This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa
File:                     34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          EeRHZpXaXZzipfvLMh1zVmEefGZUoM6cy2D2Usw55fs=
Subject key identifier:   8D:B4:78:8A:8A:7E:E6:CC:11:C1:F1:1B:F4:2C:6A:AD:DA:65:47:7E
Certificate issuer:       /CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
Certificate serial:       3B0325D27570CB4265B7CFAE5262717876B7D9F4
Authority key identifier: A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 06 Jan 2026 19:27:13 +0000
ROA not before:           Tue 06 Jan 2026 19:22:13 +0000
ROA not after:            Tue 05 Jan 2027 19:27:13 +0000
asID:                     265703
IP address blocks:        45.162.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:03:25:d2:75:70:cb:42:65:b7:cf:ae:52:62:71:78:76:b7:d9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
        Validity
            Not Before: Jan  6 19:22:13 2026 GMT
            Not After : Jan  5 19:27:13 2027 GMT
        Subject: CN=8DB4788A8A7EE6CC11C1F11BF42C6AADDA65477E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:41:fe:5d:83:87:fa:25:3c:c2:0a:43:97:
                    76:0a:ae:71:97:43:c3:f3:93:1c:14:57:3b:b4:9d:
                    03:24:8c:21:78:03:4b:00:e8:21:c9:7b:15:8c:f4:
                    01:63:52:32:36:4c:23:d3:1c:ce:1c:c9:2a:36:65:
                    6a:17:e9:7d:71:c5:ab:4f:38:7b:f3:83:ef:85:26:
                    8a:91:4a:12:61:42:1c:3c:e6:0c:af:de:50:b2:b2:
                    e4:99:c6:33:92:54:07:8a:88:22:44:f7:f5:59:93:
                    f0:b5:eb:57:d5:3c:38:c9:64:4c:63:e3:6c:01:7e:
                    0c:a2:4b:6a:e2:65:e4:45:19:ae:6b:cf:20:15:61:
                    23:3a:36:e0:9f:45:fc:95:b9:c2:03:f4:30:f0:d0:
                    a2:24:14:0e:bc:d3:dc:20:ad:0f:40:a0:73:89:52:
                    a2:02:52:6e:8e:dd:32:2b:5a:7b:48:42:18:06:9a:
                    0d:cf:e6:46:21:87:cc:8a:13:bc:6e:3e:6f:a9:b6:
                    bf:bd:c9:e5:44:4c:21:35:17:50:40:6f:f8:bd:04:
                    c3:9c:e2:3c:9c:65:56:26:dc:d6:4f:cb:b5:e1:8a:
                    e0:72:95:83:d7:47:88:2f:f2:da:50:54:f6:48:bf:
                    90:d3:df:22:1a:e8:bf:49:45:95:d1:19:69:88:9a:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B4:78:8A:8A:7E:E6:CC:11:C1:F1:1B:F4:2C:6A:AD:DA:65:47:7E
            X509v3 Authority Key Identifier:
                keyid:A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:c2:c2:ee:f7:a0:d7:63:d1:ef:2c:9c:a2:d7:56:71:54:
         62:ba:1a:6f:86:e1:b2:fd:c0:bc:a2:96:67:de:65:eb:27:69:
         76:e0:f0:cf:52:1a:6f:f9:6b:91:62:e5:22:e6:1e:66:8c:75:
         25:d4:6a:b5:c9:5c:ef:7e:3b:1e:ee:53:41:8c:33:51:50:a5:
         34:5d:cc:82:c0:f5:53:32:2b:4c:0f:1a:18:08:43:2a:d8:4f:
         21:6d:36:3f:55:5c:15:5f:d5:38:75:18:89:b9:01:fd:7a:86:
         44:bc:71:7f:0e:9b:c8:53:b9:24:b9:24:df:86:27:f0:14:d8:
         0d:71:3e:23:f0:4a:64:fe:ef:f7:35:8e:1b:7a:bb:2a:ff:29:
         64:fc:26:04:20:c0:27:d8:ec:da:7f:bc:70:40:02:21:79:5a:
         6f:9b:0e:9e:51:69:36:e2:d3:b2:14:03:30:a9:65:ab:87:c0:
         d5:ba:2d:1d:cd:5f:0f:bc:4a:b8:82:72:0d:a6:11:92:95:79:
         cc:0d:18:2f:19:99:25:cb:1f:e3:73:66:02:8f:8d:ff:60:e3:
         93:4b:69:42:cd:e5:3c:22:3f:9b:db:e2:e7:1d:fb:70:a3:a2:
         2d:94:90:5b:e2:42:8b:3c:45:22:0a:a1:1c:96:9f:cc:51:44:
         c4:65:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:35 2026 by rpki-client