This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31362e302f32342d3234203d3e20323637373835.roa
File:                     34352e3137322e31362e302f32342d3234203d3e20323637373835.roa (raw, json)
Hash identifier:          JfrX1n7E4ZFUgSWuQCeqpZ6tSdxFL5ucnHdeJakrmVw=
Subject key identifier:   41:A6:8F:6B:62:F4:88:07:6F:0D:AE:50:F3:EC:4C:DA:4D:B8:83:B2
Certificate issuer:       /CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
Certificate serial:       719CA15F7D759DA7663A37E427F0DB51D1F1965E
Authority key identifier: C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31362e302f32342d3234203d3e20323637373835.roa
Signing time:             Tue 06 Jan 2026 20:55:55 +0000
ROA not before:           Tue 06 Jan 2026 20:50:55 +0000
ROA not after:            Tue 05 Jan 2027 20:55:55 +0000
asID:                     267785
IP address blocks:        45.172.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9c:a1:5f:7d:75:9d:a7:66:3a:37:e4:27:f0:db:51:d1:f1:96:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
        Validity
            Not Before: Jan  6 20:50:55 2026 GMT
            Not After : Jan  5 20:55:55 2027 GMT
        Subject: CN=41A68F6B62F488076F0DAE50F3EC4CDA4DB883B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:30:79:09:ab:21:50:d6:c7:3b:69:d8:95:
                    b3:db:4b:3d:60:9d:76:e2:bf:f5:0b:42:48:14:94:
                    a7:17:f4:dd:22:91:37:0c:83:41:5a:83:73:2a:65:
                    ac:3f:02:02:e8:d1:6f:0d:ec:68:4c:ed:ef:63:75:
                    5f:8f:cb:84:13:4c:9a:37:70:c9:0a:9e:54:9d:d0:
                    0a:d9:83:48:b5:94:f4:ca:61:ca:0d:1d:77:11:b5:
                    1c:a0:1c:0f:f6:46:96:6e:0e:7f:67:b7:20:11:dd:
                    d3:3b:5f:64:b5:3a:39:a6:1c:7c:2c:76:5c:58:e1:
                    ca:71:f3:24:d3:bd:cd:84:7e:7d:54:69:43:9a:e1:
                    65:11:3f:de:af:58:65:98:50:4a:be:50:d1:27:56:
                    08:59:8d:d4:d4:a0:48:1f:d0:9e:12:57:46:4d:92:
                    c4:da:86:e8:99:8d:78:52:a5:d6:6f:07:cb:f5:0f:
                    60:35:59:0f:4a:f4:c8:f8:17:fa:fc:61:6e:c0:e8:
                    cf:31:93:b6:11:90:ee:ee:c5:f7:30:f5:0e:52:3a:
                    5d:4f:ab:52:73:8f:34:47:32:56:d4:04:27:16:33:
                    05:7c:8c:7c:05:74:5b:2a:cb:78:06:cf:d4:a3:c8:
                    5c:fc:0b:d7:ab:42:57:ca:46:71:bc:5e:59:70:2d:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:8F:6B:62:F4:88:07:6F:0D:AE:50:F3:EC:4C:DA:4D:B8:83:B2
            X509v3 Authority Key Identifier:
                keyid:C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31362e302f32342d3234203d3e20323637373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:be:c1:e9:9d:a3:09:05:4a:ab:87:7b:91:f2:1e:c1:09:9a:
