This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC3E876D5F102ED410266B24D2D5EA812B5751D610A8D2D65A6D1CB685E52EE9/0/34352e3136352e34302e302f32322d3234203d3e20323634373830.roa
File:                     34352e3136352e34302e302f32322d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          TqViCh+69AXunVO4jg1Ssn86yXbqhB/R13dWa1haFwY=
Subject key identifier:   21:AE:27:97:67:10:8D:FC:4A:12:FE:0F:23:72:97:89:E5:CA:1B:18
Certificate issuer:       /CN=C0356C55A5868073012863009DA5E57E41613A2B
Certificate serial:       5F59A9AFFBA9C297D51C1A639075395294C97D62
Authority key identifier: C0:35:6C:55:A5:86:80:73:01:28:63:00:9D:A5:E5:7E:41:61:3A:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0356C55A5868073012863009DA5E57E41613A2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC3E876D5F102ED410266B24D2D5EA812B5751D610A8D2D65A6D1CB685E52EE9/0/34352e3136352e34302e302f32322d3234203d3e20323634373830.roa
Signing time:             Tue 06 Jan 2026 19:00:37 +0000
ROA not before:           Tue 06 Jan 2026 18:55:37 +0000
ROA not after:            Tue 05 Jan 2027 19:00:37 +0000
asID:                     264780
IP address blocks:        45.165.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC3E876D5F102ED410266B24D2D5EA812B5751D610A8D2D65A6D1CB685E52EE9/0/C0356C55A5868073012863009DA5E57E41613A2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC3E876D5F102ED410266B24D2D5EA812B5751D610A8D2D65A6D1CB685E52EE9/0/C0356C55A5868073012863009DA5E57E41613A2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0356C55A5868073012863009DA5E57E41613A2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:59:a9:af:fb:a9:c2:97:d5:1c:1a:63:90:75:39:52:94:c9:7d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0356C55A5868073012863009DA5E57E41613A2B
        Validity
            Not Before: Jan  6 18:55:37 2026 GMT
            Not After : Jan  5 19:00:37 2027 GMT
        Subject: CN=21AE279767108DFC4A12FE0F23729789E5CA1B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:1c:e1:80:83:8e:36:4c:3a:a0:c5:e5:f0:
                    b0:6e:d1:d7:e0:2b:44:7b:01:16:9c:68:ab:ff:d5:
                    19:79:12:4f:7c:d8:e5:3f:2c:97:c6:44:83:27:b8:
                    3a:d0:7f:f7:65:33:d9:dd:92:b0:6c:c5:a0:cd:61:
                    b3:1e:bd:61:7d:17:67:5f:40:9d:f0:31:70:46:2e:
                    09:0f:4c:b2:b9:70:01:3a:c4:d1:a1:62:11:a4:3c:
                    13:39:54:d6:2e:c7:68:4f:2a:cc:eb:2a:a2:69:4b:
                    b6:ac:1f:66:f9:84:bc:2c:04:b6:19:d8:d8:25:e8:
                    3c:d8:1b:da:e9:cd:a3:a8:3d:bd:c3:2f:06:67:9e:
                    78:f1:a8:2a:41:21:60:1e:e2:17:f4:c2:23:a4:97:
                    5b:43:33:c7:26:b7:0b:18:f9:87:f3:35:c3:1e:79:
                    46:9d:14:3e:1a:4d:f6:b4:6f:50:95:eb:d9:ac:da:
                    cb:ef:e0:21:51:5d:73:79:c4:6b:d2:fd:5b:90:fb:
                    35:78:1a:97:f4:42:78:aa:b8:e0:f7:61:a4:79:f3:
                    63:ca:7e:26:a5:a0:0c:f3:d5:68:f3:62:0f:62:5c:
                    98:b7:f5:f1:75:1b:47:5c:6c:dc:85:90:ad:f8:11:
                    d1:30:ca:41:60:3f:59:10:ae:d1:00:5e:71:8d:9c:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AE:27:97:67:10:8D:FC:4A:12:FE:0F:23:72:97:89:E5:CA:1B:18
            X509v3 Authority Key Identifier:
                keyid:C0:35:6C:55:A5:86:80:73:01:28:63:00:9D:A5:E5:7E:41:61:3A:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC3E876D5F102ED410266B24D2D5EA812B5751D610A8D2D65A6D1CB685E52EE9/0/C0356C55A5868073012863009DA5E57E41613A2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0356C55A5868073012863009DA5E57E41613A2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC3E876D5F102ED410266B24D2D5EA812B5751D610A8D2D65A6D1CB685E52EE9/0/34352e3136352e34302e302f32322d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:e3:5a:2b:7e:bf:54:07:fe:2a:a3:bb:44:31:fd:91:56:
         4c:0b:35:6f:ab:ad:7f:36:f1:10:94:dd:25:7a:15:c4:ba:14:
         89:a7:e5:ff:8b:45:25:3f:b3:bb:81:b5:e1:71:26:10:62:52:
         b0:6e:1c:61:69:d3:b9:a6:b7:70:b4:3d:91:38:14:ca:e7:f5:
         d0:11:77:9e:30:04:60:3d:4d:fb:c6:95:48:1e:58:5e:e4:e4:
         f7:d5:e6:df:76:8f:f5:d2:2e:39:0f:c0:cf:36:3d:e4:0f:ac:
         a5:e7:ad:e2:d6:2d:b2:24:6e:94:0a:c2:3b:26:8e:6d:d8:e5:
         41:ce:31:d2:20:8b:e2:9d:58:fb:ed:99:5a:55:6f:49:91:3f:
         39:e7:db:99:74:98:30:e8:87:ec:92:da:65:35:d0:be:0a:28:
         9a:23:19:b3:75:9a:fd:f6:8d:55:a2:33:37:d6:7a:8b:e4:b7:
         7c:f4:37:fc:a5:fe:d0:95:2b:f4:32:41:a4:99:8e:51:e3:08:
         86:19:87:8c:a7:3a:8e:f6:80:4d:cf:ca:b3:95:24:a1:8d:3c:
         b3:57:3b:d8:5e:24:7a:ec:a5:87:ec:10:58:1c:43:f2:2d:8c:
         d5:7d:c3:99:5f:8b:ba:4a:b6:5d:f8:76:e1:84:17:27:48:14:
         68:28:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:51 2026 by rpki-client