This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/34352e3136392e39382e302f32332d3234203d3e20323637373930.roa
File:                     34352e3136392e39382e302f32332d3234203d3e20323637373930.roa (raw, json)
Hash identifier:          xS6keG7dX/hO2R8KTWZKBirEN5lqjF8PRBKz7syx+SQ=
Subject key identifier:   48:60:F1:C3:49:67:AE:24:D3:22:09:A3:72:3D:95:5E:E3:EB:C1:D7
Certificate issuer:       /CN=DE8F7D598DEA40606B39C7B21C22841226056748
Certificate serial:       4A3009004EB31AFA23D4B7EF1C09588026C9E838
Authority key identifier: DE:8F:7D:59:8D:EA:40:60:6B:39:C7:B2:1C:22:84:12:26:05:67:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/34352e3136392e39382e302f32332d3234203d3e20323637373930.roa
Signing time:             Thu 22 Jan 2026 17:26:52 +0000
ROA not before:           Thu 22 Jan 2026 17:21:52 +0000
ROA not after:            Thu 21 Jan 2027 17:26:52 +0000
asID:                     267790
IP address blocks:        45.169.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/DE8F7D598DEA40606B39C7B21C22841226056748.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/DE8F7D598DEA40606B39C7B21C22841226056748.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:09:00:4e:b3:1a:fa:23:d4:b7:ef:1c:09:58:80:26:c9:e8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8F7D598DEA40606B39C7B21C22841226056748
        Validity
            Not Before: Jan 22 17:21:52 2026 GMT
            Not After : Jan 21 17:26:52 2027 GMT
        Subject: CN=4860F1C34967AE24D32209A3723D955EE3EBC1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:fd:22:e9:f3:3f:ef:67:3b:65:b7:d2:f4:
                    2d:cd:e7:1f:86:4a:99:19:f7:44:15:2c:c2:5c:46:
                    29:d9:23:a3:0f:d3:59:d9:9c:b7:dc:d5:55:b2:84:
                    44:67:01:00:82:05:af:54:ed:80:0d:42:fe:89:da:
                    a1:68:1a:0d:5a:93:a4:1c:6c:1d:16:b7:70:3f:d0:
                    b6:e9:10:0b:39:5f:57:31:92:e4:ca:dd:01:59:61:
                    68:d9:f6:23:a7:16:ca:ce:31:87:d9:0c:d2:fb:28:
                    3c:f2:f8:c5:05:f3:99:54:08:ce:54:cd:4f:7a:e6:
                    07:f7:e9:ba:12:ac:80:1e:11:0a:4c:1a:cd:74:99:
                    32:7e:79:ef:cb:bb:58:9f:21:b0:c5:ad:97:34:56:
                    32:cd:48:03:98:ca:00:d7:45:e8:2c:b7:b9:83:28:
                    8e:49:42:ad:0d:16:49:78:df:97:64:2e:c5:c4:5b:
                    45:31:08:55:f4:17:3b:de:fb:c9:53:77:2c:cc:d5:
                    a1:15:92:d4:48:91:55:a1:cc:df:3b:de:d8:6e:9d:
                    41:c4:6d:95:62:3a:40:cf:61:3b:26:f8:57:c7:23:
                    06:8b:3a:03:be:04:a6:5e:59:3a:c9:f2:37:80:d6:
                    bd:ec:0d:f8:0e:cf:c6:fe:7b:72:58:7f:a7:45:d6:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:F1:C3:49:67:AE:24:D3:22:09:A3:72:3D:95:5E:E3:EB:C1:D7
            X509v3 Authority Key Identifier:
                keyid:DE:8F:7D:59:8D:EA:40:60:6B:39:C7:B2:1C:22:84:12:26:05:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/DE8F7D598DEA40606B39C7B21C22841226056748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/34352e3136392e39382e302f32332d3234203d3e20323637373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:c2:79:33:21:e6:ee:6d:f3:b5:aa:94:a2:4c:a5:f3:f1:
         87:fa:2e:6d:76:54:3e:be:5c:bf:75:61:12:14:75:46:b2:23:
         9f:80:78:bc:ba:e4:34:e1:fc:ef:d4:cd:99:df:f4:52:ca:38:
         af:2b:26:ac:2b:a1:b0:ec:1b:49:07:f5:11:6d:52:e8:f1:94:
         0a:4a:f5:1f:6f:92:01:6e:ae:4b:32:44:20:8a:11:c9:b5:6b:
         55:b8:7a:8d:19:ba:6f:a7:6e:5f:b6:44:bf:08:87:b7:33:45:
         51:34:bf:80:eb:11:ef:0b:f3:ef:d3:90:aa:71:6a:33:b7:ad:
         d6:c9:7c:aa:5a:a6:5b:5d:14:0b:8e:36:91:9e:6a:26:e9:fa:
         7d:10:80:38:90:b3:a1:58:c1:0a:bf:4b:d3:3a:36:bb:f9:53:
         d2:9a:28:57:27:d1:58:b6:e4:38:0a:b0:29:43:92:ef:bc:c9:
         a6:19:dd:45:b0:37:2d:dd:ab:8c:c0:0b:1b:dd:65:86:78:05:
         1f:84:76:cc:e0:99:de:ea:9b:db:49:f9:16:52:86:0e:5f:78:
         e1:f8:9a:d0:35:f3:cb:42:64:50:91:04:08:04:2f:31:72:e3:
         45:9d:3c:5f:09:9a:5d:c8:a1:fa:8b:a6:43:5d:ca:7d:35:4d:
         16:61:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:51 2026 by rpki-client