         28:b0:fc:89:a7:37:9d:79:58:6c:c2:df:e5:20:5e:22:6c:a3:
         21:47:3f:9d:5c:51:6c:eb:01:6a:d6:c3:21:9b:ce:5b:cf:ec:
         c6:79:f8:d5:af:5e:5e:d5:ae:2c:59:cc:7a:a6:66:0a:a1:69:
         8b:67:7b:98:d9:67:d1:39:b0:f3:bc:09:96:4c:c1:26:d0:83:
         90:6c:e8:26:8d:67:b6:82:00:ef:95:2f:c1:7c:a6:76:27:51:
         9e:19:09:51:cd:8b:06:16:1e:56:88:5f:48:fd:9f:bb:04:7e:
         f7:6c:4e:64:75:2d:e0:5a:d0:c9:39:09:14:86:a8:cc:46:62:
         aa:d0:ca:fc:bc:5e:73:9d:5a:83:3d:67:72:b5:a8:20:67:96:
         49:ea:56:26:40:b2:dd:ae:40:4c:4c:fa:42:1a:d8:62:e6:20:
         40:68:be:04:1c:73:9a:a2:78:24:c8:f0:09:ba:37:31:07:7d:
         b2:ec:3b:6e:51:60:5b:56:d9:91:ff:c8:a7:56:a3:4a:4c:85:
         b2:80:34:5c:1e:5f:67:15:49:2c:bd:82:56:be:11:0a:2c:35:
         10:41:63:e4:fd:77:74:c6:aa:a5:32:67:46:db:53:90:4a:2c:
         2e:37:3d:64
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcZyhX311nadmOjfkJ/DbUdHxll4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcxMTM3RDc4REQ1Q0JDQUI1MEY4NjcwMDBGNTEwRjBC
MzU4N0Y5QTAeFw0yNjAxMDYyMDUwNTVaFw0yNzAxMDUyMDU1NTVaMDMxMTAvBgNV
BAMTKDQxQTY4RjZCNjJGNDg4MDc2RjBEQUU1MEYzRUM0Q0RBNERCODgzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdIjB5CashUNbHO2nYlbPbSz1g
nXbiv/ULQkgUlKcX9N0ikTcMg0Fag3MqZaw/AgLo0W8N7GhM7e9jdV+Py4QTTJo3
cMkKnlSd0ArZg0i1lPTKYcoNHXcRtRygHA/2RpZuDn9ntyAR3dM7X2S1OjmmHHws
dlxY4cpx8yTTvc2Efn1UaUOa4WURP96vWGWYUEq+UNEnVghZjdTUoEgf0J4SV0ZN
ksTahuiZjXhSpdZvB8v1D2A1WQ9K9Mj4F/r8YW7A6M8xk7YRkO7uxfcw9Q5SOl1P
q1JzjzRHMlbUBCcWMwV8jHwFdFsqy3gGz9SjyFz8C9erQlfKRnG8XllwLSPXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQaaPa2L0iAdvDa5Q8+xM2k24g7IwHwYDVR0j
BBgwFoAUxxE3143Vy8q1D4ZwAPUQ8LNYf5owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDBGODg5MUQ3OERBQTFGOEM1ODJBN0Q4QkI1REQyNDI5
NUIyNEU1Njc0NTNCOEYwRTJCRERBQjIyNEQ4Q0E1LzAvQzcxMTM3RDc4REQ1Q0JD
QUI1MEY4NjcwMDBGNTEwRjBCMzU4N0Y5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzExMzdENzhERDVDQkNBQjUw
Rjg2NzAwMEY1MTBGMEIzNTg3RjlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0QwRjg4OTFENzhEQUExRjhDNTgyQTdEOEJCNUREMjQyOTVCMjRFNTY3
NDUzQjhGMEUyQkREQUIyMjREOENBNS8wLzM0MzUyZTMxMzczMjJlMzEzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2sEDAN
BgkqhkiG9w0BAQsFAAOCAQEAQL7B6Z2jCQVKq4d7kfIewQmaKLD8iac3nXlYbMLf
5SBeImyjIUc/nVxRbOsBatbDIZvOW8/sxnn41a9eXtWuLFnMeqZmCqFpi2d7mNln
0Tmw87wJlkzBJtCDkGzoJo1ntoIA75UvwXymdidRnhkJUc2LBhYeVohfSP2fuwR+
92xOZHUt4FrQyTkJFIaozEZiqtDK/Lxec51agz1ncrWoIGeWSepWJkCy3a5ATEz6
QhrYYuYgQGi+BBxzmqJ4JMjwCbo3MQd9suw7blFgW1bZkf/Ip1ajSkyFsoA0XB5f
ZxVJLL2CVr4RCiw1EEFj5P13dMaqpTJnRttTkEosLjc9ZA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:20 2026 by rpki-client