This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa
File:                     34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa (raw, json)
Hash identifier:          mUEmsQ7pHMbEQ9zNUwcXJypJBeC2NYK0hJqApRNQjfc=
Subject key identifier:   8F:A4:1F:56:59:97:76:44:93:28:0D:27:D7:A6:1A:26:DF:AF:F4:24
Certificate issuer:       /CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
Certificate serial:       155A6C6C534CFB7B5F197FE0432396C879D62FF8
Authority key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa
Signing time:             Thu 08 Jan 2026 05:59:21 +0000
ROA not before:           Thu 08 Jan 2026 05:54:21 +0000
ROA not after:            Thu 07 Jan 2027 05:59:21 +0000
asID:                     269815
IP address blocks:        45.186.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5a:6c:6c:53:4c:fb:7b:5f:19:7f:e0:43:23:96:c8:79:d6:2f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
        Validity
            Not Before: Jan  8 05:54:21 2026 GMT
            Not After : Jan  7 05:59:21 2027 GMT
        Subject: CN=8FA41F565997764493280D27D7A61A26DFAFF424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:72:5d:79:25:17:b1:97:4a:66:27:50:39:
                    4b:43:11:f8:ad:d6:c5:ff:02:6d:7a:4a:bb:ae:31:
                    21:ca:d0:eb:a8:6c:1f:6f:ed:67:98:6f:48:a5:55:
                    89:fd:0f:ab:e6:44:5b:87:73:0c:84:2f:e5:2f:e9:
                    66:72:5e:aa:77:df:b6:47:70:72:f1:c1:41:72:0b:
                    6c:ee:7c:68:ca:ae:80:0e:a1:16:f8:46:7e:c8:44:
                    fb:45:e3:32:51:e6:37:6d:98:ba:c9:71:b2:4f:18:
                    6c:d9:aa:21:67:af:12:6a:bb:fc:b2:93:48:47:f3:
                    0a:32:c5:a0:cf:5e:de:4d:13:44:f6:4e:bd:11:32:
                    cc:80:97:f4:20:41:33:15:f3:2f:44:31:4e:92:5c:
                    f1:3e:a9:c8:23:f9:f0:53:cb:d5:5a:77:cb:a2:dc:
                    55:d2:b4:4b:c7:6b:f5:05:92:89:c3:23:48:e8:42:
                    16:b5:0e:7b:0c:42:12:66:21:df:12:a9:3b:20:be:
                    84:5c:a6:6d:47:c9:62:4c:92:84:af:52:87:d9:2a:
                    e9:3f:99:a0:7e:2f:bc:87:e9:0a:18:d9:db:31:06:
                    4b:e9:88:54:fa:b2:7d:22:3f:30:07:10:bd:57:df:
                    67:02:36:d0:05:43:81:67:f0:44:8a:17:3d:93:9e:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:1F:56:59:97:76:44:93:28:0D:27:D7:A6:1A:26:DF:AF:F4:24
            X509v3 Authority Key Identifier:
                keyid:B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:a2:4e:17:69:82:41:ee:80:b4:bd:9b:fb:cc:67:23:67:
         87:4f:82:61:1c:f0:38:d6:a2:78:66:fa:26:c7:21:74:94:e5:
