This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa
File:                     34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa (raw, json)
Hash identifier:          0Ymp1Lbk/KsPvoLZmIOGvY1lMLjXX691mU3BvhHuELg=
Subject key identifier:   C1:06:BD:84:E9:AB:D5:46:92:A8:33:8A:97:76:1F:E3:7C:C0:4A:83
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       160C8B901CCBCB0771EA7302A1D978EB39B867A1
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa
Signing time:             Tue 06 Jan 2026 19:22:30 +0000
ROA not before:           Tue 06 Jan 2026 19:17:30 +0000
ROA not after:            Tue 05 Jan 2027 19:22:30 +0000
asID:                     266884
IP address blocks:        45.160.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Feb 2026 17:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0c:8b:90:1c:cb:cb:07:71:ea:73:02:a1:d9:78:eb:39:b8:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Jan  6 19:17:30 2026 GMT
            Not After : Jan  5 19:22:30 2027 GMT
        Subject: CN=C106BD84E9ABD54692A8338A97761FE37CC04A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:aa:0d:ab:b9:24:78:3b:61:7f:17:3f:8d:
                    37:e6:1a:b3:60:9e:11:90:37:a1:5f:1c:29:a8:76:
                    13:92:03:e7:2d:63:d8:b6:79:2c:2f:3e:97:54:50:
                    33:52:91:4f:0a:de:da:d8:5f:34:41:7c:b8:23:7a:
                    be:da:cf:95:d5:bf:a6:95:54:29:9e:e4:bf:2a:af:
                    39:bb:c1:4f:9a:6d:05:b0:f3:34:eb:2b:96:d0:88:
                    8b:89:60:93:22:69:74:22:fc:ec:e5:9d:fc:0f:4b:
                    bd:71:0b:49:93:21:92:54:d2:7f:17:9e:db:8e:c4:
                    8b:03:2e:07:9a:50:41:86:7f:70:21:d9:19:6b:e0:
                    28:17:d8:af:10:4f:66:ff:54:7e:a6:33:1e:66:2b:
                    fc:d0:ae:68:d9:22:d6:4e:0f:c4:15:c7:21:a3:62:
                    11:9d:1f:11:a1:63:fb:a5:40:a7:ef:fa:cd:85:ad:
                    98:03:8d:6d:a3:a9:3d:73:26:88:57:00:39:ab:4e:
                    50:d1:af:0a:20:ad:01:75:42:cd:2f:e1:c1:fe:56:
                    34:d9:57:88:45:c0:01:bb:97:84:ef:8f:e5:8f:3a:
                    e5:b7:2a:ae:d4:7a:dc:f1:9a:f5:d2:5a:c5:98:9b:
                    47:d2:c6:03:bf:fc:52:c2:e4:7a:f7:b9:49:2e:ea:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:BD:84:E9:AB:D5:46:92:A8:33:8A:97:76:1F:E3:7C:C0:4A:83
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32322d3232203d3e20323636383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:f8:f0:55:a7:67:c3:fb:09:c9:df:3f:f0:4d:a5:67:92:1f:
         c9:19:4a:0b:d1:85:ca:83:1c:43:6f:64:89:30:d4:1f:cb:c0:
         dc:4f:11:19:62:9d:a6:92:ac:52:ed:eb:c8:2f:cb:ba:3a:92:
