This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa
File:                     34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa (raw, json)
Hash identifier:          7NxiKZCNVdyQcrmcFd6m9OprMbssrbj/FxPOklfClSM=
Subject key identifier:   E7:06:C0:C3:5A:5F:54:80:72:62:48:8E:74:18:C6:B4:E1:8E:32:49
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       3D7C93D1CAC1391C60D3AB51CED2FDAA22E84B69
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa
Signing time:             Tue 06 Jan 2026 19:00:00 +0000
ROA not before:           Tue 06 Jan 2026 18:55:00 +0000
ROA not after:            Tue 05 Jan 2027 19:00:00 +0000
asID:                     265556
IP address blocks:        45.164.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7c:93:d1:ca:c1:39:1c:60:d3:ab:51:ce:d2:fd:aa:22:e8:4b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Jan  6 18:55:00 2026 GMT
            Not After : Jan  5 19:00:00 2027 GMT
        Subject: CN=E706C0C35A5F54807262488E7418C6B4E18E3249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:f5:24:96:34:7a:ea:08:ee:4c:d0:da:77:
                    50:64:b7:49:4f:28:78:35:52:fb:3e:09:3e:e2:38:
                    75:ad:12:5a:ca:96:98:60:73:f9:97:1b:40:f7:13:
                    0e:3b:40:35:3d:08:db:55:23:9c:fb:d6:d0:75:23:
                    1c:22:45:63:fe:18:68:ac:22:fd:1c:13:da:9d:de:
                    31:62:ff:f0:96:3a:85:a4:51:e1:c9:f4:9d:b6:a1:
                    6f:46:99:2d:a8:00:63:09:23:19:7a:1f:09:22:8b:
                    18:96:c8:63:24:e0:1c:98:95:2c:8c:28:cd:7f:ce:
                    bf:83:7b:23:e0:19:d8:b7:7c:82:52:5c:ef:ec:a4:
                    35:79:57:67:fc:0a:78:ee:4e:3d:60:05:48:f8:29:
                    a8:d3:e7:3f:6d:7c:b5:9b:ec:81:c2:4d:f6:0b:df:
                    a3:cb:e1:93:e5:f7:aa:6a:3f:40:3b:aa:a2:a1:f5:
                    b8:9a:9a:4d:5f:83:74:96:0c:fc:bb:7f:39:0e:1c:
                    a6:b6:0c:c2:0f:a4:5f:e8:a8:28:62:5a:f4:3a:06:
                    8c:7b:8b:01:ec:c7:b9:12:43:6b:91:9b:91:e4:27:
                    d0:f3:db:fd:bd:9a:79:cd:a3:01:b5:40:dd:d9:9e:
                    86:f2:86:f9:ac:e6:c4:23:de:a3:ca:3f:f2:fa:fe:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:06:C0:C3:5A:5F:54:80:72:62:48:8E:74:18:C6:B4:E1:8E:32:49
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:65:58:7d:b1:06:ce:67:ee:dd:41:fd:a1:ee:34:e7:63:d7:
         cd:6f:4b:3a:b8:fb:d7:ee:91:33:f2:01:59:30:1c:dd:b2:ef:
         2e:7b:c9:06:3d:3c:d5:52:5f:2d:bc:e3:1e:e5:28:3b:c6:5a:
         d2:4a:05:3b:82:8c:69:d0:6e:c1:e9:c2:67:99:89:ca:6a:1f:
