This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233312e38302e302f32322d3234203d3e203237383433.roa
File:                     34352e3233312e38302e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          q1eZJobLnLv3jdTuKThtzkIgbHqAJikbFjk4myGlE4c=
Subject key identifier:   A3:18:5E:3E:64:82:19:7F:E0:94:B9:81:5C:14:9D:2B:1E:4C:CE:F4
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       17C2D503EAEDD442A42BF23696FF08214F40209C
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233312e38302e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:48 +0000
ROA not before:           Tue 06 Jan 2026 18:58:48 +0000
ROA not after:            Tue 05 Jan 2027 19:03:48 +0000
asID:                     27843
IP address blocks:        45.231.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c2:d5:03:ea:ed:d4:42:a4:2b:f2:36:96:ff:08:21:4f:40:20:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:48 2026 GMT
            Not After : Jan  5 19:03:48 2027 GMT
        Subject: CN=A3185E3E6482197FE094B9815C149D2B1E4CCEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:05:ca:9d:b3:6e:73:b1:04:58:f0:eb:23:
                    63:13:c6:16:29:da:f3:42:d8:68:65:29:9f:c8:34:
                    00:67:83:5d:d9:dd:f1:8e:5d:a2:fb:ca:08:36:77:
                    a7:44:b4:8a:30:70:ac:a6:f7:d8:98:c9:ce:39:e4:
                    42:ad:c1:40:be:e2:97:7f:ed:e5:f7:ae:ed:8b:78:
                    80:20:f2:ab:93:4b:76:b8:1a:6c:29:5f:66:b0:1f:
                    0e:69:01:fc:e8:f8:4d:25:70:6f:f8:06:4c:fb:f3:
                    18:48:6f:9c:5f:37:8c:0b:3c:e3:e8:65:ac:58:e7:
                    f7:07:d7:ff:57:87:bb:e3:58:e0:04:e7:01:e7:e9:
                    cd:b7:e2:69:93:e3:8c:fb:9f:de:7c:56:7d:2e:87:
                    52:f0:aa:af:ab:be:09:36:b0:40:eb:7a:b2:8a:3f:
                    43:4e:42:bb:ce:72:86:5a:4c:2b:a1:94:cb:18:3c:
                    19:5b:3a:af:ff:c4:fb:3b:35:c4:b5:fd:0d:b4:5a:
                    71:21:88:a5:eb:2e:f4:43:bf:92:09:19:76:2c:07:
                    b6:a4:f6:ea:b1:82:45:9e:d9:a3:bd:45:2c:fb:7a:
                    46:82:f9:62:08:1e:9c:3b:2f:39:8f:5d:a2:21:6a:
                    ae:c8:10:bd:76:f5:dd:83:3a:27:a5:5b:c5:20:3d:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:18:5E:3E:64:82:19:7F:E0:94:B9:81:5C:14:9D:2B:1E:4C:CE:F4
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233312e38302e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:74:39:88:a1:72:14:4f:65:d5:a1:81:e0:36:23:93:ce:13:
         a7:1d:41:e1:c0:7f:77:24:1b:5b:0e:e5:a7:b3:48:9f:9b:00:
         fb:e6:7d:79:ec:87:14:63:ed:9a:48:b3:4a:e8:f2:da:cd:0c:
         26:63:6d:c8:b7:24:27:c1:57:92:bd:c3:64:e6:67:30:ef:28:
         22:d4:9e:7f:9e:bf:a8:ee:23:de:98:0b:3c:a1:e3:31:de:0a:
         cf:35:cc:54:b6:ac:41:e2:9b:0f:5f:25:6c:68:a4:ec:60:f8:
         01:c2:fa:6e:f2:97:2b:16:2c:b9:51:f9:9b:39:4b:67:e3:c9:
         57:2d:a6:8b:a3:5f:5e:61:f9:b9:f9:9d:a7:18:35:3e:6c:e4:
         28:ca:cf:90:5f:8d:39:b4:61:64:34:64:f4:fb:ec:eb:bf:5b:
         aa:54:42:67:b0:1e:37:d5:f1:a6:b7:ca:66:65:9f:8a:58:6a:
         9b:b0:64:49:fb:75:65:2f:e9:b0:9d:60:56:56:07:2f:22:73:
         bc:ec:01:df:6a:cb:59:ed:2b:20:d7:70:53:7e:4b:4e:67:21:
         3b:76:be:0a:c8:71:19:e0:5e:28:f5:6f:3e:8a:0e:a0:3e:60:
         85:48:0d:02:c1:76:5b:b4:69:18:89:8a:69:69:5f:9d:2e:86:
         b8:97:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:33:11 2026 by rpki-client