This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa
File:                     34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa (raw, json)
Hash identifier:          hjz0rslP7hHiQKvtSqllZk+Ti18RUAKh55qr9P9/TRA=
Subject key identifier:   8C:56:89:3C:DE:9C:B5:D2:22:81:29:C5:B0:B0:5E:F4:19:BB:45:B5
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       7DD1DB782FA8D39A76A12C788EBFFEF87119A257
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa
Signing time:             Tue 06 Jan 2026 19:22:31 +0000
ROA not before:           Tue 06 Jan 2026 19:17:31 +0000
ROA not after:            Tue 05 Jan 2027 19:22:31 +0000
asID:                     266884
IP address blocks:        45.160.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Feb 2026 17:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d1:db:78:2f:a8:d3:9a:76:a1:2c:78:8e:bf:fe:f8:71:19:a2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Jan  6 19:17:31 2026 GMT
            Not After : Jan  5 19:22:31 2027 GMT
        Subject: CN=8C56893CDE9CB5D2228129C5B0B05EF419BB45B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:02:3f:6a:f5:e9:02:09:27:bd:b7:04:1d:eb:
                    fc:c1:b3:34:23:d3:e2:f1:14:40:2b:81:2a:e1:af:
                    bb:11:de:27:22:e0:be:7b:63:8e:82:f0:61:f6:84:
                    f8:d5:95:8a:d2:6f:ba:66:b5:a3:96:02:46:a4:58:
                    fd:0f:a2:e4:f4:c9:b2:3c:00:f4:24:89:58:25:80:
                    5b:bd:81:c1:a9:5f:42:aa:d7:47:7a:82:86:f9:13:
                    ed:ee:9d:bd:98:ad:8c:af:d6:d0:2b:fc:1d:22:0d:
                    82:f1:78:7f:1a:c3:b3:91:9c:cb:e4:51:a4:c6:2f:
                    b7:28:91:ea:fa:e1:0f:f6:35:ba:37:8d:9a:51:11:
                    70:b2:b4:2f:11:10:c6:db:17:96:fb:31:41:b2:32:
                    58:6c:07:32:c7:b0:9e:b9:15:3a:ba:d7:03:ca:3c:
                    3a:9c:b0:43:23:7d:f3:c3:00:d6:a5:3b:16:e5:52:
                    2a:25:94:44:a1:5b:30:c1:3b:ba:f2:a6:62:13:5d:
                    d0:be:10:8a:6e:0f:17:ad:ef:7d:70:56:ff:fd:a1:
                    42:8d:1f:73:a2:6c:af:5c:51:c9:47:cb:68:16:49:
                    d6:90:65:67:d0:fc:97:a7:22:d7:30:51:b9:b4:76:
                    7b:60:a5:40:c3:c7:1b:02:70:e8:ec:87:6a:e8:7f:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:56:89:3C:DE:9C:B5:D2:22:81:29:C5:B0:B0:5E:F4:19:BB:45:B5
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230302e302f32342d3234203d3e20323636383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:db:9b:6e:6c:f1:03:e2:e1:06:c7:a7:4a:2e:d9:1a:e7:fe:
         cf:a5:f7:66:0d:70:c2:36:77:3e:0b:64:2b:85:3b:c6:c0:d1:
         dd:ab:1b:81:e4:ec:4a:78:4e:e9:97:e9:24:8c:fb:76:ca:e3:
         7a:b4:92:bc:a6:13:84:b2:fe:63:c6:4e:d9:5b:62:70:8f:3a:
         a1:9d:e2:ba:aa:82:b3:bd:67:08:e7:e6:2c:ed:4e:a7:b7:e0:
         74:2f:b1:b9:f3:b5:0c:27:a9:00:bb:4e:c0:8f:14:47:ea:c3:
         65:86:17:9c:e9:50:16:18:30:0a:d7:5a:d0:35:c7:45:32:f0:
         ef:69:d7:fd:eb:40:b3:12:a0:26:9e:39:83:01:92:c3:b4:cf:
         10:63:4b:1c:32:89:47:53:1e:ea:77:8b:7a:21:e9:5b:29:21:
         96:94:6e:f1:cd:b7:b0:32:0c:43:70:17:93:c3:a4:a6:00:34:
         28:4b:3b:6e:4c:78:0d:a4:15:76:b3:f8:f0:05:3f:ad:10:5f:
         ec:24:c2:ec:9b:df:b0:40:74:86:a7:25:89:64:84:f2:23:af:
         95:1e:64:79:d0:23:55:8a:f4:6e:e7:75:3a:51:53:a8:78:1e:
         b8:87:ab:85:dc:a3:e7:99:db:de:3a:4a:78:b5:b5:7e:1e:98:
         1e:37:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:17:19 2026 by rpki-client