This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa
File:                     34352e3136372e31322e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier:          +2lkXP8KuJLSB3gUL2LP1t3K5CI/c3l/e6fBGrhlWSY=
Subject key identifier:   05:2D:66:15:4B:ED:26:95:7C:FD:D9:48:94:D7:04:2D:9D:BB:E5:4B
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       6F1DD872C1921A9B1FA2A036C45B5772B530C9FD
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa
Signing time:             Tue 06 Jan 2026 19:01:45 +0000
ROA not before:           Tue 06 Jan 2026 18:56:45 +0000
ROA not after:            Tue 05 Jan 2027 19:01:45 +0000
asID:                     265534
IP address blocks:        45.167.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 18:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1d:d8:72:c1:92:1a:9b:1f:a2:a0:36:c4:5b:57:72:b5:30:c9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Jan  6 18:56:45 2026 GMT
            Not After : Jan  5 19:01:45 2027 GMT
        Subject: CN=052D66154BED26957CFDD94894D7042D9DBBE54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:38:cd:2d:a8:de:70:d0:5c:73:4e:21:df:
                    c7:4f:0c:f3:b7:82:60:9c:60:96:86:4f:64:c3:54:
                    ce:21:74:9f:17:84:ad:3a:b6:63:9a:12:6d:65:de:
                    ef:f2:42:8a:63:29:19:74:33:23:cf:8d:cc:14:8f:
                    dd:77:0e:70:4f:c0:c1:98:0a:00:8b:ac:59:f6:08:
                    50:6d:20:e7:d6:6e:e2:35:67:ca:37:e0:75:66:82:
                    f3:d1:27:3e:12:18:e1:c2:2e:85:26:f3:17:b2:c1:
                    6e:80:47:7e:ea:0d:70:5e:7b:2f:7c:e9:09:20:bc:
                    b3:ab:a1:5b:bd:1c:6d:d0:25:6b:34:2c:f4:78:19:
                    e1:33:cd:11:d3:95:56:27:cb:48:1b:5a:5e:92:a6:
                    e9:b5:05:27:ba:ce:0d:3c:71:be:8d:4b:b6:b2:35:
                    86:b0:df:e5:ac:cb:74:26:a0:0e:f5:8c:da:0d:36:
                    02:26:a4:ce:4c:97:2a:a8:73:4d:37:13:5e:69:82:
                    91:f3:d1:a4:a0:14:c1:8b:f5:38:ea:31:7b:f5:a9:
                    a4:39:76:6e:58:e9:60:fc:64:a5:8b:56:ac:51:4d:
                    44:27:f0:c2:5e:99:26:06:f3:02:b2:b6:8b:c8:f5:
                    f8:dd:4e:ea:70:a9:64:6b:77:43:b3:c1:33:8c:9d:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2D:66:15:4B:ED:26:95:7C:FD:D9:48:94:D7:04:2D:9D:BB:E5:4B
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:77:1e:7b:25:d3:68:f5:d8:69:51:59:09:7b:4f:3c:97:57:
         6c:6b:13:70:4d:40:67:ab:cd:13:b2:31:b1:10:01:6b:4f:35:
         de:69:10:cd:43:64:e9:8d:68:3b:45:af:66:98:df:78:f3:cc:
