This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa
File:                     34352e3138322e32312e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          O8qATD3eG5y/a+s/WjPYja6Nv28gFt2mudMWnPUWJZ0=
Subject key identifier:   13:F0:E9:3C:D0:35:27:92:18:75:0D:6E:A8:57:70:6F:19:EF:DB:38
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       5B8FF44CAE80860E7B5C5212F2024003DF0CC038
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 06 Jan 2026 19:25:38 +0000
ROA not before:           Tue 06 Jan 2026 19:20:38 +0000
ROA not after:            Tue 05 Jan 2027 19:25:38 +0000
asID:                     263725
IP address blocks:        45.182.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8f:f4:4c:ae:80:86:0e:7b:5c:52:12:f2:02:40:03:df:0c:c0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Jan  6 19:20:38 2026 GMT
            Not After : Jan  5 19:25:38 2027 GMT
        Subject: CN=13F0E93CD035279218750D6EA857706F19EFDB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:4d:36:da:05:8f:c2:83:b5:4a:ca:f7:c7:
                    c1:e3:b2:c5:ee:64:ca:82:ac:23:76:60:22:61:19:
                    32:8d:5b:1f:89:f3:fa:21:9a:28:66:51:1d:8c:37:
                    39:95:4e:ac:96:7b:91:4e:d9:6d:8b:a3:33:c3:f3:
                    8c:bc:95:e7:5e:20:b9:e1:85:90:35:79:4c:6a:09:
                    88:35:0e:11:a8:5d:c6:c2:65:bc:ed:18:28:e1:88:
                    08:09:2f:10:da:0d:01:6f:ca:75:75:6d:09:eb:ca:
                    40:dc:55:19:54:b6:de:42:0c:08:0a:52:45:93:5d:
                    c4:25:c5:df:e3:1e:56:4e:28:7b:69:99:da:c1:17:
                    0a:a1:81:63:69:59:2e:5f:88:2a:30:cf:46:da:2a:
                    c1:50:d9:5c:35:5f:56:c9:45:58:ae:9f:72:7e:d9:
                    cc:0c:60:2b:a7:4d:6f:61:69:78:0a:9f:ba:b0:07:
                    c4:8e:57:d4:3d:f7:65:ba:1e:d3:5b:df:56:07:6e:
                    3f:e8:c1:60:c3:e2:5b:8f:b8:c1:0e:04:0a:76:30:
                    0e:b5:d1:2f:7f:f2:dc:70:80:d8:2a:9b:c5:de:3d:
                    f3:cd:5b:65:de:43:e8:12:47:a3:7b:27:8e:9d:36:
                    8d:76:10:7b:ce:9b:23:f1:a2:27:2d:aa:3a:cc:18:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:E9:3C:D0:35:27:92:18:75:0D:6E:A8:57:70:6F:19:EF:DB:38
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:0a:82:80:b2:59:1d:4b:97:7d:f9:e7:8e:34:85:7d:69:
         6d:57:b2:19:fa:9b:d6:f5:23:1d:17:77:fa:dc:d1:4b:81:30:
         a2:79:78:6b:82:63:8d:d2:68:f6:33:73:2c:76:c8:60:0f:69:
         8a:41:38:57:8e:cc:e1:e4:b3:d1:72:61:04:64:7e:21:7e:96:
         16:f4:6c:da:f6:f2:06:3f:24:8b:69:56:08:90:34:5d:9f:98:
         0f:54:05:c2:3d:21:3e:1c:5d:10:e2:71:5f:9b:24:d9:5b:60:
         b6:ef:51:41:8f:28:52:56:e4:40:25:39:04:a6:69:fd:f4:83:
         1e:1e:a3:32:4d:39:0a:2b:a0:fe:7d:36:1b:12:e3:06:10:a7:
         9e:00:c6:35:b6:ec:82:df:fa:f9:16:05:f6:ed:53:7a:44:ca:
         1e:02:98:6c:7d:9a:c6:0e:7b:60:6c:5c:56:5a:b3:29:51:1c:
         32:14:ae:7f:26:2e:fc:c9:a6:48:c3:17:55:8b:06:41:de:3a:
         f2:47:fe:da:ae:cb:06:b8:d6:47:0a:49:33:65:c5:cf:b4:06:
         a2:eb:ff:33:81:f2:5d:bd:84:33:2d:b3:3f:75:1e:36:99:65:
         6b:15:1c:8a:48:56:0d:b1:98:86:40:58:1b:39:22:fc:bf:9a:
         c9:03:75:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:38:59 2026 by rpki-client