This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32322d3232203d3e20323637373938.roa
File:                     34352e3137332e31362e302f32322d3232203d3e20323637373938.roa (raw, json)
Hash identifier:          ZUSGQNfv70tAvF5RiUEFnNXEU82uKXBEpvnzSwnElAs=
Subject key identifier:   D8:66:E0:9F:64:FC:05:EA:C6:CC:97:A1:85:25:6B:67:27:16:0A:E0
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       647F07C7B91ED05B38FDE4FC7B6658DDF3BD9646
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32322d3232203d3e20323637373938.roa
Signing time:             Tue 06 Jan 2026 19:45:54 +0000
ROA not before:           Tue 06 Jan 2026 19:40:54 +0000
ROA not after:            Tue 05 Jan 2027 19:45:54 +0000
asID:                     267798
IP address blocks:        45.173.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 10:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7f:07:c7:b9:1e:d0:5b:38:fd:e4:fc:7b:66:58:dd:f3:bd:96:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Jan  6 19:40:54 2026 GMT
            Not After : Jan  5 19:45:54 2027 GMT
        Subject: CN=D866E09F64FC05EAC6CC97A185256B6727160AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:b6:0c:30:fe:b0:1a:80:45:fb:10:6e:45:
                    d4:e3:17:01:60:72:53:65:c5:d2:81:e3:a2:ea:ae:
                    2d:a3:35:a0:23:1f:0f:39:7e:7b:a9:07:b8:c5:21:
                    2e:d6:b2:58:1a:62:a8:c2:77:9f:ab:88:63:f7:57:
                    54:54:fb:5e:18:42:6c:6f:22:04:3b:76:75:41:49:
                    45:f7:17:b9:d6:5d:69:f7:52:7c:c3:24:d9:f0:94:
                    9b:db:ea:fc:27:34:ad:e1:a6:57:59:0e:fe:f8:27:
                    68:d5:0e:89:51:4c:7f:89:53:9b:91:94:38:3d:68:
                    13:e9:ae:6a:ee:76:53:ff:52:93:2e:8f:c5:36:9e:
                    4b:d2:72:59:49:21:89:0c:89:d4:65:f2:ec:65:87:
                    2b:1e:92:5d:f4:27:f7:5f:7f:7b:a9:09:8d:d3:f0:
                    3c:c4:98:f2:a4:57:a6:ef:b3:14:70:d8:2e:d8:66:
                    1b:a2:7d:91:f6:96:9d:dc:a8:53:92:b9:75:f4:4e:
                    6a:63:41:1f:a3:82:f3:10:1a:a3:01:21:ee:52:ac:
                    ad:15:3d:70:d6:9c:2d:b0:7d:d0:3f:96:ef:84:8f:
                    dd:3c:0f:f9:05:e7:55:f4:29:10:2b:90:ad:fc:0e:
                    9c:08:10:5a:34:d3:e0:0d:f0:0b:8b:d1:5c:99:fa:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:66:E0:9F:64:FC:05:EA:C6:CC:97:A1:85:25:6B:67:27:16:0A:E0
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32322d3232203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:a1:d9:59:08:8b:ff:d2:e0:26:37:42:83:9f:02:73:83:
         41:7d:79:17:38:19:a2:ce:2d:24:e5:9e:19:2b:61:92:11:00:
         17:25:fa:92:54:cf:d5:b1:29:9a:24:48:7c:ff:dc:84:48:ae:
         45:10:7f:68:51:0a:59:70:1d:16:c5:e2:7e:27:df:32:61:00:
         3e:bb:94:47:be:5b:e7:ce:96:1b:96:ea:90:9c:0a:bb:f3:98:
         13:7f:e9:06:a3:e5:68:48:3d:8c:e2:9c:cc:2a:8e:a0:36:17:
         ad:27:c0:43:7a:36:11:23:86:92:37:c8:5f:bf:83:02:34:f6:
         2e:78:8a:8e:6c:c5:c8:8c:ea:24:b9:e1:f5:49:71:c8:60:26:
         ec:10:74:8d:f1:61:39:eb:38:36:1b:25:22:1b:c7:0e:09:1f:
         06:ff:ad:d2:98:71:36:3c:fa:4d:c7:58:21:8f:7b:04:9c:53:
         fb:92:71:0c:5c:0b:04:6d:38:3b:15:94:d7:fa:6b:50:b5:63:
         49:dc:c6:1e:04:02:c2:59:e4:c0:d5:eb:03:77:2b:96:0b:5c:
         3a:69:a0:88:dd:59:86:f4:11:34:4a:aa:7d:e4:1a:8a:41:10:
         ff:c4:ae:22:c5:78:91:c7:8b:ba:a1:ef:7c:1b:06:36:62:5c:
         87:a1:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:13:06 2026 by rpki-client