         4e:a0:a9:10:0f:b5:c5:87:39:3c:49:ee:10:88:dc:6a:96:60:
         19:a2:f3:72:1b:dd:73:94:39:17:62:5a:9d:cd:cf:04:d5:74:
         4a:e3:35:ee:57:5b:f0:80:aa:98:36:a6:56:42:d5:7c:a7:5d:
         52:2c:3e:97:ad:f0:f4:64:0f:f6:49:3b:76:b8:48:95:00:8c:
         5c:f8:37:17:40:bc:7b:29:01:96:72:2b:ca:a6:0a:44:29:82:
         c5:92:40:9e:51:32:16:85:87:78:2a:d7:58:8d:df:24:31:7e:
         72:7e:fd:c9:c3:51:b9:e2:bb:17:67:2e:c5:55:71:2a:cf:b1:
         6f:06:53:30:81:34:b5:a9:cd:c6:b2:40:e4:17:97:d4:84:00:
         96:72:77:16:f2:80:f2:1b:f2:0e:60:98:bf:11:64:2b:22:f0:
         36:8e:2f:65:19:f9:b5:0e:fb:a1:d7:3e:e7:83:f0:8f:5d:91:
         91:1f:07:6d:34:c7:fb:5a:1d:f9:72:3a:3c:f0:b0:05:d9:52:
         0c:2e:ad:e6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFgyLkBzLywdx6nMCodl46zm4Z6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBOTFFOThDOTBDMjVEMTgyMjJFMjlBOTJDNERBOUNB
MDBEQTQyMTAeFw0yNjAxMDYxOTE3MzBaFw0yNzAxMDUxOTIyMzBaMDMxMTAvBgNV
BAMTKEMxMDZCRDg0RTlBQkQ1NDY5MkE4MzM4QTk3NzYxRkUzN0NDMDRBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOqoNq7kkeDthfxc/jTfmGrNg
nhGQN6FfHCmodhOSA+ctY9i2eSwvPpdUUDNSkU8K3trYXzRBfLgjer7az5XVv6aV
VCme5L8qrzm7wU+abQWw8zTrK5bQiIuJYJMiaXQi/OzlnfwPS71xC0mTIZJU0n8X
ntuOxIsDLgeaUEGGf3Ah2Rlr4CgX2K8QT2b/VH6mMx5mK/zQrmjZItZOD8QVxyGj
YhGdHxGhY/ulQKfv+s2FrZgDjW2jqT1zJohXADmrTlDRrwogrQF1Qs0v4cH+VjTZ
V4hFwAG7l4Tvj+WPOuW3Kq7UetzxmvXSWsWYm0fSxgO//FLC5Hr3uUku6pg5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwQa9hOmr1UaSqDOKl3Yf43zASoMwHwYDVR0j
BBgwFoAUh6kemMkMJdGCIuKaksTanKANpCEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTg4MUYwOTkyNDM5M0E3QjlEODk5NzEwMUIwQUVEMzc3
QkJCOEQ2MUREMDg1NzE5RTNCQTJGMzhFMzczN0E5LzAvODdBOTFFOThDOTBDMjVE
MTgyMjJFMjlBOTJDNERBOUNBMDBEQTQyMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84N0E5MUU5OEM5MEMyNUQxODIy
MkUyOUE5MkM0REE5Q0EwMERBNDIxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4ODFGMDk5MjQzOTNBN0I5RDg5OTcxMDFCMEFFRDM3N0JCQjhENjFE
RDA4NTcxOUUzQkEyRjM4RTM3MzdBOS8wLzM0MzUyZTMxMzYzMDJlMzIzMDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2MzgzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLaDI
MA0GCSqGSIb3DQEBCwUAA4IBAQC4+PBVp2fD+wnJ3z/wTaVnkh/JGUoL0YXKgxxD
b2SJMNQfy8DcTxEZYp2mkqxS7evIL8u6OpJOoKkQD7XFhzk8Se4QiNxqlmAZovNy
G91zlDkXYlqdzc8E1XRK4zXuV1vwgKqYNqZWQtV8p11SLD6XrfD0ZA/2STt2uEiV
AIxc+DcXQLx7KQGWcivKpgpEKYLFkkCeUTIWhYd4KtdYjd8kMX5yfv3Jw1G54rsX
Zy7FVXEqz7FvBlMwgTS1qc3GskDkF5fUhACWcncW8oDyG/IOYJi/EWQrIvA2ji9l
Gfm1Dvuh1z7ng/CPXZGRHwdtNMf7Wh35cjo88LAF2VIMLq3m
-----END CERTIFICATE-----
Generated at Tue Feb 3 08:17:19 2026 by rpki-client