This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
File:                     34352e3136312e3233362e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          SdzwWw6dcvaS4XdRSsV3w69+iMp+QDvuAVHag7agkAE=
Subject key identifier:   41:4A:3E:18:71:35:74:96:F4:B6:A0:EC:F4:AC:01:F8:95:D7:EB:3D
Certificate issuer:       /CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
Certificate serial:       2F9066AB03116EE0B36318F5788D4ECC525A4E06
Authority key identifier: 85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa
Signing time:             Tue 06 Jan 2026 19:40:25 +0000
ROA not before:           Tue 06 Jan 2026 19:35:25 +0000
ROA not after:            Tue 05 Jan 2027 19:40:25 +0000
asID:                     61512
IP address blocks:        45.161.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:90:66:ab:03:11:6e:e0:b3:63:18:f5:78:8d:4e:cc:52:5a:4e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85BF38FA438F4F872458ED36423D1AA7F85DB52A
        Validity
            Not Before: Jan  6 19:35:25 2026 GMT
            Not After : Jan  5 19:40:25 2027 GMT
        Subject: CN=414A3E1871357496F4B6A0ECF4AC01F895D7EB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:20:65:25:66:a2:bb:17:cd:9c:14:81:29:
                    22:96:6c:1f:74:72:fb:91:8d:12:8d:e4:45:4b:55:
                    cf:3d:17:82:97:95:7e:3a:54:2a:7c:c9:5e:cf:7d:
                    82:55:5e:9c:04:23:40:c6:a6:96:cb:9f:85:87:3f:
                    d3:10:6a:a4:4e:95:ef:58:e4:07:df:41:2d:fc:df:
                    df:0f:fe:ea:1b:80:2d:a6:f6:77:e6:6a:43:94:73:
                    af:a6:50:5a:82:99:29:75:82:14:0a:da:80:75:15:
                    21:a4:86:a0:42:68:4e:7b:8a:6a:87:20:e9:83:4f:
                    8f:28:7c:52:5f:83:8b:ef:3b:16:3c:b6:fc:9c:12:
                    13:20:14:d1:b1:ab:fa:da:35:6f:22:b2:e5:a5:29:
                    3c:c8:79:66:e2:f7:05:fa:6d:5f:2c:b5:19:fd:a5:
                    f0:0b:eb:05:73:c0:3b:54:65:2e:55:9a:1a:87:cf:
                    d4:07:de:21:02:a1:45:19:d0:fa:21:0b:8a:95:7f:
                    1b:0b:c0:54:9f:58:21:bc:52:ff:ee:7b:97:63:91:
                    74:89:26:03:57:79:7f:cb:32:f9:0a:a4:68:de:0e:
                    32:f7:2c:88:00:08:87:21:c0:fa:ba:76:1a:8e:19:
                    40:5e:7a:07:14:43:a9:a1:22:a7:70:c7:f6:00:80:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4A:3E:18:71:35:74:96:F4:B6:A0:EC:F4:AC:01:F8:95:D7:EB:3D
            X509v3 Authority Key Identifier:
                keyid:85:BF:38:FA:43:8F:4F:87:24:58:ED:36:42:3D:1A:A7:F8:5D:B5:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85BF38FA438F4F872458ED36423D1AA7F85DB52A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D19FB2BD0CD9787A5639651E8AC421160B51F312FBB6FD1A5A01D0DBC60E19E9/0/34352e3136312e3233362e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:72:fb:86:e0:63:09:fc:d1:30:0f:b7:68:47:ca:f5:50:
         3f:69:1d:05:bd:7b:bb:54:e9:ab:27:87:22:fa:9d:25:f3:9c:
         b7:df:65:32:33:49:ce:f2:83:e1:b9:c4:ba:33:0b:78:3a:02:
         ca:b5:8e:98:b4:e1:cf:83:85:9d:c8:a3:f2:78:9b:5f:17:9f:
         62:2e:43:03:43:d3:1f:7e:d2:bc:05:91:7e:36:ae:06:d4:c3:
         77:35:6e:87:81:2c:4b:68:13:09:ce:6c:17:db:8b:57:39:bc:
         72:c0:68:49:66:72:a1:bb:16:0d:da:31:10:6d:0b:ca:c7:ec:
         f9:37:20:f5:f8:8b:d6:e9:0b:36:f1:d8:70:7b:50:a2:93:64:
         cf:d5:3d:5a:14:ec:90:a9:90:7c:ce:41:9f:07:45:5f:7a:3e:
         8b:4f:19:c5:66:c5:a7:24:7d:06:bc:a8:0c:1e:a6:36:15:a5:
         14:9c:5d:3f:0a:f9:25:ef:0e:e9:b1:55:7d:2b:03:1c:b0:12:
         15:4b:b1:1f:84:b1:ba:23:99:b5:82:7e:45:01:46:69:9c:3e:
         9d:f5:02:2b:7b:46:4f:c1:96:ba:62:63:10:73:02:49:a6:9d:
         e3:4e:94:62:2f:2d:dd:93:ef:d4:7e:16:c1:e1:0f:4f:31:c7:
         69:96:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:18 2026 by rpki-client