This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa
File:                     34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa (raw, json)
Hash identifier:          8ZkLf7GmPX3uX06SOBWSHokKziKKiSEp9AGeR9DuZ/o=
Subject key identifier:   3F:BE:43:B6:06:F2:B8:9E:D8:6B:BC:00:3F:C0:22:B4:44:40:A4:7A
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       291C1B27F51B29EF277941E7166478352C48FD28
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa
Signing time:             Tue 06 Jan 2026 19:16:21 +0000
ROA not before:           Tue 06 Jan 2026 19:11:21 +0000
ROA not after:            Tue 05 Jan 2027 19:16:21 +0000
asID:                     265605
IP address blocks:        45.188.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1c:1b:27:f5:1b:29:ef:27:79:41:e7:16:64:78:35:2c:48:fd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Jan  6 19:11:21 2026 GMT
            Not After : Jan  5 19:16:21 2027 GMT
        Subject: CN=3FBE43B606F2B89ED86BBC003FC022B44440A47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:02:c6:1c:1c:4c:3e:0e:28:b9:4b:73:c1:
                    ba:be:19:08:c3:7a:b1:89:08:df:24:20:c4:b7:fe:
                    26:e4:b2:8e:a1:0f:28:26:f8:10:89:66:3c:f6:ba:
                    18:7e:7f:c6:3b:f1:4c:2b:e0:1e:39:4b:97:eb:99:
                    b5:43:04:c4:e5:7a:4f:62:ab:cc:00:01:38:b5:1e:
                    38:bf:5f:6f:86:b6:a1:00:cf:a3:ac:9f:c8:ee:f6:
                    4f:63:7f:da:ce:4e:fa:44:72:61:23:e4:c2:17:ad:
                    c2:34:1c:2f:93:ab:f6:2e:46:18:76:f1:5e:6f:a8:
                    09:f3:da:7c:fb:da:df:f7:e5:96:b2:0c:71:d1:63:
                    34:ab:fc:74:52:59:7a:b5:2d:f6:ef:54:d6:7e:68:
                    c5:5a:26:e0:13:58:66:42:81:1b:66:8c:f5:28:8c:
                    1f:5f:5a:89:ff:24:1a:2e:28:a3:20:90:42:9a:56:
                    5e:af:ef:6f:06:e5:a4:29:4c:10:63:27:3c:2b:46:
                    d5:9e:12:9e:2a:b0:2d:c2:5b:2e:5c:f9:fc:0a:ae:
                    6f:00:30:6d:76:d1:90:2a:38:db:86:4c:93:45:6e:
                    b5:da:38:a5:75:72:e4:db:fd:89:d6:2b:c7:e8:8d:
                    22:5f:54:74:c3:75:68:14:14:72:cf:d8:2d:f8:a8:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BE:43:B6:06:F2:B8:9E:D8:6B:BC:00:3F:C0:22:B4:44:40:A4:7A
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:fa:24:1f:bc:40:f4:8d:5b:60:75:0d:8d:fb:6d:5d:c5:
         89:32:dc:e9:7f:38:21:88:3f:a5:d5:60:c9:0f:7e:49:ad:f3:
         8d:32:1e:68:3b:fd:61:cb:28:ad:ff:e9:bb:0b:af:ec:76:6a:
         90:92:93:88:61:d7:a8:aa:f2:6c:6d:dd:74:fa:f3:58:68:f5:
         ae:af:e2:95:1d:52:ab:dc:bc:99:a7:c0:b5:b3:ca:2c:55:86:
         32:1c:48:1f:d9:33:08:b3:50:04:cc:3e:4d:65:84:a6:fa:21:
         ac:7a:58:b7:57:ee:8e:6d:c3:c4:e0:6d:aa:38:62:93:f7:60:
         c5:7d:b5:a8:18:27:d2:83:44:5a:3b:0d:ef:19:f1:17:ca:a3:
         b2:33:99:34:9d:e6:e4:c5:d9:2f:7c:62:1a:e6:3a:48:11:e0:
         c5:b8:a4:2e:6d:17:9d:b2:79:6e:e0:7d:0d:a6:a7:e2:d7:88:
         c6:4f:b7:4c:ef:9f:5e:7f:34:28:45:da:39:4c:d8:14:7b:9a:
         04:2f:9a:7c:f1:42:5f:ff:06:43:77:bb:64:b9:b1:bb:2e:f3:
         f4:86:01:47:2e:b0:48:8c:79:56:06:d0:44:b8:2c:8c:e9:b2:
         3c:db:3b:2d:9b:01:98:cd:31:61:ed:0d:20:0d:a2:55:cc:23:
         82:de:27:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:08 2026 by rpki-client