This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa
File:                     34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa (raw, json)
Hash identifier:          ywvxnbZv2hN/87hUSvjeQZf8z78RVkHYPBLADdUjqUs=
Subject key identifier:   62:F4:88:E0:67:9A:1A:32:6D:D2:D5:DE:3A:32:C1:81:5D:00:A8:42
Certificate issuer:       /CN=1F1ACF357F348642F94FD093D208BB296CB9D290
Certificate serial:       714E78CA52AD916DCE3E50F03867AEBE3FA33458
Authority key identifier: 1F:1A:CF:35:7F:34:86:42:F9:4F:D0:93:D2:08:BB:29:6C:B9:D2:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F1ACF357F348642F94FD093D208BB296CB9D290.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa
Signing time:             Tue 06 Jan 2026 19:30:01 +0000
ROA not before:           Tue 06 Jan 2026 19:25:01 +0000
ROA not after:            Tue 05 Jan 2027 19:30:01 +0000
asID:                     266855
IP address blocks:        45.239.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/1F1ACF357F348642F94FD093D208BB296CB9D290.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/1F1ACF357F348642F94FD093D208BB296CB9D290.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F1ACF357F348642F94FD093D208BB296CB9D290.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:78:ca:52:ad:91:6d:ce:3e:50:f0:38:67:ae:be:3f:a3:34:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F1ACF357F348642F94FD093D208BB296CB9D290
        Validity
            Not Before: Jan  6 19:25:01 2026 GMT
            Not After : Jan  5 19:30:01 2027 GMT
        Subject: CN=62F488E0679A1A326DD2D5DE3A32C1815D00A842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:81:43:9f:43:e1:a9:c9:fe:5c:59:19:0e:
                    ff:5c:c5:a7:48:f1:88:25:e5:5a:e2:02:10:3b:53:
                    98:11:4a:ac:a2:c1:2e:92:e3:5e:0b:7e:a0:c7:1a:
                    49:47:80:98:65:ec:d5:ac:2b:0e:ef:c6:cb:af:98:
                    65:80:78:f4:87:42:94:c5:55:da:4b:b4:07:77:df:
                    2c:3d:cc:9d:b1:4d:df:c8:6c:b4:42:69:67:da:fc:
                    0b:9f:a3:99:ba:29:66:d7:95:95:30:10:3f:f5:90:
                    0e:58:2c:b6:da:4e:45:9f:70:c2:e2:10:43:97:c4:
                    7c:e7:3c:5d:ac:39:a5:09:b0:f7:17:ec:ac:b9:c8:
                    20:53:ff:2d:56:be:32:93:ef:f9:35:0d:b6:b6:dd:
                    c2:a7:16:b7:1d:de:ac:8b:30:ff:1f:f1:dd:ce:85:
                    4f:4b:8a:97:48:34:16:6b:96:0d:d4:8e:35:44:c1:
                    92:df:db:6a:b7:04:93:74:1b:b6:d1:96:8d:b9:27:
                    b6:9b:1a:09:43:ce:71:55:70:6e:2f:ca:ee:39:e2:
                    90:1e:d2:d7:90:1e:b6:86:1a:10:0f:db:1c:8a:5a:
                    3a:52:34:2c:02:59:12:c0:2d:b5:be:a8:0f:15:24:
                    8b:ea:f0:08:25:b6:ea:40:e8:c2:15:46:78:dd:10:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:88:E0:67:9A:1A:32:6D:D2:D5:DE:3A:32:C1:81:5D:00:A8:42
            X509v3 Authority Key Identifier:
                keyid:1F:1A:CF:35:7F:34:86:42:F9:4F:D0:93:D2:08:BB:29:6C:B9:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/1F1ACF357F348642F94FD093D208BB296CB9D290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F1ACF357F348642F94FD093D208BB296CB9D290.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:12:59:a2:34:db:a9:78:1b:25:22:23:04:50:cd:ff:cf:98:
         a0:2d:a7:9a:62:d8:35:7e:0c:86:a4:58:b6:1d:06:c2:75:d9:
         49:1d:45:71:04:d6:3d:18:aa:1e:0c:77:5a:e6:b9:0d:ac:30:
         82:15:e4:8e:16:e0:2c:23:51:e2:c8:82:21:6c:32:b2:85:b0:
         3d:64:b9:af:b8:ba:13:fa:f8:13:9f:13:49:59:bb:e5:41:bc:
         c7:c3:99:6e:51:e7:48:52:36:d6:8a:7c:18:b9:94:44:e0:55:
         45:c0:48:fb:05:80:f8:36:a9:ae:94:a3:0a:fb:5c:ed:3e:f4:
         15:3d:f6:c7:ab:61:f1:18:ff:d0:db:f4:95:56:ab:c3:ec:73:
         da:14:bc:ed:a3:76:6f:1f:52:31:9b:72:52:f7:51:f1:fc:44:
         61:88:fc:0c:11:94:a5:17:8e:7c:1a:b4:cb:62:32:03:05:f0:
         80:b8:ae:d4:2a:be:10:ac:f9:19:52:0b:30:da:40:67:8a:fc:
         5c:05:c6:7e:eb:16:39:ac:ff:15:e3:8e:17:71:10:7d:e9:5d:
         13:4d:1a:fe:a9:6f:8c:2c:07:48:1b:9c:e5:03:0a:4f:f0:c2:
         50:53:a9:7c:ef:57:73:61:38:ee:cb:c5:7c:b7:47:c8:a0:3e:
         2e:37:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:17:09 2026 by rpki-client