This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323635373033.roa
File:                     34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          L57VWgacj/zmSjf7yEB+iUGkpSFTYzflOQWN6Q62GvI=
Subject key identifier:   87:F4:79:6D:55:25:64:8B:C9:00:45:7D:95:6A:0C:76:5C:95:3A:9C
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       0EA81C252D816A970E090567F26E74A0DB9A0679
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 06 Jan 2026 19:24:28 +0000
ROA not before:           Tue 06 Jan 2026 19:19:28 +0000
ROA not after:            Tue 05 Jan 2027 19:24:28 +0000
asID:                     265703
IP address blocks:        45.160.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 00:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a8:1c:25:2d:81:6a:97:0e:09:05:67:f2:6e:74:a0:db:9a:06:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Jan  6 19:19:28 2026 GMT
            Not After : Jan  5 19:24:28 2027 GMT
        Subject: CN=87F4796D5525648BC900457D956A0C765C953A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:77:be:bc:3d:db:17:49:6e:b0:7d:9c:ee:
                    da:c8:34:4d:b5:ca:15:24:75:2e:bc:71:6c:1d:da:
                    fc:be:4b:20:39:20:8a:63:65:8c:85:d3:1a:54:10:
                    0d:6f:02:47:6c:ae:74:5b:68:03:8a:e6:3c:fc:26:
                    3c:9d:80:3e:6d:c6:ac:bb:53:06:e0:8a:f9:45:04:
                    c4:3b:4a:a0:24:70:7b:d6:a9:c1:49:a1:cc:70:05:
                    ca:e8:1f:12:d0:0d:3f:dc:89:23:4a:88:45:22:1f:
                    2a:3e:d2:af:ed:4d:b8:10:43:e0:04:2e:66:cb:37:
                    2d:68:bf:0f:2e:fa:d4:45:6e:da:e8:f2:f1:86:ec:
                    b5:89:28:12:79:b9:3a:f3:91:01:9d:ba:4f:8c:70:
                    76:59:9e:43:17:40:67:9b:54:2d:73:13:83:e0:42:
                    e3:9b:a7:40:7e:e4:ac:54:da:61:9d:5d:2a:4a:73:
                    14:19:1e:cb:a4:aa:7c:b6:f3:43:cf:4d:3d:82:76:
                    81:34:1f:9c:f0:10:e4:8d:57:a0:48:fc:d7:48:01:
                    20:06:94:54:da:8e:bf:a4:c8:9c:55:c9:00:88:86:
                    9d:a0:1f:4b:22:e3:f6:ea:d8:f4:50:b2:57:65:95:
                    6c:50:b3:a5:63:85:38:c6:0d:bf:33:7a:f9:bc:5a:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:79:6D:55:25:64:8B:C9:00:45:7D:95:6A:0C:76:5C:95:3A:9C
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:15:e7:40:ce:54:6e:08:bf:ef:03:52:d9:a3:36:f0:69:
         56:db:9e:8b:4b:c0:3b:1e:7c:b9:13:44:c3:97:91:49:8e:01:
         9a:92:af:c9:3f:36:36:87:25:56:af:aa:c2:1e:84:c2:2f:d9:
         09:ff:45:26:26:be:f1:ec:b8:29:49:5b:3f:88:b2:9e:31:52:
         c0:36:48:f2:50:af:8a:8f:b7:8e:ba:01:b0:00:a2:0c:b1:99:
         96:17:77:ec:a6:81:30:85:a1:32:74:82:e0:dd:1d:37:64:47:
         9f:3b:46:19:a4:00:0f:3e:08:e3:a0:9d:4c:67:f4:29:fb:9a:
         aa:36:f0:65:54:c7:29:f9:0b:df:e3:a5:2f:6d:d6:98:64:ab:
         65:a2:83:58:4a:bf:8d:37:85:5e:44:43:97:a6:27:f3:99:10:
         5d:74:32:06:5d:9a:e7:fe:97:d1:43:77:23:5e:3d:38:84:57:
         cb:ad:d0:3b:82:f6:d5:02:5e:3b:eb:b4:c4:f8:a3:30:75:64:
         97:33:14:c5:34:6c:2d:75:bc:e2:26:c2:bf:ee:3e:ae:21:04:
         04:cb:de:c6:a2:91:fd:0d:3d:f6:b6:18:c7:80:58:55:0d:f8:
         a3:6a:31:7c:59:5e:b9:05:a6:f9:a9:d1:5e:da:df:b9:ad:e0:
         5d:ef:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:27 2026 by rpki-client