This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa
File:                     34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa (raw, json)
Hash identifier:          04o/UPfEekuAMR7FGprwfaXLjjkck8+gCrJ4blKkM4s=
Subject key identifier:   1B:4C:3C:B9:A2:10:33:2B:89:20:0B:78:37:8E:77:B4:71:13:79:1A
Certificate issuer:       /CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
Certificate serial:       034439C46B18804167086229095E325FE3431342
Authority key identifier: A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa
Signing time:             Tue 06 Jan 2026 19:27:12 +0000
ROA not before:           Tue 06 Jan 2026 19:22:12 +0000
ROA not after:            Tue 05 Jan 2027 19:27:12 +0000
asID:                     267677
IP address blocks:        45.162.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:44:39:c4:6b:18:80:41:67:08:62:29:09:5e:32:5f:e3:43:13:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
        Validity
            Not Before: Jan  6 19:22:12 2026 GMT
            Not After : Jan  5 19:27:12 2027 GMT
        Subject: CN=1B4C3CB9A210332B89200B78378E77B47113791A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:d2:b1:60:db:f6:1f:33:5f:aa:a6:2b:a3:
                    6b:e1:91:29:2d:91:6c:19:ed:4a:d7:fb:74:24:8e:
                    47:9f:e3:36:65:42:de:b1:f4:0a:cf:87:06:aa:a6:
                    fb:f6:f4:9d:65:ac:17:77:0b:bb:52:90:6d:40:1e:
                    ec:a5:26:10:77:eb:f0:32:71:64:9a:21:a2:cb:62:
                    49:68:89:71:26:ba:39:99:df:4a:bb:37:c2:21:19:
                    85:52:bb:3a:93:01:fa:a0:d7:16:c1:50:6c:75:87:
                    32:73:e2:2b:6b:d3:68:6b:51:a6:01:07:09:91:d1:
                    d2:ec:df:51:e0:f2:37:a0:9d:7c:22:00:32:e1:2b:
                    ee:c2:b5:43:01:6f:7b:97:76:c4:a9:a9:5c:31:4e:
                    41:8e:63:d8:24:6c:f5:41:34:d0:38:e0:aa:e9:11:
                    0b:d3:2c:0e:d5:05:d8:c5:65:e8:56:03:7f:72:64:
                    76:23:91:c4:0f:ae:8b:71:72:88:b8:c1:1a:83:7c:
                    61:91:f4:f5:46:34:76:78:81:9e:a0:13:a5:95:78:
                    68:5f:5d:a8:06:0f:b2:a4:97:56:b0:9e:3e:e3:3c:
                    fa:5e:2f:91:53:11:e5:ef:6a:ba:75:1c:b1:3e:5f:
                    dd:22:5e:12:66:aa:1e:b1:ab:52:b3:c2:d2:a8:91:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:3C:B9:A2:10:33:2B:89:20:0B:78:37:8E:77:B4:71:13:79:1A
            X509v3 Authority Key Identifier:
                keyid:A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:65:59:6a:d5:42:e7:8b:70:22:9c:5f:f8:7f:b6:3c:96:8f:
         5d:09:7d:b2:5d:e5:cc:23:4c:50:a6:25:bc:1b:b4:43:87:fb:
         cf:c1:d9:30:05:88:57:18:e3:b2:d2:99:22:da:8c:ca:eb:28:
         51:f1:4c:18:6e:67:aa:34:09:d7:1e:af:a7:fb:4e:16:6f:7a:
         e5:14:3c:a1:d8:e0:86:1d:35:08:3b:e9:e4:72:23:9f:f0:c9:
         da:eb:8b:25:25:1f:8c:da:e9:03:84:01:01:61:98:1d:b0:76:
         09:e7:4e:2e:8c:83:ec:de:2e:e4:0f:0f:20:d4:64:72:92:c0:
         77:0a:9a:1f:e8:94:9e:aa:c6:de:57:20:e3:38:9c:1c:73:2f:
         a9:b5:2c:92:eb:2d:5c:02:f5:9f:57:b4:5e:e7:e6:d8:f2:c2:
         bf:99:07:68:b4:20:75:5c:f4:7c:04:09:ba:85:ac:10:d5:96:
         77:c9:46:da:a2:78:17:e8:89:64:32:8b:b0:24:93:77:a6:ac:
         2d:a1:fd:a9:9b:c4:72:75:e7:71:7d:04:a2:64:d9:96:71:bb:
         e9:9b:e7:26:68:61:84:38:35:9c:0a:45:f7:df:81:ba:61:99:
         a6:bd:cd:ad:0d:50:43:fb:62:a6:73:fd:c5:66:e5:bd:2a:53:
         74:93:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:24 2026 by rpki-client