This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/34352e3136302e37322e302f32322d3234203d3e20323636383738.roa
File:                     34352e3136302e37322e302f32322d3234203d3e20323636383738.roa (raw, json)
Hash identifier:          UPxtDZnmKsb4dOt9+GnFMJkdu/XfLM8tVM76De77oQI=
Subject key identifier:   90:C8:43:3A:F1:3D:55:A3:A0:33:E6:1A:C4:7E:5C:F0:1A:B9:3F:54
Certificate issuer:       /CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
Certificate serial:       0FD60D248738DD50D471124AA836812BFE4F3885
Authority key identifier: 4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/34352e3136302e37322e302f32322d3234203d3e20323636383738.roa
Signing time:             Tue 06 Jan 2026 19:34:15 +0000
ROA not before:           Tue 06 Jan 2026 19:29:15 +0000
ROA not after:            Tue 05 Jan 2027 19:34:15 +0000
asID:                     266878
IP address blocks:        45.160.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d6:0d:24:87:38:dd:50:d4:71:12:4a:a8:36:81:2b:fe:4f:38:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1
        Validity
            Not Before: Jan  6 19:29:15 2026 GMT
            Not After : Jan  5 19:34:15 2027 GMT
        Subject: CN=90C8433AF13D55A3A033E61AC47E5CF01AB93F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:f7:b4:38:ca:a8:08:2e:3d:bb:24:d8:e6:
                    f0:96:17:ee:3d:4e:56:62:75:0b:d2:22:02:d7:09:
                    b9:8c:ac:87:3f:9a:6d:da:ec:a5:dc:fe:9b:d1:54:
                    8e:1b:be:60:ea:5e:ee:32:f6:41:b0:35:18:56:c9:
                    97:b6:7c:25:2c:fb:f3:60:92:f4:a2:db:4e:42:4f:
                    8d:34:5a:a9:e9:98:fd:05:d5:87:9e:a1:67:5d:e8:
                    e4:d2:f1:c6:93:e7:71:97:09:a0:5c:b5:8c:81:8a:
                    e7:3e:84:ac:4c:3c:a0:fc:18:8c:ff:6d:61:28:71:
                    2f:56:02:2f:bf:71:85:b0:a4:9a:29:86:5a:a2:df:
                    af:b8:19:06:02:ac:3b:8b:e9:66:29:cd:01:74:32:
                    a9:7e:95:8d:9f:00:9c:f1:14:d5:00:1e:2f:9b:0d:
                    b3:f0:c6:ed:f7:a7:96:0d:ff:20:3a:54:2f:43:8b:
                    8b:f0:cc:fe:07:3c:97:f7:7f:a5:ae:c4:bb:5a:52:
                    4a:3a:4a:12:f9:73:35:af:3b:da:5a:31:d7:80:6a:
                    4d:12:63:a3:ec:0a:3a:24:24:b1:e0:9b:5e:a3:93:
                    ad:67:96:d1:0b:bc:b4:1e:9c:39:cc:7f:99:0c:d1:
                    0e:9f:b2:16:7c:f7:ab:46:72:f8:3d:8d:84:08:4e:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C8:43:3A:F1:3D:55:A3:A0:33:E6:1A:C4:7E:5C:F0:1A:B9:3F:54
            X509v3 Authority Key Identifier:
                keyid:4D:54:F9:2C:0C:41:A4:77:E9:B5:12:2A:4B:E2:DF:E8:3E:ED:8A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D54F92C0C41A477E9B5122A4BE2DFE83EED8AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228A1144F80DF4A77C0E4FAC62CB4207C688A7FC94E852E8C58941408A68ADAE/0/34352e3136302e37322e302f32322d3234203d3e20323636383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:61:83:82:2f:00:ee:22:05:f9:11:43:04:58:da:ba:5a:
         8b:35:fa:c8:a8:c8:8f:a5:e6:65:a4:4b:56:f0:f2:5e:36:4a:
         5b:db:cf:bd:31:54:a6:09:3d:44:5e:ad:61:0c:ea:0f:de:8d:
         53:59:27:b8:55:cc:eb:02:bb:b2:40:f4:c7:33:fc:eb:d4:d1:
         1d:fd:6c:d9:ba:df:d8:89:0b:54:09:54:8d:da:04:ab:f1:22:
         e2:05:e9:b8:e7:d6:3b:4f:73:1c:92:e9:49:d2:3c:b1:52:73:
         c3:51:69:c1:70:fb:9f:a9:d0:21:f0:7a:be:fa:b8:bf:52:08:
         8c:35:aa:8f:58:e1:98:0e:84:cd:1f:7a:75:ed:2b:d7:fb:71:
         2f:5b:bb:ea:08:8d:88:f1:b8:b5:d6:e5:f3:39:25:5a:7c:56:
         d8:69:bd:0a:b6:a5:20:39:b7:fb:12:b2:86:8c:da:ad:7e:46:
         c3:6e:b9:0d:6c:32:f9:87:fe:49:a8:0b:3f:1d:d3:ba:31:f3:
         49:e2:61:2d:92:54:5f:0a:96:7d:27:0e:f6:9a:d8:25:79:05:
         de:b2:cb:68:37:bb:67:0e:5f:68:6d:3b:ef:dc:0b:98:53:12:
         0d:38:33:08:e1:14:ca:af:00:d6:b5:c5:e1:13:f9:75:5e:16:
         03:65:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:07 2026 by rpki-client