This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/34352e3233362e3130302e302f32322d3234203d3e20323636383036.roa
File:                     34352e3233362e3130302e302f32322d3234203d3e20323636383036.roa (raw, json)
Hash identifier:          GqZsTpru7wYJHknIHedfeRl1iuUpbiibh4MZZ8tjf90=
Subject key identifier:   6E:83:B3:B0:78:8D:5B:CA:E6:8B:16:75:7C:B4:4A:ED:D4:FE:A3:33
Certificate issuer:       /CN=848C7E4D8C401E559DFC0CDD58C6C52E0D14720B
Certificate serial:       2AE19E0674C9F39843EBC2BA764169EBAC269643
Authority key identifier: 84:8C:7E:4D:8C:40:1E:55:9D:FC:0C:DD:58:C6:C5:2E:0D:14:72:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/34352e3233362e3130302e302f32322d3234203d3e20323636383036.roa
Signing time:             Tue 06 Jan 2026 19:11:00 +0000
ROA not before:           Tue 06 Jan 2026 19:06:00 +0000
ROA not after:            Tue 05 Jan 2027 19:11:00 +0000
asID:                     266806
IP address blocks:        45.236.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e1:9e:06:74:c9:f3:98:43:eb:c2:ba:76:41:69:eb:ac:26:96:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848C7E4D8C401E559DFC0CDD58C6C52E0D14720B
        Validity
            Not Before: Jan  6 19:06:00 2026 GMT
            Not After : Jan  5 19:11:00 2027 GMT
        Subject: CN=6E83B3B0788D5BCAE68B16757CB44AEDD4FEA333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:06:c7:c7:87:be:cb:53:ed:95:bc:31:5e:
                    fa:26:f5:eb:7e:33:3b:25:af:69:2f:cc:d0:70:ea:
                    a4:7e:2e:d2:bc:be:b9:a9:b7:78:57:37:1a:16:65:
                    e8:99:06:f4:62:10:91:b1:6b:9e:2b:76:a2:3c:1f:
                    19:82:45:df:bb:95:3a:91:30:09:73:3f:48:d6:2d:
                    a6:fd:0c:28:ef:76:1e:8f:66:24:df:46:ab:ed:cf:
                    10:7e:d4:08:5f:09:ea:ef:ef:84:8c:da:8d:e3:a8:
                    a4:61:8a:31:cb:47:df:0b:53:1f:fb:41:ef:b3:b3:
                    65:4a:ea:85:2c:75:c3:e8:12:7c:a9:02:d5:65:07:
                    c7:d4:b8:bf:b5:9c:a3:34:34:96:c8:99:b4:2c:b2:
                    9a:42:1f:b0:61:57:bd:c8:53:f4:c8:28:c9:34:85:
                    d3:d8:47:1e:99:41:d9:00:5a:c2:80:1b:b8:d8:ce:
                    f2:8d:ec:c6:18:9e:d0:f5:2c:52:40:5b:a3:14:44:
                    47:42:7e:d2:98:98:c8:a8:1b:2f:55:11:ed:54:96:
                    1a:13:76:d4:e3:7c:2c:0b:0a:6c:f2:00:ac:6d:9b:
                    61:55:be:50:3d:22:17:fb:d0:4a:2f:57:35:0a:af:
                    54:2a:50:c8:93:f0:8f:34:1d:68:52:a6:25:ca:c8:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:B3:B0:78:8D:5B:CA:E6:8B:16:75:7C:B4:4A:ED:D4:FE:A3:33
            X509v3 Authority Key Identifier:
                keyid:84:8C:7E:4D:8C:40:1E:55:9D:FC:0C:DD:58:C6:C5:2E:0D:14:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/848C7E4D8C401E559DFC0CDD58C6C52E0D14720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36032D9C45C77A50E501E46DE204FEB68E12E3A451AE5A69D55DB0A1B5B0E3F5/0/34352e3233362e3130302e302f32322d3234203d3e20323636383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:e0:8a:55:32:5b:0f:ab:9c:5e:a1:25:30:80:1d:70:94:
         3a:58:5b:15:57:83:dd:68:90:37:a1:1c:bd:9d:11:1c:34:a0:
         74:4c:49:64:01:53:28:4a:e0:45:10:1c:8d:5a:3d:aa:49:67:
         79:e7:71:aa:58:29:15:55:25:8f:bd:7f:76:b3:b7:ba:87:63:
         29:b5:71:7a:e7:a6:69:f7:66:6c:15:41:12:c2:38:52:e9:d6:
         9c:40:18:ea:3a:26:c3:26:b4:19:e4:2b:6b:26:bf:0d:e3:60:
         ba:86:94:7b:f8:d8:d2:e2:46:fc:31:b3:87:2b:8b:4b:fb:b4:
         97:c1:e1:9d:9b:f8:f4:aa:9a:db:cd:6d:65:65:aa:17:77:97:
         8f:c9:ea:c8:40:c6:60:77:12:e8:d6:89:e6:77:e2:dd:06:09:
         a1:14:cd:47:ab:47:08:fd:6f:4d:ed:ae:95:13:1a:2c:8a:42:
         f5:57:cd:32:7a:d6:3c:24:c4:cc:8a:35:5e:15:60:ae:03:0b:
         7a:3a:e0:3d:6f:7b:42:d1:c8:99:da:f3:38:2d:a2:4b:84:d8:
         55:72:81:9b:b3:36:ba:2b:96:9d:eb:2e:14:4a:02:2d:ec:70:
         57:e4:60:e3:c8:1e:7d:b5:ae:26:1c:52:61:d5:70:8c:5e:36:
         dc:99:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:00 2026 by rpki-client