This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa
File:                     34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa (raw, json)
Hash identifier:          tyf9GZOc30mtKH6oktEmuGwny2gcHaVji/0Vl0bRX7E=
Subject key identifier:   81:3A:E5:4E:8C:1E:34:C6:34:CA:7E:5B:C0:A4:18:10:C9:9D:15:43
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       7CE2363A619C81BE0177629D99CFE26FC2CBFA1D
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa
Signing time:             Fri 26 Dec 2025 17:56:09 +0000
ROA not before:           Fri 26 Dec 2025 17:51:09 +0000
ROA not after:            Fri 25 Dec 2026 17:56:09 +0000
asID:                     266832
IP address blocks:        45.238.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e2:36:3a:61:9c:81:be:01:77:62:9d:99:cf:e2:6f:c2:cb:fa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Dec 26 17:51:09 2025 GMT
            Not After : Dec 25 17:56:09 2026 GMT
        Subject: CN=813AE54E8C1E34C634CA7E5BC0A41810C99D1543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:04:85:24:43:7a:41:8c:ee:92:a7:56:8b:
                    f6:49:4c:50:dc:23:60:4f:1a:e2:68:e0:c9:73:4c:
                    db:02:77:cb:e2:1b:4a:0b:0a:9e:ec:83:63:3c:6e:
                    ad:29:c4:2d:88:2f:0b:5e:e6:d7:93:7d:2e:ed:2f:
                    41:1d:cd:df:0f:fd:8c:eb:95:f5:10:4d:83:ab:e7:
                    94:30:b7:aa:63:8d:88:70:a3:26:31:5d:35:e2:ce:
                    25:51:e3:9c:72:e9:b8:6b:c7:28:59:8e:1e:9f:09:
                    36:a2:24:7f:a7:1d:d9:db:05:9a:c9:fb:d5:69:f0:
                    d9:b9:90:b1:92:1a:50:7d:6d:9a:8a:77:ee:83:bc:
                    9b:f8:c8:b6:37:0b:51:b3:d7:3e:69:89:90:46:75:
                    4f:cc:fa:02:82:58:0f:e8:64:76:b3:85:16:5b:d2:
                    64:e0:23:8d:33:6b:10:32:28:b7:5c:3d:4b:c7:7d:
                    1c:2e:ca:19:47:f6:32:2c:28:80:51:bc:c0:c8:54:
                    a9:09:17:e7:e9:f3:29:39:19:4a:dd:80:ee:4d:5f:
                    72:25:0e:9d:d6:1d:d8:95:0a:a3:ae:a0:b2:10:20:
                    1a:a5:6a:1f:25:13:df:5c:3e:d2:9b:ef:e8:f0:61:
                    7c:f9:6a:a8:1a:3f:de:e6:a8:fe:20:dd:9e:cd:28:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:E5:4E:8C:1E:34:C6:34:CA:7E:5B:C0:A4:18:10:C9:9D:15:43
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32322d3232203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:4a:cc:9e:29:5f:51:f9:20:a8:c9:1e:66:c5:cc:43:74:67:
         68:66:22:2c:5a:13:c4:7e:a2:5e:27:b1:63:00:f7:f6:c4:16:
         83:bc:c5:2c:54:13:a6:eb:8d:57:66:dc:51:a2:1b:13:03:8f:
         ac:71:6f:3f:f3:a1:4a:05:35:cb:4b:23:5f:db:d8:4e:83:0c:
         bf:e4:e7:e7:f5:7d:96:07:be:76:13:8b:aa:09:11:bb:db:4e:
         35:75:b5:96:d7:f7:a7:67:22:2b:bb:e2:53:64:bb:24:0a:8e:
         09:86:47:14:aa:d9:9b:21:bc:2a:72:da:a5:2d:2a:9b:c4:56:
         76:79:23:52:a0:6c:48:2b:80:40:83:ae:19:fe:3a:3f:af:9a:
         e3:f5:51:55:e5:48:9a:80:27:3d:fe:07:0e:c0:dd:97:49:13:
         1e:db:58:6f:4f:aa:c1:2d:0b:29:c2:d2:2e:f8:aa:e6:02:9e:
         b3:99:1b:05:9f:6a:0d:b8:f5:3e:f0:cf:63:60:81:70:4b:4a:
         20:26:71:32:c0:25:61:a3:43:5b:49:46:fe:da:58:df:80:ad:
         eb:9d:87:cb:2c:3e:50:59:ce:5e:35:19:e3:5b:61:04:32:e6:
         4c:ad:ed:35:d6:56:a8:43:cc:19:17:0c:d1:de:86:a3:79:a9:
         8f:d4:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:01:36 2026 by rpki-client