This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa
File:                     34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          Zw3Le8jTXzv42UAfpas+3OLYfLmU0KnhOjOTMTqGRBA=
Subject key identifier:   1A:8F:D4:9E:2E:16:DE:1B:F5:FE:FB:70:AA:01:00:52:C4:B0:25:FB
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       58C25EBADAF3B1993A681CFD8D00A0F36D2DE26F
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa
Signing time:             Tue 06 Jan 2026 19:07:26 +0000
ROA not before:           Tue 06 Jan 2026 19:02:26 +0000
ROA not after:            Tue 05 Jan 2027 19:07:26 +0000
asID:                     267730
IP address blocks:        45.166.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 19:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c2:5e:ba:da:f3:b1:99:3a:68:1c:fd:8d:00:a0:f3:6d:2d:e2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Jan  6 19:02:26 2026 GMT
            Not After : Jan  5 19:07:26 2027 GMT
        Subject: CN=1A8FD49E2E16DE1BF5FEFB70AA010052C4B025FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:61:43:2a:eb:e4:a8:6d:fe:4a:6d:91:56:
                    d6:43:84:cc:61:0c:75:cc:ae:5e:41:6d:66:68:d6:
                    c0:d2:c4:de:69:9a:23:9b:a6:af:bf:75:ab:55:73:
                    92:02:bf:96:12:3d:31:6e:9f:be:15:4a:6d:91:a2:
                    5a:50:9e:11:99:6f:9c:1d:a1:12:df:8c:c5:7d:48:
                    06:d5:dc:0a:08:8a:4c:fd:a5:5e:c9:7c:55:ff:12:
                    44:69:e0:6b:b0:41:9a:7d:f2:c1:d8:19:bd:54:8a:
                    61:48:f8:63:ac:4c:20:2f:74:c9:68:dc:a3:2b:93:
                    05:cf:25:5f:8a:97:f8:f5:c2:77:f4:55:4c:80:7a:
                    80:d0:4a:5d:ce:c6:d1:2b:37:89:c5:9c:2f:25:d3:
                    a1:82:85:62:68:e1:17:0d:1b:14:77:9c:83:f7:8a:
                    81:81:3a:e8:1f:c6:2e:25:2f:a1:dd:b1:6b:9c:15:
                    f7:5d:d5:d3:15:53:0f:fd:95:8f:35:76:96:82:85:
                    00:62:f9:e3:29:33:df:fd:53:8e:de:83:30:ad:2c:
                    d2:a7:f3:74:12:62:fc:d6:13:bd:01:9e:aa:b3:48:
                    b1:90:26:b2:f7:c2:28:02:23:18:75:3d:37:af:f8:
                    56:ff:5d:de:4d:01:d4:3c:30:5c:2b:31:83:80:49:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:D4:9E:2E:16:DE:1B:F5:FE:FB:70:AA:01:00:52:C4:B0:25:FB
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:55:df:51:c2:d6:26:ec:d3:94:9c:7e:20:aa:97:41:b4:
         5d:9f:58:f7:45:de:89:a1:bb:30:44:9c:fc:22:d4:4d:12:c8:
         4f:73:54:90:1a:06:44:1c:01:5c:b6:2c:d2:f3:1f:75:2a:9c:
         03:ec:a1:af:27:85:af:5b:54:67:d6:c7:b8:29:87:f8:25:14:
         d9:e7:09:a3:5b:8e:92:c7:19:32:82:e1:94:40:5e:75:7a:14:
         d5:4b:41:11:6c:26:4f:84:53:b2:97:74:54:47:8f:25:0f:ac:
         1b:8e:6e:6a:34:bf:da:6a:04:27:4c:52:78:78:4c:a1:54:ab:
         44:8b:84:6c:5a:29:97:4a:fd:83:ea:ac:54:c0:28:57:b3:6c:
         3b:06:06:e3:e3:9d:d9:21:52:35:23:15:c9:3b:82:6d:51:b0:
         c9:0a:b0:95:e7:79:8f:3c:f9:f8:fc:77:89:35:04:b1:c2:30:
         22:5a:ef:b4:58:2f:d1:51:32:b6:c7:f0:bf:87:f3:7b:a1:73:
         cb:b3:49:01:96:7e:9a:8c:af:30:b1:75:b9:53:e7:be:b7:ee:
         17:d9:27:ab:55:1f:c3:f4:c8:9b:9d:9c:6e:0c:63:29:6f:a4:
         e8:e2:ed:cd:0b:ab:aa:cf:87:a9:39:06:e9:4f:df:85:e7:43:
         72:bd:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 05:59:31 2026 by rpki-client