This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131322e302f32322d3234203d3e20323634363638.roa
File:                     34352e37312e3131322e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          a5s9PgkbQ6Aop9dho6aD+W60jOLjem0rJwcZnnDblRU=
Subject key identifier:   D4:9F:77:DA:10:A5:9C:6C:8C:0E:5A:83:52:91:43:CF:C4:8B:8E:3D
Certificate issuer:       /CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
Certificate serial:       281B5B5C63FE1378B9F54A69A9F0CE2213194D43
Authority key identifier: BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131322e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:48:03 +0000
ROA not before:           Tue 06 Jan 2026 19:43:03 +0000
ROA not after:            Tue 05 Jan 2027 19:48:03 +0000
asID:                     264668
IP address blocks:        45.71.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1b:5b:5c:63:fe:13:78:b9:f5:4a:69:a9:f0:ce:22:13:19:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
        Validity
            Not Before: Jan  6 19:43:03 2026 GMT
            Not After : Jan  5 19:48:03 2027 GMT
        Subject: CN=D49F77DA10A59C6C8C0E5A83529143CFC48B8E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:4c:d0:3f:99:ed:e7:d0:0b:78:56:be:ed:
                    ee:46:31:29:8e:be:24:88:18:b4:88:46:cb:2e:37:
                    c0:37:6a:2a:4a:c5:1d:4f:7a:63:ff:fd:f3:df:2c:
                    7e:c3:9c:38:c9:d6:ab:7a:d7:b4:86:b8:b1:f0:3e:
                    ce:db:33:c0:91:33:07:33:d2:0d:32:f1:05:21:3e:
                    83:89:e0:f9:0e:41:19:5f:b1:1c:06:b2:5a:23:40:
                    a2:4c:54:28:8e:e1:b7:1d:86:da:12:3b:19:4e:6f:
                    94:9b:bd:d6:d5:af:a0:92:f1:38:03:99:3c:61:86:
                    f2:8b:8a:e4:c6:2d:00:55:67:34:d7:26:1c:43:e9:
                    e3:10:f8:0a:d6:2b:c1:35:67:6e:e8:60:b5:0c:cf:
                    0f:b8:e4:5c:94:f1:b3:ce:45:f6:33:62:03:5c:aa:
                    4c:2d:f6:8f:d6:48:f9:24:6b:36:1f:42:9a:7a:e6:
                    a2:51:a2:1d:10:36:b4:8b:51:22:d3:3c:80:69:c9:
                    0e:5b:5b:5c:8f:3a:db:29:21:12:84:db:70:79:70:
                    21:ed:22:2e:7c:c8:79:d6:58:bc:f7:da:95:6b:14:
                    0c:99:56:90:72:cf:1a:5a:ea:11:73:f0:02:f9:8d:
                    42:91:09:e3:be:0b:8b:53:58:3b:0d:22:67:55:74:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:77:DA:10:A5:9C:6C:8C:0E:5A:83:52:91:43:CF:C4:8B:8E:3D
            X509v3 Authority Key Identifier:
                keyid:BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131322e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:4d:7f:db:7a:d6:88:fc:15:5e:59:db:07:88:3d:55:aa:a9:
         bb:d9:02:25:ca:c1:1a:43:5d:d2:80:54:bc:5a:48:a4:32:ee:
         89:a9:8a:c5:47:81:44:62:68:80:97:23:79:35:31:0f:48:fa:
         ce:2e:d9:6b:db:a1:42:84:b0:30:ca:fc:9a:f5:ae:d9:2c:17:
         34:bd:ad:10:00:9b:46:03:bc:f3:45:34:9a:8e:1e:3e:58:c3:
         ee:d5:29:36:84:9f:9e:62:82:02:dc:06:09:26:1f:ff:81:a6:
         68:70:dc:7b:35:14:c7:a3:e3:80:ba:3c:08:f6:71:9c:5b:f0:
         b3:be:71:a1:1d:10:82:c5:15:06:a1:71:2c:d1:55:20:b2:76:
         92:80:4d:cc:e2:c9:b4:95:76:72:f0:35:24:d2:b5:08:be:5c:
         6a:b9:bc:7f:24:72:cc:52:c6:83:33:9e:9f:10:65:1a:d4:5f:
         9c:7e:42:23:2d:31:47:5f:7c:2e:b6:4d:31:7c:79:6f:ad:8a:
         87:d7:72:74:a6:c8:3e:fe:67:dd:d9:12:ca:92:2f:26:61:0e:
         3d:97:5d:82:a8:f7:13:ac:97:27:25:86:ac:78:28:26:cc:38:
         e7:c6:c8:ca:cc:ef:1a:c0:35:09:f7:7a:4a:f3:d8:ff:5f:8b:
         07:8d:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:36 2026 by rpki-client