This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa
File:                     34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa (raw, json)
Hash identifier:          PJ5CiKl+6BUszGhDWRguYr49kkpItuD696hqH0sIsrI=
Subject key identifier:   3A:EB:12:13:66:C1:ED:E9:F5:1B:8B:84:19:1F:94:B4:9E:ED:DB:14
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       4E09AE1C3BEE89A04A9429DC981471E84390477B
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa
Signing time:             Tue 06 Jan 2026 19:05:12 +0000
ROA not before:           Tue 06 Jan 2026 19:00:12 +0000
ROA not after:            Tue 05 Jan 2027 19:05:12 +0000
asID:                     269804
IP address blocks:        45.167.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 04:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:09:ae:1c:3b:ee:89:a0:4a:94:29:dc:98:14:71:e8:43:90:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Jan  6 19:00:12 2026 GMT
            Not After : Jan  5 19:05:12 2027 GMT
        Subject: CN=3AEB121366C1EDE9F51B8B84191F94B49EEDDB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:a7:19:da:7c:26:19:0a:b4:77:86:0a:4e:
                    30:c7:b6:88:f5:7a:af:f7:4c:bd:cb:e0:51:8f:c7:
                    3b:30:89:6c:f6:8e:7c:4c:c5:4c:d7:97:87:24:6d:
                    33:34:4b:e7:4c:99:96:98:a4:5c:66:35:a1:37:aa:
                    38:6a:bf:8a:1c:fa:39:cb:95:a5:d9:4b:4b:d7:7c:
                    4a:58:d9:0d:1f:a9:83:ac:1f:09:a8:69:cd:5e:9a:
                    7f:31:06:6b:3e:ac:0d:ac:38:7e:9a:23:ed:20:6d:
                    4e:bd:d0:87:b8:50:91:15:cc:15:ad:af:07:e9:3c:
                    fe:3a:21:09:62:b1:80:8c:17:e8:bb:25:3b:ec:de:
                    7f:6d:2a:5c:21:04:c8:4a:b9:0b:0f:61:56:5d:ba:
                    95:34:14:b8:0a:73:f0:ee:d7:81:7e:78:92:bc:cc:
                    0c:0f:dd:40:a1:4c:dc:f2:0d:73:90:ab:54:eb:91:
                    6c:f5:cc:a0:0f:59:ad:be:ba:93:be:7d:11:4e:bc:
                    1b:14:e3:41:ed:6d:4a:ff:4a:fb:ca:d4:e3:45:b6:
                    96:61:03:c8:a3:5d:4a:35:20:a5:9a:9a:ec:b2:aa:
                    a1:2b:b3:e5:ac:f9:d2:10:35:85:25:34:28:87:73:
                    9d:72:58:79:4e:ba:46:d9:ba:85:b5:78:72:27:e2:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EB:12:13:66:C1:ED:E9:F5:1B:8B:84:19:1F:94:B4:9E:ED:DB:14
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:42:53:bc:7f:64:1d:65:2d:6d:45:f6:e2:35:62:8a:c8:25:
         ab:6e:8d:3d:ee:ea:f3:c8:ae:74:3a:1a:03:3a:a9:8c:63:31:
         7c:ba:a7:a7:8c:84:3d:8e:a0:77:59:d6:77:c5:79:e4:2f:62:
