This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
File:                     34352e3233362e33322e302f32322d3232203d3e20323636373931.roa (raw, json)
Hash identifier:          Unfkm+6sSRP41zw0gF2Yw3da3T6/66fdqoiIioNcbfU=
Subject key identifier:   34:66:67:C6:8D:96:0A:2E:64:C9:32:8E:5E:E0:82:3F:1C:30:CA:14
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       56FFBD03BF6D6D5F8147B56101F2DC2297594B47
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
Signing time:             Tue 06 Jan 2026 19:25:34 +0000
ROA not before:           Tue 06 Jan 2026 19:20:34 +0000
ROA not after:            Tue 05 Jan 2027 19:25:34 +0000
asID:                     266791
IP address blocks:        45.236.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 12:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ff:bd:03:bf:6d:6d:5f:81:47:b5:61:01:f2:dc:22:97:59:4b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Jan  6 19:20:34 2026 GMT
            Not After : Jan  5 19:25:34 2027 GMT
        Subject: CN=346667C68D960A2E64C9328E5EE0823F1C30CA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:30:32:8c:04:6e:71:ac:bd:cf:07:cf:38:
                    29:94:0f:b3:a9:bb:4e:9d:00:ef:3f:13:f0:34:35:
                    c0:78:cf:b5:54:7a:3b:28:79:50:48:24:c8:c3:51:
                    39:3f:9f:09:6e:42:68:1b:11:a1:fc:b9:ea:26:19:
                    a4:f8:48:e4:14:6d:2c:db:c0:e3:ad:11:ea:a3:ce:
                    1e:c0:28:28:ab:74:d4:55:1e:66:a4:97:8c:39:e8:
                    6f:ca:d5:91:9d:01:94:1a:d3:a2:81:2c:9c:19:23:
                    4b:fc:29:19:c8:bc:26:1a:e0:80:ae:c6:cf:f7:4e:
                    58:3a:0f:04:11:e5:24:5e:42:db:d9:88:d1:68:69:
                    3d:5e:d9:e4:21:33:ab:0d:b2:9c:78:92:d1:8b:27:
                    93:67:b2:37:98:a8:61:9e:48:a4:42:c4:e9:7a:52:
                    07:ff:f2:c9:32:ce:05:64:aa:50:90:ed:28:eb:25:
                    66:d0:d0:52:bc:fd:c8:ff:e3:0e:66:a3:9e:5f:04:
                    e5:83:08:c5:92:c4:cc:1b:f7:e6:58:69:4f:5c:15:
                    85:5d:c1:b8:79:c8:29:54:d2:a6:d9:c2:c5:3e:90:
                    52:bf:20:1d:d6:86:49:3c:c3:45:de:a2:b9:ab:a0:
                    89:da:ea:8e:b5:9e:48:bf:f7:69:fc:b2:0a:f7:27:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:67:C6:8D:96:0A:2E:64:C9:32:8E:5E:E0:82:3F:1C:30:CA:14
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:78:6d:cd:65:51:46:83:a4:1a:90:8e:85:83:56:f2:0f:87:
         31:76:a2:97:e6:60:ed:ab:26:83:a5:1e:d3:5f:5f:49:57:d2:
         22:18:1b:43:47:f8:19:e0:e7:f6:1f:18:b2:b1:2b:7e:e3:22:
         54:15:fb:39:2b:ad:08:d7:79:db:c7:6a:87:50:c6:4f:d7:28:
         53:bd:6c:67:a4:bc:cd:30:48:8e:95:7b:80:f6:03:f0:53:cb:
         10:d4:cb:7a:93:0f:01:71:34:8f:6c:3e:1f:4b:27:c7:61:70:
         c9:db:29:8b:d9:28:0a:87:56:68:c6:3b:d8:cc:a8:13:37:b6:
         fa:94:40:14:26:5e:b7:d3:0c:e0:7a:10:c5:a2:b4:7d:33:fd:
         e0:d1:b5:2e:71:61:5b:d2:2c:6d:e1:79:23:27:ee:df:76:82:
         7f:69:94:14:6f:a9:38:0d:bf:d9:45:e9:79:d6:8e:65:09:69:
         8a:13:81:2d:b9:c8:6b:c2:1f:55:b6:0a:15:08:ed:0f:a6:81:
         92:28:7a:41:9d:19:dd:6b:d8:f1:12:99:aa:62:29:cb:dc:7f:
         8b:ee:64:f8:7d:93:5b:d5:ee:dd:4f:94:e4:90:cc:ee:1c:29:
         d5:fd:2a:11:bb:b9:12:8a:b2:51:96:ed:5d:89:38:71:e0:e1:
         1f:8c:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:45 2026 by rpki-client