This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e203532343638.roa
File:                     34352e37312e3138342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          qOEmP57v7h+0r0ocRweVxV3cbUoYOLYnKyYbfcuWhUM=
Subject key identifier:   0E:81:62:54:48:8C:CC:5C:0D:80:5E:54:48:78:B3:F9:A3:5F:F9:04
Certificate issuer:       /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial:       49B21705B200B2E68EB9EE852CB85DFC82B577FC
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:21:59 +0000
ROA not before:           Tue 06 Jan 2026 19:16:59 +0000
ROA not after:            Tue 05 Jan 2027 19:21:59 +0000
asID:                     52468
IP address blocks:        45.71.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b2:17:05:b2:00:b2:e6:8e:b9:ee:85:2c:b8:5d:fc:82:b5:77:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
        Validity
            Not Before: Jan  6 19:16:59 2026 GMT
            Not After : Jan  5 19:21:59 2027 GMT
        Subject: CN=0E816254488CCC5C0D805E544878B3F9A35FF904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:15:29:49:59:88:2f:18:f7:97:8c:f3:a6:
                    51:d2:85:b0:f6:72:87:92:14:a7:1d:89:88:e6:86:
                    6a:33:57:dc:0a:00:72:ff:e8:e6:c6:57:07:69:b9:
                    e1:87:63:ec:fa:d9:33:ae:43:08:68:c7:69:95:2d:
                    b5:1f:31:01:e2:28:9b:55:8b:24:a2:7d:a6:56:89:
                    c0:ee:17:27:3d:fc:18:9f:5c:21:e5:89:10:64:b8:
                    c1:b5:5a:9a:e1:d9:f1:b2:3a:14:92:d5:02:45:d0:
                    7f:9f:db:c3:fa:6b:0f:19:19:28:06:4c:f3:bd:c3:
                    a2:b5:27:67:97:64:c1:04:d6:9e:e4:a0:20:d5:e6:
                    32:da:03:82:4f:2a:18:1d:54:c1:d9:a2:8a:b9:3c:
                    3e:ed:fc:bf:2d:c6:af:33:ed:6f:09:6f:53:1a:b1:
                    95:42:9c:7d:64:80:86:63:49:cb:d5:4e:06:1a:d0:
                    81:0f:67:8f:cf:cd:9b:0d:b5:99:83:91:66:1c:17:
                    08:a3:10:19:31:e1:3b:8c:c5:d7:72:99:99:08:4e:
                    9d:c8:8a:1e:77:a4:7c:3b:91:a5:1e:ad:b1:d5:ed:
                    5b:3d:3e:ce:8e:cf:76:a2:bf:d3:45:2f:da:fa:19:
                    6d:4b:43:59:bc:ac:5f:1c:6f:ab:68:dc:83:bb:57:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:81:62:54:48:8C:CC:5C:0D:80:5E:54:48:78:B3:F9:A3:5F:F9:04
            X509v3 Authority Key Identifier:
                keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:ec:58:e5:ef:69:92:ac:0a:0e:14:3d:ca:f6:f7:3f:60:72:
         29:ee:95:50:e5:c6:ef:84:f0:8b:ae:75:01:d8:45:cd:6e:9a:
         15:34:6a:50:36:20:f0:56:1b:53:99:16:fd:f0:61:14:75:eb:
         76:5f:32:b2:b2:ae:e1:8a:4d:e8:5e:69:cf:86:bf:bf:69:52:
         98:95:75:10:88:8a:89:87:cc:a2:a8:b8:8d:18:64:41:b7:b4:
         25:a5:cc:38:6a:47:57:b5:96:c8:6f:1f:02:67:58:99:44:54:
         73:05:6a:3c:2e:07:1a:b7:ef:be:9b:ed:71:9e:5a:a0:f9:95:
         39:f2:1f:14:4d:e4:fc:93:70:ea:2f:f2:66:3c:c2:ff:4a:c1:
         25:ae:6d:aa:e7:d1:74:4d:b7:dd:e2:ee:95:68:31:b1:6c:cd:
         55:d5:1c:ea:e0:7f:64:ca:77:ab:20:bd:ff:7c:d5:72:6a:a1:
         49:f0:74:c6:3b:79:86:92:f3:75:cd:c7:f8:a4:62:4c:28:a6:
         85:39:aa:17:cf:dc:65:f0:bb:20:2e:42:17:2c:43:9b:9c:64:
         f0:f1:fb:8e:e2:67:dc:9b:82:c1:97:5b:ba:10:c3:a5:ab:c0:
         28:7c:b0:68:d0:a8:05:53:2e:d6:99:0f:49:1e:47:59:40:8f:
         18:73:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:28:10 2026 by rpki-client