This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e203631353033.roa
File:                     34352e3138312e3132302e302f32322d3234203d3e203631353033.roa (raw, json)
Hash identifier:          WSYRg/WYYlZgIGDurv0l32QDY3bO8jv6roCNlcoGp50=
Subject key identifier:   08:49:8C:BB:E8:E2:BB:F3:4C:BC:1B:98:B8:13:42:CD:BE:28:8D:B1
Certificate issuer:       /CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D
Certificate serial:       60C731DB3DB20A62C38261FDFA0BC93D13D95466
Authority key identifier: 7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e203631353033.roa
Signing time:             Tue 06 Jan 2026 19:24:33 +0000
ROA not before:           Tue 06 Jan 2026 19:19:33 +0000
ROA not after:            Tue 05 Jan 2027 19:24:33 +0000
asID:                     61503
IP address blocks:        45.181.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c7:31:db:3d:b2:0a:62:c3:82:61:fd:fa:0b:c9:3d:13:d9:54:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D
        Validity
            Not Before: Jan  6 19:19:33 2026 GMT
            Not After : Jan  5 19:24:33 2027 GMT
        Subject: CN=08498CBBE8E2BBF34CBC1B98B81342CDBE288DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:ef:c7:93:04:45:9b:d6:8e:89:79:0d:59:
                    a3:44:bf:1e:46:f8:00:e2:df:e6:8f:23:8d:f7:e7:
                    7a:cd:16:64:35:7e:28:15:98:40:46:c4:cf:84:9e:
                    9b:da:2d:ba:7c:a1:28:7f:fc:f7:39:5d:95:86:83:
                    74:59:8d:3f:65:4c:49:52:3a:5f:ae:77:4f:a7:34:
                    4a:43:c0:cd:8d:c5:97:8c:85:f4:76:c4:21:98:ff:
                    0d:99:b1:67:91:f3:7a:e5:81:4a:a3:74:69:bc:b0:
                    25:0e:c6:31:3e:4a:19:c2:95:f8:4c:0b:86:31:e8:
                    32:b1:04:3d:6b:e2:8f:b2:72:c0:2e:aa:4c:86:c0:
                    cf:a2:2d:3e:52:f4:a1:75:39:3d:a8:33:79:64:52:
                    95:91:a9:db:dd:b3:d6:75:d0:18:56:7d:95:72:59:
                    eb:69:15:3f:ac:75:ff:1a:18:81:00:cf:ac:b3:93:
                    cc:29:9f:c2:a5:df:0b:3f:1d:ff:a7:a8:53:77:3e:
                    c7:fd:0c:ab:0f:14:35:1a:cf:d0:de:14:a0:0b:9f:
                    4d:4b:fe:1e:ae:ac:48:e0:d3:d5:f5:3e:0b:58:29:
                    54:7c:8e:cf:37:0d:b1:d4:f9:70:71:ad:4d:a5:5e:
                    15:83:df:a4:f8:a0:a7:04:5e:d0:bd:9d:a3:a0:01:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:49:8C:BB:E8:E2:BB:F3:4C:BC:1B:98:B8:13:42:CD:BE:28:8D:B1
            X509v3 Authority Key Identifier:
                keyid:7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e203631353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:28:95:de:49:ff:d9:c9:96:99:35:0f:4a:23:b8:03:c3:d4:
         7a:da:ad:aa:2b:0e:dd:cd:ae:c5:d9:0e:05:1d:eb:fa:21:06:
