This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3234203d3e20323637373331.roa
File:                     34352e3136362e37362e302f32332d3234203d3e20323637373331.roa (raw, json)
Hash identifier:          nM5jMXlOf2ojhuOtXBsZ/KfCa5mXbdjcNWq6wuQkR4c=
Subject key identifier:   77:5D:3E:E9:3B:5A:6D:E4:AC:EE:90:6C:65:8D:C1:5B:9A:36:AF:0B
Certificate issuer:       /CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
Certificate serial:       46B01B804BE980E43CE064ED58F7A25BDD62E731
Authority key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3234203d3e20323637373331.roa
Signing time:             Tue 06 Jan 2026 19:15:00 +0000
ROA not before:           Tue 06 Jan 2026 19:10:00 +0000
ROA not after:            Tue 05 Jan 2027 19:15:00 +0000
asID:                     267731
IP address blocks:        45.166.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b0:1b:80:4b:e9:80:e4:3c:e0:64:ed:58:f7:a2:5b:dd:62:e7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
        Validity
            Not Before: Jan  6 19:10:00 2026 GMT
            Not After : Jan  5 19:15:00 2027 GMT
        Subject: CN=775D3EE93B5A6DE4ACEE906C658DC15B9A36AF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:b4:c4:2d:32:d1:96:e8:90:4f:5a:c3:b9:
                    19:de:ac:5b:24:f6:ff:79:99:02:d0:39:5a:b5:aa:
                    43:f9:87:02:b6:25:e0:35:92:33:1e:6b:47:38:3d:
                    aa:20:3e:46:d2:77:61:e6:e4:3e:eb:59:93:c6:a3:
                    13:3c:94:ac:57:3f:62:50:85:c7:3b:3b:ba:58:a9:
                    7d:d8:1e:1f:fe:a9:83:27:50:e5:d3:bb:ce:f2:35:
                    59:b4:44:7f:7e:b5:c1:7c:ea:23:81:f9:f9:ec:28:
                    c1:de:22:99:7f:16:7c:db:f6:71:a4:12:de:79:5f:
                    94:65:81:e4:3a:ce:ed:32:58:62:a4:18:2d:3a:dd:
                    6f:d1:43:e0:e2:78:74:14:53:6e:bf:01:c3:d6:17:
                    04:10:c0:bc:4b:31:a2:eb:e5:76:5d:f2:de:5c:23:
                    24:53:92:b5:8e:b8:09:a5:86:9b:c9:e7:b3:04:58:
                    39:3d:25:8e:77:c9:c6:3a:45:58:4a:fb:f2:e3:7f:
                    e4:e6:0a:a1:f5:a6:ba:fe:94:d7:91:27:a7:a1:3b:
                    ee:48:1d:60:67:da:c6:08:f3:b9:87:c7:d6:5e:01:
                    d8:c3:39:fa:45:e7:16:ee:55:ee:5e:b7:b8:5e:08:
                    5b:86:aa:85:90:e3:62:f1:37:5f:08:e5:ef:c3:cf:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:3E:E9:3B:5A:6D:E4:AC:EE:90:6C:65:8D:C1:5B:9A:36:AF:0B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3234203d3e20323637373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:19:9e:07:69:4e:32:95:48:ac:3e:74:d9:86:6b:15:01:37:
         9b:ea:43:01:aa:d5:ab:de:bc:d5:43:85:3a:3d:5b:f9:a8:85:
         f8:8d:21:96:59:5d:6d:4d:dc:73:17:62:44:cd:ab:e8:c7:58:
         a9:01:9c:6d:c5:73:8c:2b:2b:74:b8:84:b8:9b:05:02:59:8e:
         97:36:77:b4:f0:43:6d:79:ce:a5:e5:cd:a2:fb:62:1b:07:31:
         4e:57:01:d4:64:03:c8:4c:1a:9d:27:c1:ed:53:03:71:d0:5e:
         bc:e0:aa:f6:9f:83:5f:89:47:c7:8e:b7:24:10:88:ef:2f:f7:
         ea:53:0c:a6:72:2a:25:11:cc:0b:ed:79:d7:5f:f3:bf:f9:d0:
         5f:ac:d3:f2:09:09:40:e4:8d:e5:12:ce:c7:92:75:41:38:96:
         7d:ec:5c:62:2a:8e:ba:f8:76:5a:f5:e4:4e:41:18:9c:29:ef:
         65:0e:de:c8:53:1f:30:f9:3f:c8:3b:c4:d0:fd:55:64:b5:e5:
         25:65:84:6c:71:52:63:00:11:69:e1:5c:31:8c:bb:20:99:dd:
         a4:aa:1f:4d:d3:ce:99:98:1d:79:25:5e:49:09:de:0e:de:d3:
         28:45:fd:e4:4d:d4:e0:49:e2:fe:8b:90:dc:5c:8d:9a:01:4a:
         74:cf:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:17 2026 by rpki-client