This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e20323634363638.roa
File:                     34352e37312e3138342e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          2hzPEDZL4g9EpQfhX4qkAzqlbmh4RI/dgwXHE+1bs8k=
Subject key identifier:   96:49:4A:36:0C:9C:4D:C0:84:B3:BD:72:DF:56:5C:B2:95:C7:9E:E4
Certificate issuer:       /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial:       2702BE993B3C2684DD31B717EF512299466D7439
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:21:59 +0000
ROA not before:           Tue 06 Jan 2026 19:16:59 +0000
ROA not after:            Tue 05 Jan 2027 19:21:59 +0000
asID:                     264668
IP address blocks:        45.71.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 21:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:02:be:99:3b:3c:26:84:dd:31:b7:17:ef:51:22:99:46:6d:74:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
        Validity
            Not Before: Jan  6 19:16:59 2026 GMT
            Not After : Jan  5 19:21:59 2027 GMT
        Subject: CN=96494A360C9C4DC084B3BD72DF565CB295C79EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:28:bc:f8:b9:9b:92:ff:d2:5b:97:64:9e:
                    4c:9f:ae:0d:55:08:87:07:14:52:a8:b4:d3:3c:ab:
                    40:5b:67:80:59:36:48:b1:10:2e:4b:d6:54:a3:e5:
                    0a:86:d9:d1:b9:6f:10:06:cf:66:57:35:4c:a3:8c:
                    f5:6b:02:80:14:61:b8:86:19:2a:3c:99:99:05:73:
                    82:d9:cc:51:52:15:39:99:69:16:d8:e6:23:f4:1a:
                    3a:7a:5d:a6:a6:03:9a:94:58:b3:ae:6a:78:c7:2c:
                    cc:9d:cf:1f:f4:73:60:71:4d:4f:54:93:a6:5f:da:
                    a0:96:8e:6f:3e:f4:05:a4:35:2e:63:10:1a:e7:94:
                    7a:8c:4b:01:86:50:db:01:1c:36:a4:13:ee:ed:d2:
                    3a:f1:96:16:62:ce:61:f2:5b:14:d9:89:d3:39:46:
                    41:cc:14:cc:22:3b:e7:9a:d5:6a:e4:60:58:a7:b8:
                    a7:45:af:bb:83:00:4d:28:d9:98:84:23:4a:c0:25:
                    49:6e:3c:0a:d0:44:bd:85:d0:66:73:03:f7:61:d5:
                    26:29:3d:ef:a9:10:c2:54:9b:b9:73:18:75:a9:30:
                    46:20:37:74:6d:27:a8:fc:3f:4d:98:d9:e9:58:4f:
                    12:62:a9:cc:2d:6a:e7:c6:5a:65:cc:b4:c9:61:97:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:49:4A:36:0C:9C:4D:C0:84:B3:BD:72:DF:56:5C:B2:95:C7:9E:E4
            X509v3 Authority Key Identifier:
                keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:61:d1:64:cc:43:f5:32:a9:b6:eb:bd:d0:2d:d3:41:df:
         8c:4a:73:44:9b:df:f9:a0:99:26:8a:a5:04:de:9d:7d:c9:da:
         79:a3:01:08:e4:ae:1f:60:39:e9:40:4e:26:45:f9:e8:15:42:
         fc:31:10:c1:d3:d0:43:7c:62:4f:01:e8:d1:9c:29:6f:4b:b5:
         0d:30:28:e3:af:fc:60:94:ef:53:1f:c1:10:42:b0:f4:c7:35:
         16:e1:36:3f:74:40:55:64:38:e8:64:3a:cf:ba:c3:f9:63:54:
         3c:90:c1:7e:07:49:68:9e:f5:08:13:33:42:8d:b9:a9:4b:45:
         72:b9:b4:ce:26:66:74:1d:a7:dd:3c:59:d5:51:46:4c:df:1e:
         46:05:76:cf:62:b3:d0:a8:02:14:d2:1b:40:be:84:68:29:7d:
         bf:1e:2e:d9:c8:a8:66:bb:f8:18:d7:84:52:1c:92:90:d6:f4:
         08:0f:d1:89:50:19:de:64:ee:9c:90:7f:fd:8e:10:24:94:e0:
         24:89:f4:ee:01:95:a6:bd:4b:32:99:a3:b3:ae:d7:54:b0:2b:
         8d:d8:98:ff:e8:83:2f:4d:3a:14:df:99:8e:1a:ab:e1:ef:cc:
         79:11:a0:b4:8b:96:3e:92:50:b2:61:0a:78:22:f4:6d:68:5f:
         3a:10:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:36:18 2026 by rpki-client