d:6d:0c:4a:4a:b1:7f:cf:2c:35:75:a8:8c:eb:d3:8d:9c:
         9d:79:e0:06:65:a0:6b:5a:d6:26:e0:32:fd:79:a5:c4:65:3a:
         d9:17:0f:e8:4e:1b:a1:d3:7d:a0:26:c6:cf:95:59:8e:a6:bf:
         f2:d8:7d:3a:ae:b8:aa:ad:1e:ba:32:53:54:1a:e2:69:df:f6:
         5b:34:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:07:26 2026 by rpki-client