This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa
File:                     34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa (raw, json)
Hash identifier:          bjKojhJBPGHl4ub6cWRsVvdzgZ61hGsGykgjJxXheCw=
Subject key identifier:   8B:17:8D:67:D3:0A:87:24:EF:80:47:B6:9F:7B:C9:CB:77:A4:A6:07
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       7253CC60CB9703C8426589C18DB5CCD2AC311C18
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa
Signing time:             Tue 06 Jan 2026 19:22:31 +0000
ROA not before:           Tue 06 Jan 2026 19:17:31 +0000
ROA not after:            Tue 05 Jan 2027 19:22:31 +0000
asID:                     266884
IP address blocks:        45.160.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Feb 2026 17:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:cc:60:cb:97:03:c8:42:65:89:c1:8d:b5:cc:d2:ac:31:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Jan  6 19:17:31 2026 GMT
            Not After : Jan  5 19:22:31 2027 GMT
        Subject: CN=8B178D67D30A8724EF8047B69F7BC9CB77A4A607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:9d:29:17:be:86:82:bb:94:7f:18:f5:9b:
                    e9:bf:82:2f:30:02:59:58:97:e2:ad:1f:bb:0b:48:
                    32:45:b7:ed:e4:14:de:3f:2f:4a:04:d0:c5:72:b0:
                    1e:e0:5d:16:ea:e1:6b:05:71:c7:bd:1b:4c:ae:cf:
                    11:6b:66:c7:40:68:5b:14:9d:2f:be:b5:ff:52:1f:
                    19:13:bb:fd:28:a1:ed:2c:45:d0:66:a5:8f:33:23:
                    2f:f2:4b:74:79:bc:7d:e3:e6:80:89:c4:0c:a7:e4:
                    5b:0b:a2:96:34:ed:58:e6:2e:0b:07:2a:3e:b7:c7:
                    2b:aa:e0:3a:13:5e:8a:1f:af:46:dc:7b:ce:2b:c5:
                    7a:5e:4f:58:18:05:98:a3:32:97:2f:ee:24:01:51:
                    03:f8:bd:52:5c:d4:d8:93:20:10:23:d5:42:1e:e2:
                    24:d5:b8:6a:2b:7c:e6:96:32:d2:2b:1b:6b:5c:e4:
                    04:e7:f0:7f:a5:9c:18:05:85:62:c4:fe:3e:2a:67:
                    41:ea:25:40:57:3f:24:05:96:39:2d:8d:c4:94:25:
                    ed:82:b2:37:eb:62:e3:50:69:c8:15:8f:53:52:f1:
                    6c:39:c7:f7:28:16:93:da:08:f6:e7:39:ab:eb:5c:
                    45:7e:28:e3:0f:85:39:ae:1e:43:ca:fe:67:f9:ad:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:8D:67:D3:0A:87:24:EF:80:47:B6:9F:7B:C9:CB:77:A4:A6:07
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230332e302f32342d3234203d3e20323636383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:b8:3b:b3:21:3d:fa:8a:f4:17:0c:67:2c:27:18:60:85:91:
         00:63:cd:08:60:9a:95:bc:27:fd:f9:58:6d:02:f7:8f:fc:80:
         b0:99:45:28:55:97:f3:4e:34:bf:4e:1c:5e:10:d1:52:19:26:
         cc:1b:d1:58:df:00:7f:7f:52:34:08:5a:6b:93:4b:81:44:a8:
         a6:b8:61:94:80:bc:6a:d8:79:c9:63:b7:93:9f:82:ad:84:69:
         c3:72:7a:52:c8:be:1d:e5:d8:21:4e:7f:8c:69:6b:9f:8a:b9:
         26:e5:e7:41:43:49:31:94:60:f5:ca:bc:c9:98:fc:95:d0:39:
         54:e6:66:2b:94:a4:17:e0:c7:e9:58:44:60:03:b6:a5:e2:8b:
         33:92:69:bb:7a:ea:5c:5e:1b:04:25:59:d6:91:d8:47:98:9e:
         e9:12:4d:43:79:e2:61:03:f5:ef:d0:54:24:09:a3:5b:fb:2d:
         a2:43:10:0b:7f:3d:60:79:db:1b:f0:a4:0e:5c:8a:d2:21:00:
         a4:2e:ec:62:39:67:84:ad:fd:63:ac:92:4e:d4:25:4a:0e:cd:
         bb:5e:8b:a6:c4:8a:ee:f1:d1:79:dc:f6:49:98:08:1d:d1:20:
         42:c3:ff:df:bf:c6:65:84:9c:03:0b:bb:71:be:3b:81:75:16:
         97:4a:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:17:18 2026 by rpki-client