This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEE77B866F8A5BC22A0DC1E7F4BDAA7C282F4F1969CD3449F7C0147487C7156/0/34352e3136322e3130302e302f32322d3234203d3e20323636383938.roa
File:                     34352e3136322e3130302e302f32322d3234203d3e20323636383938.roa (raw, json)
Hash identifier:          0qZi7h7HDXBkRI6AhWIyTmalyS3Y5hJrdK/4CrTl+AI=
Subject key identifier:   DF:F8:4F:FB:FE:3B:03:66:2E:83:7E:41:C8:53:01:36:1C:FA:C2:81
Certificate issuer:       /CN=F506BE8B6670219B99DBBCA4B96D5897DC5BF06C
Certificate serial:       0FBCF57D5F29D926E65ADA978CFE8E179F092CD2
Authority key identifier: F5:06:BE:8B:66:70:21:9B:99:DB:BC:A4:B9:6D:58:97:DC:5B:F0:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F506BE8B6670219B99DBBCA4B96D5897DC5BF06C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDEE77B866F8A5BC22A0DC1E7F4BDAA7C282F4F1969CD3449F7C0147487C7156/0/34352e3136322e3130302e302f32322d3234203d3e20323636383938.roa
Signing time:             Tue 06 Jan 2026 19:06:13 +0000
ROA not before:           Tue 06 Jan 2026 19:01:13 +0000
ROA not after:            Tue 05 Jan 2027 19:06:13 +0000
asID:                     266898
IP address blocks:        45.162.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDEE77B866F8A5BC22A0DC1E7F4BDAA7C282F4F1969CD3449F7C0147487C7156/0/F506BE8B6670219B99DBBCA4B96D5897DC5BF06C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDEE77B866F8A5BC22A0DC1E7F4BDAA7C282F4F1969CD3449F7C0147487C7156/0/F506BE8B6670219B99DBBCA4B96D5897DC5BF06C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F506BE8B6670219B99DBBCA4B96D5897DC5BF06C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 16:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bc:f5:7d:5f:29:d9:26:e6:5a:da:97:8c:fe:8e:17:9f:09:2c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F506BE8B6670219B99DBBCA4B96D5897DC5BF06C
        Validity
            Not Before: Jan  6 19:01:13 2026 GMT
            Not After : Jan  5 19:06:13 2027 GMT
        Subject: CN=DFF84FFBFE3B03662E837E41C85301361CFAC281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:54:3b:e3:34:ca:ca:26:69:07:87:7b:23:
                    2d:1c:71:68:3c:ca:f5:b9:37:43:6b:80:e4:6e:f2:
                    a9:59:6c:e1:cd:0b:c2:db:6f:c1:93:01:34:66:1b:
                    a5:4c:d5:a6:c6:87:6f:aa:c1:57:e0:d3:ed:dc:b4:
                    36:f7:fd:ce:f1:0b:56:f0:6b:c3:ff:7b:34:f2:6b:
                    d7:63:2d:8f:2e:50:a6:cf:62:b2:f8:45:b4:bd:70:
                    76:62:ac:73:be:22:31:11:b7:0e:0d:56:47:02:ca:
                    8c:75:b9:48:7d:1d:7d:cc:82:0e:ff:f1:eb:f7:c2:
                    95:f0:8a:1b:78:b6:b9:66:1d:c2:a5:e8:64:c8:42:
                    ef:ee:ce:0d:d2:25:78:f7:d7:84:e4:b6:87:12:94:
                    dc:1f:61:03:92:bb:30:25:e9:bf:43:96:f4:a5:aa:
                    65:c2:17:c3:bc:31:ff:a8:37:0a:9f:01:42:a8:60:
                    9f:a6:c2:de:af:0a:61:7a:e4:b7:48:d0:d9:7f:c0:
                    ff:44:c8:5f:15:61:df:d0:2f:73:36:61:3d:27:4a:
                    26:ad:a3:2d:b2:c5:ea:9f:74:ce:f9:9b:12:b3:83:
                    2f:3b:47:46:e1:0a:98:6c:a5:b1:5d:2d:0a:39:da:
                    4e:55:f2:73:3b:46:2d:db:c9:75:37:8d:fa:a5:88:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:4F:FB:FE:3B:03:66:2E:83:7E:41:C8:53:01:36:1C:FA:C2:81
            X509v3 Authority Key Identifier:
                keyid:F5:06:BE:8B:66:70:21:9B:99:DB:BC:A4:B9:6D:58:97:DC:5B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDEE77B866F8A5BC22A0DC1E7F4BDAA7C282F4F1969CD3449F7C0147487C7156/0/F506BE8B6670219B99DBBCA4B96D5897DC5BF06C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F506BE8B6670219B99DBBCA4B96D5897DC5BF06C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEE77B866F8A5BC22A0DC1E7F4BDAA7C282F4F1969CD3449F7C0147487C7156/0/34352e3136322e3130302e302f32322d3234203d3e20323636383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:62:79:16:c6:55:92:73:a6:d8:ea:a0:1d:d3:49:99:90:40:
         6e:fd:88:a2:39:7a:0a:a0:92:00:c2:3b:bd:c6:50:9b:26:48:
         2e:d9:69:e5:e2:a1:16:e7:8d:4f:d9:7d:f0:dc:17:f3:7d:1c:
         96:75:9f:d7:06:a2:44:bf:2e:63:ef:d9:57:a5:e0:47:01:9d:
         d2:00:b5:43:d9:3f:d0:1d:92:57:20:c5:0c:84:ec:c0:56:37:
         f0:81:05:e4:de:b2:bb:0a:02:e8:5c:1b:8e:44:79:5e:fa:fc:
         80:fe:b6:59:75:f6:19:ba:50:ac:97:d2:43:a7:4d:17:ac:71:
         27:5d:03:6a:fa:5e:88:a2:69:47:ed:26:fc:7c:8b:21:a7:78:
         39:00:9a:0d:51:d6:45:84:91:18:bb:f0:87:e6:3b:21:20:1d:
         f4:7c:9f:59:84:d2:83:bb:72:96:b3:4a:6e:a3:8d:82:0a:d1:
         d5:ab:78:d8:9b:ed:49:e2:01:21:a2:ca:f0:b9:ee:ca:d0:ac:
         2b:14:7c:61:f3:6e:1e:c1:e1:08:4d:80:68:58:33:7b:2c:bf:
         5d:2c:0a:5a:b6:d8:f4:37:20:aa:77:66:3d:bf:c8:18:9d:fb:
         0a:48:b7:63:ab:d1:e1:61:45:86:2f:bf:19:e3:6c:4f:e4:ec:
         65:1a:03:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:21:25 2026 by rpki-client