This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa
File:                     34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          x95xQMcqZBEf4+35DBjpDccY5y0k5yiI/pk7QlQK+0E=
Subject key identifier:   AC:0C:7F:44:46:96:1B:23:D4:96:20:74:C6:AA:97:78:CA:04:E4:ED
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       63994B11AE9A5E2A1624B806E5000A85DB1DED94
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa
Signing time:             Tue 06 Jan 2026 19:07:25 +0000
ROA not before:           Tue 06 Jan 2026 19:02:25 +0000
ROA not after:            Tue 05 Jan 2027 19:07:25 +0000
asID:                     267730
IP address blocks:        45.166.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:99:4b:11:ae:9a:5e:2a:16:24:b8:06:e5:00:0a:85:db:1d:ed:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Jan  6 19:02:25 2026 GMT
            Not After : Jan  5 19:07:25 2027 GMT
        Subject: CN=AC0C7F4446961B23D4962074C6AA9778CA04E4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:4b:80:a5:6b:f7:78:a7:0d:f3:7e:44:f0:
                    28:3d:66:d5:d7:03:20:57:fc:cb:91:1d:bf:fa:df:
                    3c:67:0a:6a:cc:02:db:e5:06:24:f7:7a:4f:a0:ad:
                    37:fb:06:c2:99:63:57:67:be:d6:33:44:4a:88:24:
                    d4:b7:e9:95:e9:cc:ab:6f:20:f1:10:5c:e4:dc:04:
                    a0:36:7f:7b:de:7d:43:02:ca:b3:5e:9f:33:1e:28:
                    99:28:04:38:29:5b:e1:0a:76:3c:d4:e1:72:f4:b1:
                    5d:13:a0:99:02:ce:98:75:0b:34:08:b0:b5:67:9c:
                    ed:77:25:9b:f0:24:2f:41:ad:32:ba:67:f9:01:a8:
                    14:09:70:63:47:4d:e6:4a:8e:08:bd:b1:1d:82:c6:
                    f3:e9:ed:7c:ba:ee:ed:12:14:b9:25:f9:2c:c4:4d:
                    88:3a:e0:b0:ba:b2:12:29:5f:fe:e7:dc:4d:95:3d:
                    c9:1b:87:06:50:42:9a:05:b9:e4:ad:98:58:44:2a:
                    4f:8a:1f:6e:1d:ee:b3:bd:60:62:79:ed:95:90:e7:
                    f1:6d:fc:37:57:87:5c:9e:05:82:53:05:69:f9:c9:
                    ee:f8:ef:23:79:b4:7b:1c:39:9f:73:7c:81:9a:86:
                    33:1b:56:19:92:75:ad:d8:48:c9:21:2a:47:61:34:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:7F:44:46:96:1B:23:D4:96:20:74:C6:AA:97:78:CA:04:E4:ED
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:2f:b4:b4:3d:c7:e4:67:b2:b6:ef:0d:d8:14:b3:52:5e:
         88:05:9b:d9:e7:1d:2e:5a:c0:01:f5:29:b0:fd:5b:87:87:bb:
         4e:7a:cd:07:6a:68:1f:0e:12:15:0f:e6:61:1c:80:19:c3:20:
         96:ae:eb:fa:17:45:a0:19:49:59:e9:7f:04:4a:ae:9a:a7:1d:
         55:2d:b9:6d:bb:e6:f0:8a:b8:d3:d2:f9:87:b5:44:09:67:13:
         b9:f1:6e:83:b8:9d:1b:91:84:63:7f:90:32:7a:2f:61:a5:81:
         68:0e:52:05:94:ab:fa:bb:22:91:c9:b8:0c:89:ae:52:f8:96:
         8f:5a:f9:ff:80:02:2e:ac:f9:58:36:cb:90:c1:9b:03:5b:64:
         d5:b1:57:0c:f9:93:4e:4a:c6:aa:91:b7:01:a9:1a:db:7c:a3:
         43:93:5e:34:87:ce:67:7d:52:fa:6a:40:67:ad:bd:97:1b:86:
         00:2f:0e:72:d3:fc:ac:57:20:6a:48:91:04:af:85:9e:43:86:
         6a:ef:07:0d:0e:ee:61:3c:e4:4f:09:a9:8d:24:11:2f:d4:ba:
         b0:8e:14:80:82:b0:90:a3:7c:3c:45:42:fa:5b:db:22:cb:97:
         3a:da:97:2c:36:ba:5e:0c:2e:3f:1f:22:9f:69:00:75:3b:c7:
         85:1f:55:36
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUY5lLEa6aXioWJLgG5QAKhdsd7ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NzE4NDM4RkIyMzI2MzkwNzVGM0JCMEU3REU1NENE
MjBBQTkxRDAeFw0yNjAxMDYxOTAyMjVaFw0yNzAxMDUxOTA3MjVaMDMxMTAvBgNV
BAMTKEFDMEM3RjQ0NDY5NjFCMjNENDk2MjA3NEM2QUE5Nzc4Q0EwNEU0RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UUuApWv3eKcN835E8Cg9ZtXX
AyBX/MuRHb/63zxnCmrMAtvlBiT3ek+grTf7BsKZY1dnvtYzREqIJNS36ZXpzKtv
IPEQXOTcBKA2f3vefUMCyrNenzMeKJkoBDgpW+EKdjzU4XL0sV0ToJkCzph1CzQI
sLVnnO13JZvwJC9BrTK6Z/kBqBQJcGNHTeZKjgi9sR2CxvPp7Xy67u0SFLkl+SzE
TYg64LC6shIpX/7n3E2VPckbhwZQQpoFueStmFhEKk+KH24d7rO9YGJ57ZWQ5/Ft
/DdXh1yeBYJTBWn5ye747yN5tHscOZ9zfIGahjMbVhmSda3YSMkhKkdhNG6XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrAx/REaWGyPUliB0xqqXeMoE5O0wHwYDVR0j
BBgwFoAULXcYQ4+yMmOQdfO7Dn3lTNIKqR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzM5ODM4MEFFQ0U4QUU4MDZBQjdFRTk3MjUyRTE5RkI4
MkYzMzQ3OEFGMzNDODA0RjQ4MThDOThBRjYyREFCLzAvMkQ3NzE4NDM4RkIyMzI2
MzkwNzVGM0JCMEU3REU1NENEMjBBQTkxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDc3MTg0MzhGQjIzMjYzOTA3
NUYzQkIwRTdERTU0Q0QyMEFBOTFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjczOTgzODBBRUNFOEFFODA2QUI3RUU5NzI1MkUxOUZCODJGMzM0NzhB
RjMzQzgwNEY0ODE4Qzk4QUY2MkRBQi8wLzM0MzUyZTMxMzYzNjJlMzEzNzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaay
MA0GCSqGSIb3DQEBCwUAA4IBAQA/kC+0tD3H5Geytu8N2BSzUl6IBZvZ5x0uWsAB
9Smw/VuHh7tOes0HamgfDhIVD+ZhHIAZwyCWruv6F0WgGUlZ6X8ESq6apx1VLblt
u+bwirjT0vmHtUQJZxO58W6DuJ0bkYRjf5Ayei9hpYFoDlIFlKv6uyKRybgMia5S
+JaPWvn/gAIurPlYNsuQwZsDW2TVsVcM+ZNOSsaqkbcBqRrbfKNDk140h85nfVL6
akBnrb2XG4YALw5y0/ysVyBqSJEEr4WeQ4Zq7wcNDu5hPORPCamNJBEv1LqwjhSA
grCQo3w8RUL6W9siy5c62pcsNrpeDC4/HyKfaQB1O8eFH1U2
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:27:24 2026 by rpki-client