         3a:f3:f9:86:89:5b:33:ba:e0:0d:e9:86:5c:12:b6:44:80:a2:
         d1:ca:11:da:49:7c:8c:29:ad:b1:61:bf:78:1c:a6:e0:4d:be:
         ca:15:53:20:22:b0:60:94:bf:91:46:b7:17:6e:0f:45:18:25:
         b9:8f:58:5c:97:34:89:ad:e8:3b:5f:7b:bb:79:f8:c3:2a:0c:
         59:8d:8f:12:87:58:9c:12:fd:c8:41:fc:93:bc:5c:0c:89:fb:
         81:61:5b:1c:f4:41:bc:07:43:29:4d:79:9f:9c:9e:c7:c7:23:
         35:0a:e5:b2:24:86:7c:dd:50:05:41:46:f0:77:ff:25:bb:4b:
         76:40:6a:d7:04:e3:61:e7:7b:3d:c6:de:f8:75:62:6b:a3:df:
         af:c6:03:f0:ba:74:bf:23:e6:13:01:36:c5:5b:87:ac:0c:ce:
         0b:2b:c5:fe:d1:65:f3:a0:99:bb:5f:69:4a:99:73:8c:b2:6a:
         ae:91:ac:84
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPXyT0crBORxg06tRztL9qiLoS2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE1NUQ4OTlGNTcxMjE1NkQwQjRFODdBM0ZERkM2QTBF
MUEzRkFDMzAeFw0yNjAxMDYxODU1MDBaFw0yNzAxMDUxOTAwMDBaMDMxMTAvBgNV
BAMTKEU3MDZDMEMzNUE1RjU0ODA3MjYyNDg4RTc0MThDNkI0RTE4RTMyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuF/UkljR66gjuTNDad1Bkt0lP
KHg1Uvs+CT7iOHWtElrKlphgc/mXG0D3Ew47QDU9CNtVI5z71tB1IxwiRWP+GGis
Iv0cE9qd3jFi//CWOoWkUeHJ9J22oW9GmS2oAGMJIxl6HwkiixiWyGMk4ByYlSyM
KM1/zr+DeyPgGdi3fIJSXO/spDV5V2f8CnjuTj1gBUj4KajT5z9tfLWb7IHCTfYL
36PL4ZPl96pqP0A7qqKh9biamk1fg3SWDPy7fzkOHKa2DMIPpF/oqChiWvQ6Box7
iwHsx7kSQ2uRm5HkJ9Dz2/29mnnNowG1QN3Znobyhvms5sQj3qPKP/L6/sx/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5wbAw1pfVIByYkiOdBjGtOGOMkkwHwYDVR0j
BBgwFoAUIVXYmfVxIVbQtOh6P9/GoOGj+sMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNDYxRTVBRDJBQjkxNUYwMzc5ODBBODQzRENFMzk5RjA5
MjIzNjFENzFGMTU3QUY4NjJGM0UzOUUwMjhEMzY2LzAvMjE1NUQ4OTlGNTcxMjE1
NkQwQjRFODdBM0ZERkM2QTBFMUEzRkFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTU1RDg5OUY1NzEyMTU2RDBC
NEU4N0EzRkRGQzZBMEUxQTNGQUMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTQ2MUU1QUQyQUI5MTVGMDM3OTgwQTg0M0RDRTM5OUYwOTIyMzYxRDcx
RjE1N0FGODYyRjNFMzlFMDI4RDM2Ni8wLzM0MzUyZTMxMzYzNDJlMzEzMzM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1MzUzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLaSI
MA0GCSqGSIb3DQEBCwUAA4IBAQBHZVh9sQbOZ+7dQf2h7jTnY9fNb0s6uPvX7pEz
8gFZMBzdsu8ue8kGPTzVUl8tvOMe5Sg7xlrSSgU7goxp0G7B6cJnmYnKah868/mG
iVszuuAN6YZcErZEgKLRyhHaSXyMKa2xYb94HKbgTb7KFVMgIrBglL+RRrcXbg9F
GCW5j1hclzSJreg7X3u7efjDKgxZjY8Sh1icEv3IQfyTvFwMifuBYVsc9EG8B0Mp
TXmfnJ7HxyM1CuWyJIZ83VAFQUbwd/8lu0t2QGrXBONh53s9xt74dWJro9+vxgPw
unS/I+YTATbFW4esDM4LK8X+0WXzoJm7X2lKmXOMsmqukayE
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:49 2026 by rpki-client