         d0:f5:0d:4f:09:57:9e:46:e6:fb:8f:7a:fc:06:7b:b5:a6:41:
         a4:b6:b4:c3:7c:ab:3d:df:b1:75:2c:73:b0:34:10:f9:11:fa:
         bd:ca:82:71:db:33:5f:bd:d5:ef:8b:29:79:90:28:1d:89:01:
         25:b7:dd:f5:0d:01:76:d7:3b:4b:72:a9:4d:2a:78:83:d2:35:
         42:31:9c:4d:d3:c2:cc:77:50:4b:b8:09:0a:07:6f:2e:18:15:
         04:e0:f7:d3:8e:d5:17:07:09:1a:74:fb:93:e8:dd:90:77:c8:
         eb:29:f8:2b:5b:55:a8:33:dd:bd:39:8b:3d:c4:23:d1:55:a5:
         e6:97:ad:d9:16:96:6b:d0:12:d4:26:21:bf:80:3f:bb:12:58:
         6e:bd:77:a6:df:87:cc:b7:2f:74:74:e8:17:b6:d3:9c:96:52:
         ed:da:94:c3:8f:fa:64:fd:6a:3f:e1:16:8d:07:f0:c5:f6:2f:
         98:78:b5:eb:27:cd:db:71:e2:ad:76:1b:6c:37:1c:74:b8:f7:
         b1:48:8f:8d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTgmuHDvuiaBKlCncmBRx6EOQR3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNGQzBDRDM2REU4Mzg5OEFGRTQ2MzRDMTAzRkUxQ0Yw
NjU2M0NGNDAeFw0yNjAxMDYxOTAwMTJaFw0yNzAxMDUxOTA1MTJaMDMxMTAvBgNV
BAMTKDNBRUIxMjEzNjZDMUVERTlGNTFCOEI4NDE5MUY5NEI0OUVFRERCMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjqcZ2nwmGQq0d4YKTjDHtoj1
eq/3TL3L4FGPxzswiWz2jnxMxUzXl4ckbTM0S+dMmZaYpFxmNaE3qjhqv4oc+jnL
laXZS0vXfEpY2Q0fqYOsHwmoac1emn8xBms+rA2sOH6aI+0gbU690Ie4UJEVzBWt
rwfpPP46IQlisYCMF+i7JTvs3n9tKlwhBMhKuQsPYVZdupU0FLgKc/Du14F+eJK8
zAwP3UChTNzyDXOQq1TrkWz1zKAPWa2+upO+fRFOvBsU40HtbUr/SvvK1ONFtpZh
A8ijXUo1IKWamuyyqqErs+Ws+dIQNYUlNCiHc51yWHlOukbZuoW1eHIn4j23AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOusSE2bB7en1G4uEGR+UtJ7t2xQwHwYDVR0j
BBgwFoAUbPwM023oOJiv5GNMED/hzwZWPPQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0U5MkU2QUQ0MEFBMEM5RkVBQjk5QUM4MUUyRjJGRTRG
ODlCQ0ZGODBCOEFFOEYzODkxMkIyOTVGMEU5OTE0LzAvNkNGQzBDRDM2REU4Mzg5
OEFGRTQ2MzRDMTAzRkUxQ0YwNjU2M0NGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0ZDMENEMzZERTgzODk4QUZF
NDYzNEMxMDNGRTFDRjA2NTYzQ0Y0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNFOTJFNkFENDBBQTBDOUZFQUI5OUFDODFFMkYyRkU0Rjg5QkNGRjgw
QjhBRThGMzg5MTJCMjk1RjBFOTkxNC8wLzM0MzUyZTMxMzYzNzJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALad+
MA0GCSqGSIb3DQEBCwUAA4IBAQA5QlO8f2QdZS1tRfbiNWKKyCWrbo097urzyK50
OhoDOqmMYzF8uqenjIQ9jqB3WdZ3xXnkL2LQ9Q1PCVeeRub7j3r8Bnu1pkGktrTD
fKs937F1LHOwNBD5Efq9yoJx2zNfvdXviyl5kCgdiQElt931DQF21ztLcqlNKniD
0jVCMZxN08LMd1BLuAkKB28uGBUE4PfTjtUXBwkadPuT6N2Qd8jrKfgrW1WoM929
OYs9xCPRVaXml63ZFpZr0BLUJiG/gD+7ElhuvXem34fMty90dOgXttOcllLt2pTD
j/pk/Wo/4RaNB/DF9i+YeLXrJ83bceKtdhtsNxx0uPexSI+N
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:12 2026 by rpki-client