This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/34352e3136342e31362e302f32322d3234203d3e20323637363935.roa
File:                     34352e3136342e31362e302f32322d3234203d3e20323637363935.roa (raw, json)
Hash identifier:          oz+2CK+n13iHwXi2FRGxW3J+B4aS4DR4hvKzBhJx8Po=
Subject key identifier:   DE:C7:C6:EC:67:53:64:4B:B8:A9:22:21:40:90:38:5D:0E:FC:DA:24
Certificate issuer:       /CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C
Certificate serial:       58B7315FF74CD3B5C5D8374687EBC0388AF1924D
Authority key identifier: 64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/34352e3136342e31362e302f32322d3234203d3e20323637363935.roa
Signing time:             Tue 06 Jan 2026 18:59:43 +0000
ROA not before:           Tue 06 Jan 2026 18:54:43 +0000
ROA not after:            Tue 05 Jan 2027 18:59:43 +0000
asID:                     267695
IP address blocks:        45.164.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b7:31:5f:f7:4c:d3:b5:c5:d8:37:46:87:eb:c0:38:8a:f1:92:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C
        Validity
            Not Before: Jan  6 18:54:43 2026 GMT
            Not After : Jan  5 18:59:43 2027 GMT
        Subject: CN=DEC7C6EC6753644BB8A922214090385D0EFCDA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:61:50:67:e9:69:ee:ad:f6:8e:c5:b2:3f:
                    c4:41:b8:47:ed:b7:03:eb:d1:38:e6:58:c6:03:dc:
                    f7:03:15:90:e4:23:3c:da:44:d8:6e:af:ff:8e:61:
                    f8:89:03:aa:a3:89:93:f5:13:2f:b0:89:3b:41:78:
                    7f:14:4d:8c:91:ad:61:12:19:0c:39:a2:15:b0:b6:
                    e6:ff:71:98:86:be:60:7b:ce:63:c9:38:54:09:c8:
                    64:79:14:f5:d6:44:61:31:ca:90:84:a6:8f:30:2e:
                    ba:c8:26:b7:95:c5:da:d7:7b:b3:fd:a5:6e:2f:1a:
                    bd:72:bc:9f:2f:99:38:d1:eb:23:89:33:ca:50:fa:
                    9a:78:8f:0a:13:b0:ba:90:1a:b9:e7:50:55:9a:b9:
                    12:0b:f4:21:58:65:5c:db:6e:be:49:ca:a8:7d:f6:
                    a2:fa:64:31:52:03:b5:54:38:c5:e3:20:78:fe:5f:
                    2a:3a:c3:47:f7:5e:2f:23:a7:3a:83:ac:a4:2c:63:
                    e5:37:ea:91:10:d1:7e:3d:f9:6c:59:1d:37:2a:b4:
                    15:78:6f:54:25:32:ed:d5:90:61:35:7a:41:26:26:
                    d4:5b:dc:21:ec:19:47:10:9e:2b:14:73:dd:eb:96:
                    87:06:d9:54:23:f9:51:6f:63:e0:82:97:e0:ee:08:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:C6:EC:67:53:64:4B:B8:A9:22:21:40:90:38:5D:0E:FC:DA:24
            X509v3 Authority Key Identifier:
                keyid:64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/34352e3136342e31362e302f32322d3234203d3e20323637363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:ff:80:7f:b6:ea:9e:7b:9b:b4:a1:95:13:3a:4b:83:01:
         cb:ab:05:bb:cc:08:10:42:1a:86:86:05:22:86:6a:e3:64:46:
         1a:be:aa:36:66:a6:84:42:ba:b1:94:39:d4:0e:50:59:35:3e:
         16:9b:51:2b:3c:86:c0:30:29:61:ef:63:19:c2:54:23:3c:9a:
         38:9a:d3:66:8e:a5:f5:5f:40:0b:51:62:0c:27:7d:55:77:45:
         5e:2a:bc:77:2b:00:be:d5:3d:b1:54:71:fa:5d:4b:de:1b:0c:
         8e:b1:b4:2e:eb:ee:f3:49:b7:ac:20:89:3d:e1:f0:5b:ef:1f:
         55:ea:d9:d2:bf:47:77:59:79:0f:38:45:e6:92:01:72:8a:ef:
         fd:e4:28:ec:81:46:06:e6:d9:4b:45:bc:d9:69:70:8e:29:4d:
         14:a6:cb:e6:d4:99:bf:9c:66:67:1f:05:a5:b3:dd:a6:d9:72:
         c9:34:d3:cc:d7:a3:44:d5:14:cf:f9:bd:91:8c:2f:0c:f5:b0:
         6e:bd:b8:c8:78:56:d5:2a:e0:ac:74:bc:20:00:c5:f2:a0:7e:
         7d:a8:46:b1:b3:fb:5f:a0:b3:20:26:3e:5c:a0:d5:20:cb:d4:
         8b:52:ed:ed:6a:13:ac:ec:04:3a:a8:53:2f:ac:13:ef:63:2e:
         03:84:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:18:08 2026 by rpki-client