         b8:b1:21:f5:ef:5b:59:7f:c7:dd:3a:f3:42:ce:92:fc:0e:d8:
         1c:b2:01:88:48:3d:8a:35:8b:16:cc:28:85:26:90:9b:08:cb:
         cd:6b:3c:55:57:b6:bc:a2:b3:4e:09:94:34:d7:54:60:49:53:
         5c:e5:cd:c0:43:d4:28:f5:72:16:b3:cb:75:69:4d:df:d7:30:
         20:02:eb:6d:70:13:5a:7d:e2:30:91:81:9d:c5:b7:08:62:cc:
         2f:e8:db:02:4a:4a:e9:51:2a:6d:61:51:21:85:45:27:b5:0b:
         8b:6f:09:51:cd:dd:58:71:6a:59:09:10:09:c3:48:07:b0:a6:
         57:80:05:e8:28:2a:58:33:3d:81:92:39:ff:9c:d6:43:77:13:
         e4:95:b4:6c:99:12:3a:f9:74:06:93:bb:30:4f:c5:41:94:6c:
         7d:df:7c:a0:d6:08:7f:6e:21:b6:3f:c4:d3:64:00:6d:b1:50:
         7b:09:23:de:c2:8e:59:9c:e0:b4:17:ca:be:5a:00:14:41:5f:
         9a:1b:12:17:93:e9:d9:30:f3:a2:2c:ca:c4:eb:bb:76:a5:b4:
         a0:ac:3a:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFVpsbFNM+3tfGX/gQyOWyHnWL/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGMEM5REQ3M0Y2QzE0NzVGMTQ1NjEwM0RBNkJCNjIy
NDY0NjY5RjAeFw0yNjAxMDgwNTU0MjFaFw0yNzAxMDcwNTU5MjFaMDMxMTAvBgNV
BAMTKDhGQTQxRjU2NTk5Nzc2NDQ5MzI4MEQyN0Q3QTYxQTI2REZBRkY0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B3JdeSUXsZdKZidQOUtDEfit
1sX/Am16SruuMSHK0OuobB9v7WeYb0ilVYn9D6vmRFuHcwyEL+Uv6WZyXqp337ZH
cHLxwUFyC2zufGjKroAOoRb4Rn7IRPtF4zJR5jdtmLrJcbJPGGzZqiFnrxJqu/yy
k0hH8woyxaDPXt5NE0T2Tr0RMsyAl/QgQTMV8y9EMU6SXPE+qcgj+fBTy9Vad8ui
3FXStEvHa/UFkonDI0joQha1DnsMQhJmId8SqTsgvoRcpm1HyWJMkoSvUofZKuk/
maB+L7yH6QoY2dsxBkvpiFT6sn0iPzAHEL1X32cCNtAFQ4Fn8ESKFz2TnkkvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUj6QfVlmXdkSTKA0n16YaJt+v9CQwHwYDVR0j
BBgwFoAUsPDJ3XP2wUdfFFYQPaa7YiRkZp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNDFERTVCNjMyMDIzOEEyN0M4QUU0NUE5Njc2MjFDOEUz
N0JFNzBGNzM5NzkyNEJDRjUyNEQwNEM0QkE3MzkwLzAvQjBGMEM5REQ3M0Y2QzE0
NzVGMTQ1NjEwM0RBNkJCNjIyNDY0NjY5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMEYwQzlERDczRjZDMTQ3NUYx
NDU2MTAzREE2QkI2MjI0NjQ2NjlGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjQxREU1QjYzMjAyMzhBMjdDOEFFNDVBOTY3NjIxQzhFMzdCRTcwRjcz
OTc5MjRCQ0Y1MjREMDRDNEJBNzM5MC8wLzM0MzUyZTMxMzgzNjJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5MzgzMTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbps
MA0GCSqGSIb3DQEBCwUAA4IBAQB6f6JOF2mCQe6AtL2b+8xnI2eHT4JhHPA41qJ4
ZvomxyF0lOW4sSH171tZf8fdOvNCzpL8DtgcsgGISD2KNYsWzCiFJpCbCMvNazxV
V7a8orNOCZQ011RgSVNc5c3AQ9Qo9XIWs8t1aU3f1zAgAuttcBNafeIwkYGdxbcI
Yswv6NsCSkrpUSptYVEhhUUntQuLbwlRzd1YcWpZCRAJw0gHsKZXgAXoKCpYMz2B
kjn/nNZDdxPklbRsmRI6+XQGk7swT8VBlGx933yg1gh/biG2P8TTZABtsVB7CSPe
wo5ZnOC0F8q+WgAUQV+aGxIXk+nZMPOiLMrE67t2pbSgrDre
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:34 2026 by rpki-client