This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa
File:                     34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          1V5OZrFkw4dINKUGOb6blduNFOODvGPx97fwbZDI3Tw=
Subject key identifier:   4D:A9:69:40:52:82:F8:9E:7A:AB:5E:4A:F5:5D:00:91:52:68:B5:A1
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       1F2EF1DBD68D33E0A67072E90A5A201D0492D3BF
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 06 Jan 2026 19:19:46 +0000
ROA not before:           Tue 06 Jan 2026 19:14:46 +0000
ROA not after:            Tue 05 Jan 2027 19:19:46 +0000
asID:                     263157
IP address blocks:        45.167.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2e:f1:db:d6:8d:33:e0:a6:70:72:e9:0a:5a:20:1d:04:92:d3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Jan  6 19:14:46 2026 GMT
            Not After : Jan  5 19:19:46 2027 GMT
        Subject: CN=4DA969405282F89E7AAB5E4AF55D00915268B5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:5f:22:0e:05:eb:fb:7a:95:9c:90:e6:42:
                    74:48:7f:59:dc:13:cd:39:40:97:2c:c5:f9:08:41:
                    89:25:e7:85:aa:3f:8d:c9:c9:f5:f2:ee:48:7d:e3:
                    e0:78:6b:fc:b3:67:27:59:38:c9:08:89:ab:76:8f:
                    5f:2c:bf:6e:4c:f8:34:15:7a:48:b4:12:e3:62:ac:
                    d2:4c:8e:34:43:94:a1:23:7f:ed:eb:76:fb:6f:da:
                    eb:7e:45:08:0e:67:97:a0:0b:8b:88:76:54:b0:a5:
                    cb:75:4f:6b:ae:39:b4:2f:1c:88:c3:0b:18:78:79:
                    e6:6c:75:42:8a:60:fe:a7:68:c1:2e:54:5b:a1:ad:
                    c4:c6:40:b5:3a:fd:56:7d:d1:73:b0:90:f9:72:7d:
                    a1:ad:ca:8a:af:f0:f5:44:1b:db:4d:37:6a:01:63:
                    72:d4:39:66:8e:f4:01:25:b4:66:89:7c:cf:bc:27:
                    88:63:10:cc:fa:ae:5f:12:4e:4e:83:97:a0:b1:f4:
                    e0:d9:70:01:64:3b:96:6f:0a:d8:fc:b9:77:65:d6:
                    f1:53:b0:ff:d1:69:fd:be:15:6c:14:b2:c8:e6:81:
                    30:59:a3:ca:62:41:3b:b9:d8:e2:51:31:20:5a:42:
                    f5:a6:e1:3d:cb:bf:fc:77:54:5c:1c:21:32:80:d6:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A9:69:40:52:82:F8:9E:7A:AB:5E:4A:F5:5D:00:91:52:68:B5:A1
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:4f:35:ff:6a:10:eb:fc:a0:ed:54:77:8a:87:c8:10:e4:
         a2:b2:de:04:0e:bf:cc:fb:db:31:91:55:77:e7:69:9b:eb:cf:
         77:6a:3e:fd:ad:1f:4f:8a:af:c7:5b:79:cc:01:fe:4e:48:94:
         12:34:39:ce:e7:44:98:2c:b3:e3:1c:d7:ae:88:72:4f:7e:03:
         50:55:26:5d:55:e2:6c:3c:f3:2a:56:34:7b:11:aa:da:bd:bb:
         75:df:ec:67:11:c8:a6:83:f7:21:20:d1:d2:ba:9a:14:a4:cf:
         7d:b0:ec:61:c7:44:05:41:6f:08:8c:58:89:47:c3:58:38:c9:
         ee:aa:92:a3:de:08:53:22:b8:fb:d2:58:7b:d1:73:21:28:62:
         aa:4f:ce:7d:23:56:b6:66:0b:e7:49:fe:66:92:81:f3:a8:eb:
         1a:92:bf:c9:93:ec:6c:47:c5:75:38:d3:24:16:a0:52:9e:ad:
         12:b9:5d:18:56:f9:e9:54:e2:24:93:29:09:22:a0:4f:f1:54:
         39:25:9b:b1:4f:95:51:83:fc:ef:7e:47:41:9e:15:f0:c3:77:
         17:7b:3b:79:8c:a9:db:07:62:7f:f1:c1:f2:41:4e:0f:92:7d:
         0d:a6:77:57:a8:34:9c:4c:e9:a7:2e:fd:b9:d4:c1:6a:9c:2b:
         fe:69:88:81
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHy7x29aNM+CmcHLpClogHQSS078wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3RkM4MUE1RUE0OUE4OEZGNEJCRjIzOEIwQjk5ODg2
QTgyQTZBNDAeFw0yNjAxMDYxOTE0NDZaFw0yNzAxMDUxOTE5NDZaMDMxMTAvBgNV
BAMTKDREQTk2OTQwNTI4MkY4OUU3QUFCNUU0QUY1NUQwMDkxNTI2OEI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgl8iDgXr+3qVnJDmQnRIf1nc
E805QJcsxfkIQYkl54WqP43JyfXy7kh94+B4a/yzZydZOMkIiat2j18sv25M+DQV
eki0EuNirNJMjjRDlKEjf+3rdvtv2ut+RQgOZ5egC4uIdlSwpct1T2uuObQvHIjD
Cxh4eeZsdUKKYP6naMEuVFuhrcTGQLU6/VZ90XOwkPlyfaGtyoqv8PVEG9tNN2oB
Y3LUOWaO9AEltGaJfM+8J4hjEMz6rl8STk6Dl6Cx9ODZcAFkO5ZvCtj8uXdl1vFT
sP/Raf2+FWwUssjmgTBZo8piQTu52OJRMSBaQvWm4T3Lv/x3VFwcITKA1gT5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTalpQFKC+J56q15K9V0AkVJotaEwHwYDVR0j
BBgwFoAUCX/IGl6kmoj/S78jiwuZiGqCpqQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85Qzk5MjMxNTgwQkQ2OUI5NUY4NTI3MkQxMzczNENDODRE
OUVDNjVBMzlBQjkzNEY0ODUyQTYxRUFGOTc1NjA2LzAvMDk3RkM4MUE1RUE0OUE4
OEZGNEJCRjIzOEIwQjk5ODg2QTgyQTZBNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTdGQzgxQTVFQTQ5QTg4RkY0
QkJGMjM4QjBCOTk4ODZBODJBNkE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUM5OTIzMTU4MEJENjlCOTVGODUyNzJEMTM3MzRDQzg0RDlFQzY1QTM5
QUI5MzRGNDg1MkE2MUVBRjk3NTYwNi8wLzM0MzUyZTMxMzYzNzJlMzEzNTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaed
MA0GCSqGSIb3DQEBCwUAA4IBAQBByU81/2oQ6/yg7VR3iofIEOSist4EDr/M+9sx
kVV352mb6893aj79rR9Piq/HW3nMAf5OSJQSNDnO50SYLLPjHNeuiHJPfgNQVSZd
VeJsPPMqVjR7Earavbt13+xnEcimg/chINHSupoUpM99sOxhx0QFQW8IjFiJR8NY
OMnuqpKj3ghTIrj70lh70XMhKGKqT859I1a2ZgvnSf5mkoHzqOsakr/Jk+xsR8V1
ONMkFqBSnq0SuV0YVvnpVOIkkykJIqBP8VQ5JZuxT5VRg/zvfkdBnhXww3cXezt5
jKnbB2J/8cHyQU4Pkn0NpndXqDScTOmnLv251MFqnCv+aYiB
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:52:28 2026 by rpki-client