         22:cc:51:ae:2f:66:40:82:eb:e7:5d:0c:95:36:69:65:86:87:
         00:35:e3:ef:af:8a:b0:30:cf:83:f3:27:b6:9a:cf:88:3f:29:
         4b:aa:df:94:9f:e6:66:d2:dc:eb:40:2b:c6:b1:a7:1a:8d:40:
         2f:90:32:24:8b:65:c9:15:76:6f:a8:d0:c4:77:bf:b7:7d:13:
         f3:86:49:21:72:41:3e:8a:b7:61:0f:2a:6e:f9:d0:9a:18:98:
         80:ea:67:80:cc:05:96:f1:05:70:32:a3:7a:18:f0:b3:d3:bc:
         57:a6:4d:86:e9:6c:0f:c2:a3:d3:b6:d2:42:6a:18:97:ac:86:
         ff:fd:e4:2f:a5:47:1e:9a:35:24:e9:6e:27:bf:3d:cd:5c:fe:
         8e:d7:3a:7f:f4:81:05:01:f7:6b:1f:87:c1:66:37:b3:10:57:
         cd:a6:e6:56:df:74:a4:51:26:62:a8:75:66:43:19:f4:44:94:
         59:c5:39:54:89:89:55:14:f0:e5:0a:bb:7c:ea:15:04:0e:5a:
         95:87:83:aa:46:59:29:4b:c0:ec:7d:8b:15:ce:19:fe:8a:6b:
         7e:5a:1c:58
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYMcx2z2yCmLDgmH9+gvJPRPZVGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y3MUIxQjY4MTJCRjQ2MzcxRDJEQ0I1NzkyM0FGMEEy
REIzOTI3RDAeFw0yNjAxMDYxOTE5MzNaFw0yNzAxMDUxOTI0MzNaMDMxMTAvBgNV
BAMTKDA4NDk4Q0JCRThFMkJCRjM0Q0JDMUI5OEI4MTM0MkNEQkUyODhEQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQpe/HkwRFm9aOiXkNWaNEvx5G
+ADi3+aPI43353rNFmQ1figVmEBGxM+EnpvaLbp8oSh//Pc5XZWGg3RZjT9lTElS
Ol+ud0+nNEpDwM2NxZeMhfR2xCGY/w2ZsWeR83rlgUqjdGm8sCUOxjE+ShnClfhM
C4Yx6DKxBD1r4o+ycsAuqkyGwM+iLT5S9KF1OT2oM3lkUpWRqdvds9Z10BhWfZVy
WetpFT+sdf8aGIEAz6yzk8wpn8Kl3ws/Hf+nqFN3Psf9DKsPFDUaz9DeFKALn01L
/h6urEjg09X1PgtYKVR8js83DbHU+XBxrU2lXhWD36T4oKcEXtC9naOgAR0LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCEmMu+jiu/NMvBuYuBNCzb4ojbEwHwYDVR0j
BBgwFoAUf3GxtoEr9GNx0ty1eSOvCi2zkn0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRkIyRkY2MzdGRjg1MkFCRjExODM4NTZBNDc1RjY0M0JG
RjM4MDJCNzE5NzNENkE3RDA2RDg1NTVCRDdDMEFGLzAvN0Y3MUIxQjY4MTJCRjQ2
MzcxRDJEQ0I1NzkyM0FGMEEyREIzOTI3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjcxQjFCNjgxMkJGNDYzNzFE
MkRDQjU3OTIzQUYwQTJEQjM5MjdELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkZCMkZGNjM3RkY4NTJBQkYxMTgzODU2QTQ3NUY2NDNCRkYzODAyQjcx
OTczRDZBN0QwNkQ4NTU1QkQ3QzBBRi8wLzM0MzUyZTMxMzgzMTJlMzEzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM1MzAzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi21eDAN
BgkqhkiG9w0BAQsFAAOCAQEAYyiV3kn/2cmWmTUPSiO4A8PUetqtqisO3c2uxdkO
BR3r+iEGIsxRri9mQILr510MlTZpZYaHADXj76+KsDDPg/MntprPiD8pS6rflJ/m
ZtLc60ArxrGnGo1AL5AyJItlyRV2b6jQxHe/t30T84ZJIXJBPoq3YQ8qbvnQmhiY
gOpngMwFlvEFcDKjehjws9O8V6ZNhulsD8Kj07bSQmoYl6yG//3kL6VHHpo1JOlu
J789zVz+jtc6f/SBBQH3ax+HwWY3sxBXzabmVt90pFEmYqh1ZkMZ9ESUWcU5VImJ
VRTw5Qq7fOoVBA5alYeDqkZZKUvA7H2LFc4Z/oprflocWA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:03 2026 by rpki-client