This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
File:                     34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          j8zXYOsJCnV4NQOT7f0oXhwvZhAKcRrMHAp6SmLtmQc=
Subject key identifier:   04:73:07:23:71:98:4F:F8:97:70:A1:07:43:DD:57:54:AB:37:43:5F
Certificate issuer:       /CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
Certificate serial:       25109731B3464E1DCA062DCF18FC06BC1B889762
Authority key identifier: AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 06 Jan 2026 19:03:45 +0000
ROA not before:           Tue 06 Jan 2026 18:58:45 +0000
ROA not after:            Tue 05 Jan 2027 19:03:45 +0000
asID:                     265703
IP address blocks:        45.165.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:10:97:31:b3:46:4e:1d:ca:06:2d:cf:18:fc:06:bc:1b:88:97:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
        Validity
            Not Before: Jan  6 18:58:45 2026 GMT
            Not After : Jan  5 19:03:45 2027 GMT
        Subject: CN=0473072371984FF89770A10743DD5754AB37435F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:67:77:70:72:98:5a:22:7b:01:f3:83:c2:
                    b4:d9:b2:94:84:7d:12:57:12:71:c5:d6:79:c6:c7:
                    26:05:57:0c:cf:2e:5f:8a:f9:9e:35:7b:1c:10:06:
                    13:e2:27:eb:eb:b1:66:61:11:b6:e7:e8:e9:3c:3e:
                    65:1c:48:86:f6:66:8c:9b:92:cc:25:4a:f7:7f:82:
                    90:55:b7:1d:bd:da:a1:41:b0:83:07:e7:2c:0d:ea:
                    b1:25:ee:74:b5:4b:f8:09:6c:87:d3:ce:72:98:38:
                    b1:06:0b:dc:25:4b:bb:6b:07:4a:9a:31:7f:1b:a7:
                    0e:09:2c:4d:eb:d4:4f:af:84:a2:1f:14:07:10:41:
                    fd:f3:bb:e6:22:f2:b2:3e:99:72:12:fc:15:8b:c3:
                    97:84:92:71:98:40:e7:fe:b8:37:d4:3e:8d:c1:20:
                    fd:65:cd:96:c1:ae:5a:72:de:6e:6f:bb:da:df:19:
                    78:2b:bb:9e:ea:c2:3d:a3:95:55:bd:ce:dd:5d:bf:
                    52:1c:6b:41:b7:37:a1:e2:99:aa:58:09:a9:21:1a:
                    21:3d:61:87:69:90:1f:df:29:e4:a1:b3:79:2e:da:
                    1a:db:91:51:af:34:d1:52:86:e8:6c:9d:41:14:df:
                    9b:a2:59:11:56:17:e9:65:f5:b3:3a:0c:9d:bc:5b:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:73:07:23:71:98:4F:F8:97:70:A1:07:43:DD:57:54:AB:37:43:5F
            X509v3 Authority Key Identifier:
                keyid:AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:f5:15:0b:e6:53:15:0c:d9:24:41:53:be:af:1b:5d:2f:4c:
         40:f9:cd:65:61:5a:ac:44:a7:5e:40:de:6d:51:df:8c:25:98:
         8f:dd:5a:04:cd:1b:c3:07:19:88:a1:04:28:bd:59:25:0d:56:
         00:1a:d6:28:ef:cc:2e:cb:68:27:0d:d1:c1:4f:df:3f:c7:bc:
         22:83:65:cc:86:32:d5:a3:0e:1e:c7:5d:5c:62:ec:a4:67:33:
         07:80:0b:ab:f6:46:1f:54:b2:8c:f2:16:e4:8f:37:02:1d:56:
         28:dd:bf:bb:53:20:f3:6f:25:21:95:50:ef:39:4e:84:f6:94:
         4a:42:c2:0c:b3:26:40:c1:de:c0:92:17:28:e3:7a:1d:94:b0:
         8d:21:a1:53:fb:fb:16:b5:00:14:e5:16:f9:f7:4c:9c:0b:92:
         6a:9e:32:e5:a9:29:7d:e3:66:0b:ee:c6:52:bc:65:80:22:cd:
         4b:67:f2:c5:a4:04:13:93:2d:9e:2e:0e:bf:7d:cb:a1:3f:43:
         84:f4:12:2b:38:40:fd:00:61:4c:7b:f1:e2:fa:34:c0:48:a2:
         3b:c9:0b:58:86:a1:7b:3d:1c:84:7d:81:ca:39:f7:91:c1:a3:
         16:19:19:11:1f:fc:fd:75:6b:ad:bf:64:fe:e3:c9:67:d8:5d:
         dc:64:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:41:41 2026 by rpki-client