This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa
File:                     34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa (raw, json)
Hash identifier:          BMYXOjQUozVkf53cEPd3g6GPxJWHWB3sF91cZHGHB9A=
Subject key identifier:   27:09:4B:53:4B:1B:3A:4A:F6:4D:F5:CA:FC:94:DE:A3:50:38:F2:1B
Certificate issuer:       /CN=A18333048C43710CA4783E73FD39659E7AC094BD
Certificate serial:       418A08FE0FB6454583B1E32C3259A9AB1BE5FB9B
Authority key identifier: A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa
Signing time:             Tue 06 Jan 2026 19:15:08 +0000
ROA not before:           Tue 06 Jan 2026 19:10:08 +0000
ROA not after:            Tue 05 Jan 2027 19:15:08 +0000
asID:                     267788
IP address blocks:        45.167.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 23:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:08:fe:0f:b6:45:45:83:b1:e3:2c:32:59:a9:ab:1b:e5:fb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18333048C43710CA4783E73FD39659E7AC094BD
        Validity
            Not Before: Jan  6 19:10:08 2026 GMT
            Not After : Jan  5 19:15:08 2027 GMT
        Subject: CN=27094B534B1B3A4AF64DF5CAFC94DEA35038F21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:a0:76:39:e8:11:64:28:cb:50:2b:72:b3:
                    ba:34:c5:d6:c4:e8:bb:88:b0:7f:83:ad:ae:1f:22:
                    4c:e5:58:75:42:32:d0:d8:cc:ca:47:cd:9e:a5:54:
                    fc:05:04:5b:9c:a6:2f:d8:8d:9a:8a:c2:64:ff:0d:
                    32:b8:f9:07:64:c9:1c:0b:bf:b3:8f:2e:f9:68:45:
                    63:66:3e:1f:a1:39:73:eb:9e:ad:bb:bc:69:a7:ba:
                    0f:0c:d3:4b:0b:80:e7:81:15:00:30:08:30:23:24:
                    10:df:4c:90:35:aa:f7:54:a5:d7:ca:ed:30:79:77:
                    6f:32:99:ef:f5:50:9c:f4:58:89:3d:de:e7:8f:b6:
                    5a:05:08:70:fb:f8:81:2d:85:97:f3:26:12:77:78:
                    a3:68:d0:09:53:38:1b:32:72:d9:49:13:75:0a:22:
                    96:5e:d4:89:57:58:27:98:66:f6:ea:67:f4:cb:7b:
                    42:0a:62:51:d3:42:76:de:82:4d:66:5e:58:c6:da:
                    57:52:ab:d7:9b:c4:25:0f:65:24:96:08:50:66:a1:
                    d0:a1:a4:a6:b2:3d:0a:38:39:d4:33:4a:29:51:4f:
                    09:13:22:e6:13:88:a2:ac:9f:95:4e:e1:21:33:59:
                    2c:68:40:2d:84:da:fd:a4:84:93:de:9c:ee:7f:45:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:09:4B:53:4B:1B:3A:4A:F6:4D:F5:CA:FC:94:DE:A3:50:38:F2:1B
            X509v3 Authority Key Identifier:
                keyid:A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:4c:a1:fc:a5:52:57:cc:e7:d0:8f:54:e9:d0:3f:ab:93:d8:
         d8:5d:53:cd:f6:31:d0:55:dd:5a:19:2b:44:cf:f5:91:fb:82:
         67:cb:29:15:98:32:c8:80:ae:4d:28:e5:de:c7:bf:f5:61:aa:
         fe:5e:ad:56:54:46:28:c2:bc:7f:46:b4:2b:94:ba:0b:71:38:
         aa:5d:4f:5c:a1:de:f1:de:2f:0a:ac:9b:2a:9b:76:70:b3:43:
         e2:82:9d:ee:2c:82:b1:c7:1b:8d:8c:82:f8:5c:95:79:96:76:
         f7:02:17:c7:c4:e4:50:95:50:d0:ff:45:79:fe:d3:3a:35:bd:
         eb:6c:e2:96:35:52:60:a3:8b:3e:7d:9a:7e:8d:c7:5e:f5:bc:
         b8:3b:86:13:2f:1c:e7:4a:fc:08:8a:54:0f:dc:4e:96:fb:97:
         20:f0:1a:5b:94:86:65:00:e8:a4:ba:b4:f2:cf:d7:e5:50:83:
         08:a6:00:a5:2e:d9:ce:40:ab:04:e8:1d:21:1f:31:90:79:d1:
         29:aa:de:af:50:5f:12:1f:2b:74:88:6e:dd:02:bc:0a:e2:9c:
         f1:4e:a0:c7:2d:3f:91:d4:f5:3e:34:26:9e:83:59:a3:f6:49:
         c9:00:5e:cf:d1:ae:e0:6b:68:e5:bc:72:b1:58:29:5f:af:97:
         a9:2f:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:44 2026 by rpki-client