         53:78:12:52:03:ee:04:84:7d:8c:13:b4:65:9d:23:7f:16:6f:
         8a:e9:b4:29:6c:f9:26:c6:a5:94:59:95:c5:6d:5e:16:ac:b9:
         50:52:84:ad:e8:7d:7b:52:c4:49:df:9a:34:1c:58:4f:d0:09:
         ee:de:eb:16:79:5c:ea:6b:50:83:da:57:fb:cf:d9:81:c9:49:
         e1:22:86:cd:59:2b:2d:37:b3:8a:e8:4b:3c:c7:53:ac:25:74:
         cb:98:48:f3:65:8c:0d:03:92:d4:9e:f8:be:76:a6:06:2d:0f:
         fd:07:80:7f:98:44:9b:72:4a:56:e2:24:82:b9:4f:74:f3:3b:
         15:56:5f:1c:9c:53:86:63:2f:36:d3:b3:1e:34:47:9a:e6:dd:
         a1:d4:aa:02:cd:7e:43:f9:25:ff:2d:f0:1b:59:fd:a6:82:32:
         cb:7c:1c:83:93:d7:e9:f7:cb:a2:4f:e0:3e:92:20:c6:39:1c:
         44:c2:6b:d7:8c:bf:7f:b3:8e:72:ef:75:d0:5c:8f:03:3c:e3:
         21:97:06:8a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbx3YcsGSGpsfoqA2xFtXcrUwyf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QwQ0U1ODkzNzNCMjdDNzM3N0I5NTcxNjcxN0M0MkRC
OEIxRkYwODAeFw0yNjAxMDYxODU2NDVaFw0yNzAxMDUxOTAxNDVaMDMxMTAvBgNV
BAMTKDA1MkQ2NjE1NEJFRDI2OTU3Q0ZERDk0ODk0RDcwNDJEOURCQkU1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iTjNLajecNBcc04h38dPDPO3
gmCcYJaGT2TDVM4hdJ8XhK06tmOaEm1l3u/yQopjKRl0MyPPjcwUj913DnBPwMGY
CgCLrFn2CFBtIOfWbuI1Z8o34HVmgvPRJz4SGOHCLoUm8xeywW6AR37qDXBeey98
6QkgvLOroVu9HG3QJWs0LPR4GeEzzRHTlVYny0gbWl6Spum1BSe6zg08cb6NS7ay
NYaw3+Wsy3QmoA71jNoNNgImpM5Mlyqoc003E15pgpHz0aSgFMGL9TjqMXv1qaQ5
dm5Y6WD8ZKWLVqxRTUQn8MJemSYG8wKytovI9fjdTupwqWRrd0OzwTOMnW2PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBS1mFUvtJpV8/dlIlNcELZ275UswHwYDVR0j
BBgwFoAUzQzliTc7J8c3e5VxZxfELbix/wgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNDlGMDlEMDc3N0NEMjYwQjI4REJCRjFDQTU3N0JCRjFB
NTk4Qjg1NEY3RDNEQkEzQTA5NEU4QjY1NDA1MUYyLzAvQ0QwQ0U1ODkzNzNCMjdD
NzM3N0I5NTcxNjcxN0M0MkRCOEIxRkYwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDBDRTU4OTM3M0IyN0M3Mzc3
Qjk1NzE2NzE3QzQyREI4QjFGRjA4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzQ5RjA5RDA3NzdDRDI2MEIyOERCQkYxQ0E1NzdCQkYxQTU5OEI4NTRG
N0QzREJBM0EwOTRFOEI2NTQwNTFGMi8wLzM0MzUyZTMxMzYzNzJlMzEzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM1MzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2nDDAN
BgkqhkiG9w0BAQsFAAOCAQEAonceeyXTaPXYaVFZCXtPPJdXbGsTcE1AZ6vNE7Ix
sRABa0813mkQzUNk6Y1oO0WvZpjfePPMU3gSUgPuBIR9jBO0ZZ0jfxZvium0KWz5
JsallFmVxW1eFqy5UFKEreh9e1LESd+aNBxYT9AJ7t7rFnlc6mtQg9pX+8/ZgclJ
4SKGzVkrLTeziuhLPMdTrCV0y5hI82WMDQOS1J74vnamBi0P/QeAf5hEm3JKVuIk
grlPdPM7FVZfHJxThmMvNtOzHjRHmubdodSqAs1+Q/kl/y3wG1n9poIyy3wcg5PX
6ffLok/gPpIgxjkcRMJr14y/f7OOcu910FyPAzzjIZcGig==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:55 2026 by rpki-client