This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38392e302f32342d3234203d3e20323633323434.roa
File:                     34352e3136322e38392e302f32342d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          wHZ1R6IefJYpmXffcUNtSr8KlKvNi2vvD8yMb/xxOHQ=
Subject key identifier:   69:37:C7:AB:B1:61:82:01:EC:5F:E9:0E:21:4F:58:86:2A:3D:13:52
Certificate issuer:       /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial:       6BCBB11D730EBA81F6DD3B0FE269B783CF03106C
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38392e302f32342d3234203d3e20323633323434.roa
Signing time:             Tue 06 Jan 2026 19:07:19 +0000
ROA not before:           Tue 06 Jan 2026 19:02:19 +0000
ROA not after:            Tue 05 Jan 2027 19:07:19 +0000
asID:                     263244
IP address blocks:        45.162.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cb:b1:1d:73:0e:ba:81:f6:dd:3b:0f:e2:69:b7:83:cf:03:10:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
        Validity
            Not Before: Jan  6 19:02:19 2026 GMT
            Not After : Jan  5 19:07:19 2027 GMT
        Subject: CN=6937C7ABB1618201EC5FE90E214F58862A3D1352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:81:df:83:3b:43:e1:9d:e0:63:f8:a2:8e:
                    8d:8b:49:5c:c5:55:98:d9:b4:f7:84:d1:ad:c2:38:
                    3b:24:f3:70:94:56:b2:31:d6:dc:b7:e1:a9:ed:00:
                    eb:e0:df:fe:9a:ce:41:49:51:0e:96:67:22:78:60:
                    57:b8:ab:6a:8e:fe:de:99:15:5a:e8:58:70:97:bc:
                    5d:62:46:e8:07:d2:34:84:8b:b1:19:6b:ee:44:c9:
                    09:dc:5c:9d:15:84:30:99:86:77:5d:86:81:7c:22:
                    64:3c:85:97:93:a4:ad:c1:69:d4:a6:7a:49:57:a3:
                    25:f3:e2:49:aa:88:bc:bd:22:80:c3:47:e1:cd:6d:
                    67:e7:3d:94:5f:cd:82:b2:76:fc:aa:76:c2:a9:e4:
                    7a:0f:55:c9:f3:6b:6e:2b:80:54:76:bf:f1:36:46:
                    b8:05:97:5b:8a:87:f2:b1:e8:bd:f9:8e:d8:80:07:
                    01:b5:43:2a:dd:e4:83:9a:96:2d:5d:86:9e:bd:33:
                    78:ca:e4:89:3b:26:48:65:3d:9c:c4:01:74:b5:f7:
                    32:f2:98:64:a8:da:12:8a:a0:65:a5:11:f3:2e:ea:
                    8f:af:32:e6:cf:f8:c2:7e:36:91:cb:e0:c5:c8:9e:
                    cd:50:27:22:33:ab:54:5c:65:8b:99:16:bc:09:35:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:37:C7:AB:B1:61:82:01:EC:5F:E9:0E:21:4F:58:86:2A:3D:13:52
            X509v3 Authority Key Identifier:
                keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38392e302f32342d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:e8:4c:d5:de:c0:49:e5:c8:2a:6b:f0:23:d7:34:fc:a1:
         12:84:e0:c0:cf:13:1f:9e:92:68:9f:cd:38:94:c9:59:d5:96:
         77:05:5a:7b:26:65:6d:11:5c:77:5c:82:c5:b9:5b:8b:a9:c1:
         62:97:85:24:70:c9:0d:38:a6:88:27:b5:a6:76:23:b7:26:e9:
         ff:3b:fd:74:7b:49:0d:72:fe:cb:9b:e1:81:5b:eb:82:06:d8:
         ae:41:ac:8f:04:d0:74:d8:f6:5e:5e:5d:c2:2d:37:df:09:63:
         74:77:43:4a:05:63:15:2d:1d:38:7d:b7:a2:73:b6:ea:51:ba:
         96:03:a1:83:68:76:a6:db:a1:37:69:a3:ea:a3:0b:ce:33:0d:
         74:1f:81:66:3f:04:cd:64:07:0f:d0:a4:09:a3:31:b4:6b:ab:
         1f:55:4f:3d:b0:2a:65:93:37:2b:c1:03:13:fe:ae:c5:5a:ba:
         f7:69:45:f5:9e:24:10:bc:de:8c:82:ff:b6:14:ac:35:e5:70:
         d8:f0:30:c8:ba:6c:2b:7f:30:14:ec:b0:c9:84:5a:98:2b:7b:
         1f:8b:6b:4d:e7:e6:87:19:f4:39:f0:fd:2a:e9:ec:3f:11:ec:
         0a:d9:d6:69:42:c1:8f:bc:3a:63:90:11:de:f2:e1:ab:c8:99:
         51:f9:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:53:46 2026 by rpki-client