This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa
File:                     34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          IUDy1qFxCUxDD8iUvoJuPvjSbIRaxFHfuB6FHvTVPBU=
Subject key identifier:   D6:6C:71:00:6E:3D:37:52:71:64:EA:4D:73:DA:96:FA:7A:9D:5C:56
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       24BBDFD8BAC622592124967D28BB5A73FF015713
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa
Signing time:             Tue 06 Jan 2026 19:44:18 +0000
ROA not before:           Tue 06 Jan 2026 19:39:18 +0000
ROA not after:            Tue 05 Jan 2027 19:44:18 +0000
asID:                     265554
IP address blocks:        45.170.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bb:df:d8:ba:c6:22:59:21:24:96:7d:28:bb:5a:73:ff:01:57:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: Jan  6 19:39:18 2026 GMT
            Not After : Jan  5 19:44:18 2027 GMT
        Subject: CN=D66C71006E3D37527164EA4D73DA96FA7A9D5C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:12:00:1e:24:9f:cc:b8:e7:f4:36:f8:30:
                    82:ab:18:3b:c9:39:b0:3f:76:08:b6:e5:8d:93:66:
                    b5:4b:a7:38:c4:86:05:99:29:a5:3c:7e:fc:10:a6:
                    11:d6:3d:82:9b:85:31:74:b8:a4:30:ce:6d:86:fa:
                    1d:af:22:e9:60:f7:df:fc:cc:fb:9a:9a:6d:41:2b:
                    83:21:cc:eb:4b:4b:44:9f:a1:1a:f0:ef:b7:7f:4b:
                    a2:d3:c3:e3:bb:c6:1d:e5:f7:c0:c4:d3:27:88:5f:
                    d1:e7:ad:9e:2e:58:1b:6b:b8:90:c0:49:46:cb:e9:
                    64:92:fa:b7:ae:4c:bb:de:af:4e:ac:45:92:e6:a4:
                    51:49:d9:6a:6b:52:b0:53:46:00:85:93:a0:2b:f2:
                    7e:b2:22:9d:57:3e:b8:fd:f7:20:57:5f:0a:e4:83:
                    6a:de:06:22:4e:8f:ba:68:ee:7a:16:77:96:a2:0e:
                    86:a7:1d:ff:8c:13:8d:bf:e5:d2:0b:62:80:3b:7d:
                    c1:9e:2e:84:ca:2f:55:5f:04:4c:02:e8:57:9c:44:
                    3b:68:48:58:23:d4:a7:21:43:f7:30:62:7d:51:99:
                    18:c7:3b:bc:67:c1:38:0e:fa:94:51:41:67:8b:22:
                    50:9c:f9:75:6f:10:59:08:d9:ca:fa:c0:7a:13:97:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:71:00:6E:3D:37:52:71:64:EA:4D:73:DA:96:FA:7A:9D:5C:56
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:db:f4:b7:a0:d0:21:87:17:e6:15:17:ce:d0:98:3f:31:
         c0:51:e0:fc:ae:36:ab:a2:ed:cf:b4:c6:08:5f:bf:1e:9f:f9:
         fa:45:76:2d:90:36:43:89:04:77:89:30:79:d8:70:5b:1b:34:
         7e:aa:f6:0f:66:b7:79:36:6a:50:76:d7:2c:33:6d:d0:3c:d2:
         64:91:63:3c:17:99:fe:e0:5d:60:ce:84:fa:8e:0d:f4:3e:71:
         1b:74:aa:64:73:09:70:a8:96:2d:c1:22:34:43:a0:40:cc:21:
         ce:7a:e4:cf:ff:d6:ee:e3:30:c1:90:97:a9:03:3d:c6:36:c4:
         11:75:b1:14:bb:9e:c0:ea:38:d4:f7:02:c2:03:43:24:34:44:
         25:0a:99:f5:ea:32:e5:67:c5:db:56:68:bc:a5:90:ef:40:99:
         64:16:ea:bf:c1:4a:70:a9:46:08:9e:29:a6:af:2e:7c:0a:d1:
         c1:5a:16:84:ea:39:59:b6:81:d3:d4:1a:d9:c7:a7:90:4d:6d:
         c2:ac:aa:db:32:5d:c0:39:35:05:33:b3:08:ff:e7:52:9f:8c:
         91:72:13:23:f6:a4:3f:55:dd:61:f4:58:d2:a1:8f:21:46:ea:
         9d:92:b8:c7:df:cd:55:be:5b:bb:2a:18:a9:3c:8d:74:aa:74:
         ce:f5:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:00:04 2026 by rpki-client