This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
File:                     34352e37312e3235342e302f32332d3234203d3e20323732303735.roa (raw, json)
Hash identifier:          NoPn8oxHRC13pvhUV2RRKTYgmrF3I0FnTJ+mD4EWFM0=
Subject key identifier:   70:65:B5:3B:84:75:0B:F4:D9:E0:13:58:71:F1:F5:32:BB:54:B7:13
Certificate issuer:       /CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Certificate serial:       4277E23050130FE1A34E83FBB6A2C04E58DA5EE7
Authority key identifier: 89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa
Signing time:             Tue 06 Jan 2026 19:13:24 +0000
ROA not before:           Tue 06 Jan 2026 19:08:24 +0000
ROA not after:            Tue 05 Jan 2027 19:13:24 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 15:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:77:e2:30:50:13:0f:e1:a3:4e:83:fb:b6:a2:c0:4e:58:da:5e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896E033E875BDBE6F2217610A8C83D959EB2168F
        Validity
            Not Before: Jan  6 19:08:24 2026 GMT
            Not After : Jan  5 19:13:24 2027 GMT
        Subject: CN=7065B53B84750BF4D9E0135871F1F532BB54B713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:42:2c:75:63:94:43:f0:0c:11:a0:a0:f9:
                    b7:fd:24:2c:59:0c:b4:41:42:02:f6:67:5b:29:c8:
                    d0:23:a4:2b:e2:77:a2:8a:a9:e7:08:70:68:2d:09:
                    be:80:c9:1e:b3:b4:55:c2:69:3d:38:2e:c7:9d:7a:
                    a6:f8:4e:49:26:2d:1c:47:67:bc:6c:49:f2:34:5e:
                    95:2a:43:34:f4:9f:4d:21:11:c9:a9:6e:5f:b2:20:
                    56:4c:33:c7:10:70:d6:a8:f5:ea:52:f0:39:0b:12:
                    1e:55:15:99:75:ff:70:3a:77:c5:d3:b8:33:b3:3e:
                    03:0e:63:ed:9a:27:7a:4e:e1:81:a2:ff:51:10:44:
                    c0:cc:40:60:12:86:30:32:d1:93:6f:56:73:48:8a:
                    11:6c:c3:13:62:24:cd:b4:cb:75:68:9a:32:5a:cd:
                    88:6c:4f:7f:18:80:96:bc:c3:5e:52:a9:fa:36:e8:
                    6e:b7:c4:5a:7b:93:a3:42:7a:93:4c:12:53:1f:e3:
                    e7:23:9e:be:34:42:7c:e5:de:53:48:67:c9:69:4d:
                    fb:ea:a9:49:42:bb:f5:14:00:12:fd:d0:3e:c0:79:
                    6d:f7:fd:62:dd:4b:df:8c:53:d2:ad:2f:53:d6:e1:
                    e4:f8:44:13:53:23:d7:ad:50:62:26:6f:81:94:62:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:B5:3B:84:75:0B:F4:D9:E0:13:58:71:F1:F5:32:BB:54:B7:13
            X509v3 Authority Key Identifier:
                keyid:89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235342e302f32332d3234203d3e20323732303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:39:7c:0a:cd:04:7b:f3:5d:50:a1:7e:4d:7f:55:20:77:
