This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa
File:                     34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa (raw, json)
Hash identifier:          AvIlMGnnwcv4BX/mfN+sv5G0FRbYaEQTVABOPymPG20=
Subject key identifier:   F7:4C:15:EC:B7:4E:4D:06:A9:23:C1:5F:00:5A:1D:D6:BC:61:2B:18
Certificate issuer:       /CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Certificate serial:       60EA4B800BCE20D55CB026B01B6DB052A3CD2900
Authority key identifier: 99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa
Signing time:             Tue 06 Jan 2026 19:25:18 +0000
ROA not before:           Tue 06 Jan 2026 19:20:18 +0000
ROA not after:            Tue 05 Jan 2027 19:25:18 +0000
asID:                     266842
IP address blocks:        45.238.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ea:4b:80:0b:ce:20:d5:5c:b0:26:b0:1b:6d:b0:52:a3:cd:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
        Validity
            Not Before: Jan  6 19:20:18 2026 GMT
            Not After : Jan  5 19:25:18 2027 GMT
        Subject: CN=F74C15ECB74E4D06A923C15F005A1DD6BC612B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:b5:c9:32:92:82:df:9a:63:26:74:f3:e6:
                    0a:f8:31:ff:e2:11:bf:14:c4:87:05:66:e0:72:d2:
                    44:df:1f:d8:7c:e3:a2:4e:a6:a0:a9:e2:3e:7c:b5:
                    58:9f:76:e1:73:30:5b:cd:68:85:cb:44:e7:2f:5e:
                    0b:fe:1d:45:8b:57:85:68:9e:07:5e:19:a9:1b:dc:
                    66:09:02:78:d3:8c:f5:be:94:1d:47:e8:67:60:df:
                    5d:0a:2e:e6:09:6c:3e:55:74:a2:31:01:bd:50:9f:
                    11:13:a4:36:b0:6d:25:89:37:2c:de:01:49:69:0c:
                    1c:6d:ea:c5:0f:2d:6a:30:35:7d:2e:6b:e3:ed:fe:
                    19:e7:db:06:ac:a8:67:27:26:13:7a:26:df:47:3f:
                    1d:2f:31:c1:8a:b1:dc:e8:7a:86:a7:1b:9f:6b:a9:
                    4e:ea:de:4c:fa:09:af:e6:9d:19:d7:ed:9a:79:80:
                    12:64:5e:28:15:45:04:13:09:a1:73:53:3e:04:f5:
                    87:1c:86:8b:97:cc:6d:61:8f:e7:88:5c:d2:a8:e6:
                    0a:12:f7:e0:fe:df:e5:ec:ca:fa:44:59:4e:ba:7d:
                    bf:04:cd:2f:ff:94:9f:59:4e:0e:2d:2f:a2:27:01:
                    26:ba:e7:42:f4:fe:be:49:f6:e6:ef:5b:22:36:06:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:15:EC:B7:4E:4D:06:A9:23:C1:5F:00:5A:1D:D6:BC:61:2B:18
            X509v3 Authority Key Identifier:
                keyid:99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135382e302f32342d3234203d3e20323636383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:aa:84:d5:4f:10:d7:9a:2f:b4:8f:d4:d2:a8:e0:cf:7c:
         db:c1:fb:78:f9:5f:c1:93:15:7c:66:30:6a:40:06:a1:e1:38:
         83:95:77:e3:26:fe:ec:48:a1:91:33:1d:d9:2c:f5:8e:d1:e1:
         0f:e3:89:24:4c:b3:b5:8e:fd:0f:de:d1:1b:45:9a:1a:67:38:
         fa:be:53:b1:38:21:7d:1e:de:bc:7a:77:31:a5:c0:f7:7a:18:
         82:54:0a:c5:09:3c:f9:0d:1f:25:7a:9e:83:27:cf:26:0d:f0:
         43:56:9c:f9:98:e5:67:9d:d6:97:49:e7:17:83:55:3e:c5:5e:
         6d:83:3e:6d:75:63:06:d0:c5:a4:fb:5c:42:91:14:3c:20:b8:
         40:15:98:1f:e4:e0:b4:d8:00:1f:4f:a3:36:06:71:d5:a9:02:
         18:0e:90:1d:5b:dd:98:d6:c4:6f:71:86:33:82:ef:8a:3a:95:
         bc:20:84:c5:13:f9:8e:5f:4a:5f:d7:df:b0:29:53:01:59:52:
         9f:0a:1d:40:7a:b8:6a:41:2d:84:8f:09:af:be:a9:58:8f:05:
         cf:ad:6a:57:3d:49:68:13:05:c7:27:37:d3:b6:46:6e:34:e4:
         cd:90:7b:18:1b:60:77:9c:5b:ca:70:a5:3d:5d:7f:f2:ce:ad:
         fa:e0:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:53:53 2026 by rpki-client