This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa
File:                     34352e3136322e36302e302f32332d3234203d3e20323637363739.roa (raw, json)
Hash identifier:          8woa0vq/nBUJnpIFvQcJ240txPmUxExeJjKBZT/UUiw=
Subject key identifier:   AD:85:71:1F:34:27:F5:B9:04:63:60:A7:58:7B:92:D9:AB:E4:82:51
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       7B4A1D3C788BECEE24DD34C5B3DF2C746BD1710B
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa
Signing time:             Tue 06 Jan 2026 19:28:06 +0000
ROA not before:           Tue 06 Jan 2026 19:23:06 +0000
ROA not after:            Tue 05 Jan 2027 19:28:06 +0000
asID:                     267679
IP address blocks:        45.162.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:1d:3c:78:8b:ec:ee:24:dd:34:c5:b3:df:2c:74:6b:d1:71:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Jan  6 19:23:06 2026 GMT
            Not After : Jan  5 19:28:06 2027 GMT
        Subject: CN=AD85711F3427F5B9046360A7587B92D9ABE48251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:05:45:98:7b:47:47:66:15:c8:0b:6a:a1:
                    1b:cd:0f:fb:cd:0c:68:2b:fa:1b:96:34:80:2e:bc:
                    1e:81:ad:59:6b:34:6a:1e:6c:52:49:f3:ed:b5:bb:
                    48:0c:0a:c2:6f:53:74:35:43:4b:56:48:b4:af:5d:
                    3c:68:3f:65:92:56:63:54:0b:86:56:1e:1b:eb:74:
                    9b:0b:9a:3a:0d:5b:7f:30:5a:3b:c0:a0:7a:48:c1:
                    79:81:25:e5:22:02:5c:a5:66:58:ff:ea:3a:74:a2:
                    3f:a8:e5:45:64:37:95:00:ca:a3:c7:dd:85:e1:48:
                    05:9c:4d:04:56:fc:a8:13:98:22:a9:e9:f1:44:7b:
                    a6:f1:8c:85:57:7a:9e:d5:46:d3:5a:dd:33:57:46:
                    a1:ba:02:59:03:91:50:e0:13:42:e4:e0:05:75:cf:
                    b7:dd:89:93:86:f2:4a:87:df:d6:da:f9:35:4b:22:
                    f5:52:c2:d9:f9:31:28:0c:ba:93:83:75:4a:39:4c:
                    be:18:cd:85:10:77:33:29:7e:0f:84:e3:13:f7:f9:
                    14:09:f3:fb:aa:27:4b:44:5e:b4:80:86:44:ac:4d:
                    df:12:cd:3b:b6:fd:24:71:65:17:78:2e:da:c9:63:
                    cc:d3:d9:6e:50:2c:b5:29:9d:ce:76:d4:32:e8:95:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:85:71:1F:34:27:F5:B9:04:63:60:A7:58:7B:92:D9:AB:E4:82:51
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:ad:f1:b2:3b:ad:79:32:ff:92:57:28:c4:c4:54:8d:23:
         f0:36:4d:71:7c:16:23:e3:01:fd:65:ea:ad:1c:af:6f:cc:91:
         4a:2d:19:18:d5:47:2d:0c:2f:e4:54:ef:10:f0:9c:92:cb:63:
         b2:9a:71:e8:b3:63:2e:3b:dc:77:2a:1b:37:7e:6c:fd:27:79:
         f1:d0:5f:9d:99:e0:9e:0b:47:2f:d6:3b:4e:f8:72:9a:52:4a:
         ba:d4:78:27:b6:4d:b5:c5:93:12:20:91:5f:94:9e:21:a9:d5:
         a3:44:be:da:c9:dc:24:a0:a4:41:44:89:7d:12:b9:95:7f:78:
         a4:c5:1b:fd:11:73:9d:c6:cc:c8:4f:ce:7c:95:87:37:05:7c:
         6f:02:98:2c:cf:06:3c:42:2c:e9:30:a6:0f:e5:76:d7:70:a7:
         01:5b:4a:51:d1:cd:33:43:91:85:7a:11:1a:f6:ee:f6:1d:b6:
         29:8b:b2:cf:37:b0:9f:34:a0:7c:39:48:d9:3c:5c:d7:7e:55:
         be:2d:e1:f2:6d:a7:f3:77:9f:45:30:9a:4a:26:34:30:e7:dd:
         8c:cb:52:bf:0b:75:42:82:f8:f4:69:69:56:39:07:b1:c9:90:
         c0:f8:8c:50:65:bf:72:23:60:6c:10:84:3b:32:27:2b:a4:a5:
         5d:e5:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:30:26 2026 by rpki-client