         f9:d3:b6:39:80:47:b7:ff:3b:ab:76:a5:28:43:a8:17:9b:5a:
         42:3c:ec:0d:81:22:15:03:8b:e9:d4:ae:86:a1:63:ec:03:c1:
         6f:77:dd:0c:35:a6:62:4d:c8:17:44:65:4b:a5:8d:b3:a5:7a:
         5f:59:53:aa:f1:3c:8e:0a:37:c7:18:d6:9c:ca:f9:8f:f9:36:
         9a:cd:0f:fc:10:5c:98:3d:69:b1:38:a9:83:8b:3e:eb:d2:8e:
         a8:93:33:8d:39:8a:3f:77:54:9d:87:c6:44:06:45:ca:44:a4:
         6d:af:90:1c:b1:04:aa:1f:18:55:6b:01:1d:ed:f8:b4:5d:9b:
         4b:b0:d8:9d:06:92:2a:9a:3f:d7:94:44:be:1e:87:28:49:63:
         54:0a:fc:1b:5b:b8:a1:df:9a:72:51:63:a4:27:8c:3a:5f:af:
         f9:99:d2:7c:c8:e5:2f:7b:67:a1:1a:60:d2:27:63:a4:09:1e:
         b0:db:fe:8f:41:a5:d7:da:67:f1:88:e8:57:b0:c8:e8:00:74:
         c2:96:b7:b1:43:eb:b3:f2:51:b3:fc:7e:40:1b:e9:58:b5:30:
         bd:57:2c:86:93:e7:98:9e:20:8a:fa:0a:b6:c4:19:47:f2:38:
         a2:5f:88:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQnfiMFATD+GjToP7tqLATljaXucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk2RTAzM0U4NzVCREJFNkYyMjE3NjEwQThDODNEOTU5
RUIyMTY4RjAeFw0yNjAxMDYxOTA4MjRaFw0yNzAxMDUxOTEzMjRaMDMxMTAvBgNV
BAMTKDcwNjVCNTNCODQ3NTBCRjREOUUwMTM1ODcxRjFGNTMyQkI1NEI3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERkIsdWOUQ/AMEaCg+bf9JCxZ
DLRBQgL2Z1spyNAjpCvid6KKqecIcGgtCb6AyR6ztFXCaT04Lsedeqb4TkkmLRxH
Z7xsSfI0XpUqQzT0n00hEcmpbl+yIFZMM8cQcNao9epS8DkLEh5VFZl1/3A6d8XT
uDOzPgMOY+2aJ3pO4YGi/1EQRMDMQGAShjAy0ZNvVnNIihFswxNiJM20y3VomjJa
zYhsT38YgJa8w15Sqfo26G63xFp7k6NCepNMElMf4+cjnr40Qnzl3lNIZ8lpTfvq
qUlCu/UUABL90D7AeW33/WLdS9+MU9KtL1PW4eT4RBNTI9etUGImb4GUYvVpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcGW1O4R1C/TZ4BNYcfH1MrtUtxMwHwYDVR0j
BBgwFoAUiW4DPodb2+byIXYQqMg9lZ6yFo8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQzgzMUYxMzhGM0MxMUFBRjIzQ0FDMENGQzVCQkE4MzJB
QkNDMzI3NEVCNDRDMDQzRDFBMjY0MEI1MTNERUM2LzAvODk2RTAzM0U4NzVCREJF
NkYyMjE3NjEwQThDODNEOTU5RUIyMTY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTZFMDMzRTg3NUJEQkU2RjIy
MTc2MTBBOEM4M0Q5NTlFQjIxNjhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkM4MzFGMTM4RjNDMTFBQUYyM0NBQzBDRkM1QkJBODMyQUJDQzMyNzRF
QjQ0QzA0M0QxQTI2NDBCNTEzREVDNi8wLzM0MzUyZTM3MzEyZTMyMzUzNDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzczMjMwMzczNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1H/jAN
BgkqhkiG9w0BAQsFAAOCAQEAXJw5fArNBHvzXVChfk1/VSB3+dO2OYBHt/87q3al
KEOoF5taQjzsDYEiFQOL6dSuhqFj7APBb3fdDDWmYk3IF0RlS6WNs6V6X1lTqvE8
jgo3xxjWnMr5j/k2ms0P/BBcmD1psTipg4s+69KOqJMzjTmKP3dUnYfGRAZFykSk
ba+QHLEEqh8YVWsBHe34tF2bS7DYnQaSKpo/15REvh6HKEljVAr8G1u4od+aclFj
pCeMOl+v+ZnSfMjlL3tnoRpg0idjpAkesNv+j0Gl19pn8YjoV7DI6AB0wpa3sUPr
s/JRs/x+QBvpWLUwvVcshpPnmJ4givoKtsQZR/I4ol+I4Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:25:48 2026 by rpki-client