This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa
File:                     34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa (raw, json)
Hash identifier:          guDlDIMQqjCKos/fTXAYkZtTwcKMQA+P9Sj6unaOjZk=
Subject key identifier:   9F:1E:61:A8:1C:44:87:C8:E6:7A:65:61:0D:1C:23:5E:CD:7C:16:D3
Certificate issuer:       /CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1
Certificate serial:       024833834850549515746BEBE49B043830D91B42
Authority key identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa
Signing time:             Tue 06 Jan 2026 20:48:51 +0000
ROA not before:           Tue 06 Jan 2026 20:43:51 +0000
ROA not after:            Tue 05 Jan 2027 20:48:51 +0000
asID:                     267738
IP address blocks:        45.167.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:48:33:83:48:50:54:95:15:74:6b:eb:e4:9b:04:38:30:d9:1b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1
        Validity
            Not Before: Jan  6 20:43:51 2026 GMT
            Not After : Jan  5 20:48:51 2027 GMT
        Subject: CN=9F1E61A81C4487C8E67A65610D1C235ECD7C16D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:b8:02:78:7e:39:aa:39:a6:ea:eb:b4:ab:
                    4c:01:99:cd:3d:58:31:51:f5:97:7d:d5:e1:99:8d:
                    36:23:10:d6:41:f5:06:f5:65:e2:65:d0:36:dc:c0:
                    6f:a4:6c:31:93:b4:71:f5:c4:0a:9f:47:2e:79:6d:
                    57:9f:ca:5a:89:c0:98:ee:37:cc:25:f3:c8:23:a0:
                    96:ec:49:35:80:22:c1:3d:e8:b4:c4:d6:ba:fc:fe:
                    90:d4:8b:31:12:5b:37:b2:b2:bc:19:c1:6e:d6:28:
                    24:da:45:e3:4a:a6:a2:66:9d:00:54:0e:93:10:6e:
                    a9:7c:30:3b:d2:b2:d8:0d:85:d3:85:09:0b:b1:56:
                    79:e8:c2:c6:83:82:3d:a2:65:04:f7:68:57:01:c4:
                    8d:b6:47:29:e3:7f:54:dd:76:5d:67:3e:9d:80:24:
                    14:47:3e:08:01:69:9d:01:25:72:19:52:a8:a5:70:
                    76:17:5a:69:9a:ca:a0:17:02:c4:4b:50:03:8b:87:
                    3d:6b:74:57:77:ff:cd:17:d1:1b:9d:ac:a9:e9:e3:
                    a5:aa:59:c3:1c:82:c6:65:58:55:4c:6d:be:7a:e4:
                    6a:47:cf:33:26:2f:88:c2:f8:0c:f7:8b:83:0b:a1:
                    b9:2c:46:03:7a:26:eb:44:b5:a9:58:b9:4e:04:f7:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1E:61:A8:1C:44:87:C8:E6:7A:65:61:0D:1C:23:5E:CD:7C:16:D3
            X509v3 Authority Key Identifier:
                keyid:87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3232203d3e20323637373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:86:6e:9d:1f:6c:b2:06:fe:26:cc:03:b0:59:8f:56:7d:e6:
         41:c5:90:f7:6b:e0:4b:10:27:64:5e:9e:b0:11:d0:64:74:4c:
         61:f8:11:c3:2f:3b:80:18:58:25:8c:1f:23:18:89:dd:33:7e:
         2b:7a:df:93:1f:c8:0e:c8:81:0a:73:f1:93:5a:54:77:10:f1:
         50:50:97:bc:a0:3d:fe:0f:b9:74:b0:40:66:29:f3:c1:f2:b7:
         7d:25:72:43:4b:f7:81:c7:d2:32:f6:5d:67:e7:0e:e9:85:f6:
         e0:87:71:15:d8:b2:3d:f3:2e:ef:f3:6c:81:8b:f1:e0:a9:94:
         c6:51:99:6f:3f:87:c9:d2:75:bd:f5:ce:9d:1c:b9:65:89:ae:
         29:b5:35:27:99:53:03:86:15:41:05:c9:bb:b2:82:0c:d1:e6:
         0e:ef:2f:e4:cc:4e:06:82:d5:11:40:ec:00:41:ba:3a:6c:48:
         59:63:1b:8c:dc:9d:51:e5:d8:e0:9d:dd:0e:5b:a3:ce:b9:ae:
         70:fe:f6:26:55:b6:7a:67:5c:ab:f8:81:61:4c:14:19:97:ed:
         7d:df:72:fb:8d:c4:3b:a0:35:f4:85:0e:be:3d:79:a7:51:4c:
         6b:11:dd:a6:d5:d6:dd:be:b0:7a:af:d7:f8:8d:88:e6:b6:16:
         56:da:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:56 2026 by rpki-client