This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa
File:                     34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa (raw, json)
Hash identifier:          uLfHYJKITziaHTO5blS3vw8ZKis9dAiKlRIumd3alNI=
Subject key identifier:   2D:60:D6:77:3D:63:1C:E4:AA:66:F4:B9:A2:92:7D:F0:F6:9B:EF:67
Certificate issuer:       /CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
Certificate serial:       1557D9568046D74ED1E70137B2CF6CE8E058C0F7
Authority key identifier: C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa
Signing time:             Tue 06 Jan 2026 19:05:24 +0000
ROA not before:           Tue 06 Jan 2026 19:00:24 +0000
ROA not after:            Tue 05 Jan 2027 19:05:24 +0000
asID:                     266892
IP address blocks:        45.161.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:57:d9:56:80:46:d7:4e:d1:e7:01:37:b2:cf:6c:e8:e0:58:c0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
        Validity
            Not Before: Jan  6 19:00:24 2026 GMT
            Not After : Jan  5 19:05:24 2027 GMT
        Subject: CN=2D60D6773D631CE4AA66F4B9A2927DF0F69BEF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:fd:7b:d2:1b:c6:0a:81:43:e5:c0:20:2a:
                    ef:79:a0:9f:67:a8:d8:69:0b:63:f8:88:07:e3:3e:
                    e4:23:ff:de:24:4f:73:90:a5:23:2a:54:98:a8:99:
                    19:a8:ae:e1:b4:66:7b:b4:d4:e3:96:b2:8b:08:64:
                    fd:8c:0d:b2:49:29:f8:c2:ae:28:77:47:65:f4:f8:
                    30:f0:91:5d:f3:6c:ca:38:38:95:ca:7f:d5:79:1c:
                    56:f4:5f:ce:72:e1:d4:d3:79:85:f5:0d:75:8c:29:
                    61:f4:f2:8b:4c:5f:a0:84:07:c9:e7:22:e7:dc:4b:
                    c4:35:ad:cf:5c:c0:71:81:51:69:8b:be:98:2f:57:
                    03:a4:91:14:bf:48:6d:0e:f9:b9:83:14:bb:89:7d:
                    85:7f:9f:e5:c9:70:0d:ab:24:38:6e:5b:ea:39:02:
                    b8:8c:d1:45:e0:4f:9d:9c:24:fb:3a:ce:9a:dd:1c:
                    78:97:29:51:4e:26:b9:c9:d5:cb:54:c4:32:b2:d0:
                    4e:85:e9:be:48:1a:41:28:f6:47:d9:0c:3e:4f:06:
                    3a:18:1e:52:74:ce:85:97:ec:43:0e:cc:59:95:20:
                    fe:c6:2a:37:be:9d:71:dc:99:b5:c2:db:42:a1:0e:
                    ea:86:70:32:ff:a4:6f:f6:8f:80:ce:ef:e5:f5:88:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:D6:77:3D:63:1C:E4:AA:66:F4:B9:A2:92:7D:F0:F6:9B:EF:67
            X509v3 Authority Key Identifier:
                keyid:C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:a0:62:f8:68:66:55:5d:0c:ff:0d:25:45:30:8e:82:2f:
         05:bf:59:b9:e1:18:57:9a:05:87:2e:c2:fe:6c:a5:89:3f:ce:
         9e:6b:25:9d:fa:45:35:7c:a6:62:7a:37:a0:8a:26:27:a7:0b:
         24:a6:b0:fd:e8:67:1d:9b:59:75:c2:7b:0a:4a:16:74:69:37:
         16:b7:0d:a8:b7:cd:6d:18:cf:23:3c:29:f9:dd:8e:39:c5:57:
         04:a2:56:3d:80:e5:18:c5:a2:b8:ec:10:f7:48:b7:19:5b:84:
         59:c5:81:61:92:08:14:36:9a:23:3c:51:f9:c0:93:1d:19:ff:
         0b:cc:d6:ad:58:89:a1:f9:ed:ed:b2:72:ef:cd:2c:64:c5:06:
         af:6d:4c:8a:f4:97:82:ad:4e:10:fe:d8:3c:f6:15:d0:ce:8c:
         7e:02:4d:a9:ec:d3:7f:83:fe:5b:85:03:dc:e4:01:2e:61:30:
         e2:0e:80:61:5f:b2:dc:9d:ec:e2:14:05:cf:20:9d:3d:30:15:
         99:67:47:51:61:ed:26:19:a3:a7:4d:bb:f2:18:cf:93:78:10:
         7a:cf:93:84:f8:f4:82:48:b9:f8:06:6c:17:cd:46:4e:bb:23:
         5c:c5:68:92:7e:67:22:ba:2c:e9:18:88:82:30:db:13:db:74:
         2c:b3:f4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:25:04 2026 by rpki-client