This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa
File:                     34352e36382e33312e302f32342d3234203d3e20323732383036.roa (raw, json)
Hash identifier:          FT9n4RNi4DhwLxSwX6uD/PYlP+qB9v34akKpJMuyQZw=
Subject key identifier:   57:9D:96:9F:94:00:82:78:6F:F5:52:AE:D9:7D:62:91:21:69:EA:A4
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       302510DDDB1E4DE71BCD3A0D6E3C8BB74CC9A4E5
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa
Signing time:             Tue 06 Jan 2026 19:27:23 +0000
ROA not before:           Tue 06 Jan 2026 19:22:23 +0000
ROA not after:            Tue 05 Jan 2027 19:27:23 +0000
asID:                     272806
IP address blocks:        45.68.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 10:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:25:10:dd:db:1e:4d:e7:1b:cd:3a:0d:6e:3c:8b:b7:4c:c9:a4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Jan  6 19:22:23 2026 GMT
            Not After : Jan  5 19:27:23 2027 GMT
        Subject: CN=579D969F940082786FF552AED97D62912169EAA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:40:e2:f7:d7:32:d8:cd:57:80:ea:ba:ee:
                    f8:5d:cc:cc:30:0f:31:3c:51:87:0f:48:f3:bd:11:
                    0f:d1:c4:7b:c8:ca:2b:03:a7:79:37:96:73:4f:68:
                    30:9e:7f:f5:53:cd:cb:0b:41:18:8e:57:87:b5:2d:
                    b8:54:f4:a6:91:3d:0e:77:41:39:e6:2c:e3:59:8d:
                    15:15:06:17:fc:60:d1:6d:c1:06:4a:8f:18:77:b6:
                    ff:53:b9:c6:6d:12:14:02:91:c6:71:97:f6:38:d4:
                    0c:42:7e:e7:f2:4a:d5:d3:14:ac:18:df:79:2f:10:
                    57:3b:89:4e:a4:80:43:37:7d:07:a9:c2:d9:32:8c:
                    a4:31:8c:de:67:7a:17:96:b9:f9:b5:ad:8d:25:2a:
                    17:5e:f1:43:57:c1:a8:fa:71:50:35:61:eb:70:95:
                    c1:70:a1:b1:93:60:bb:88:18:78:a3:c9:b4:f5:13:
                    df:08:88:be:0f:f3:79:fc:7a:3c:dd:8d:2d:d5:df:
                    f3:44:f8:4b:c6:a2:bc:86:a1:05:10:5f:1b:15:95:
                    79:0f:31:5a:1e:16:03:83:61:53:97:57:a4:0b:73:
                    04:58:87:5e:9b:53:2e:62:e2:af:73:3c:7d:fc:4f:
                    73:13:18:d2:7a:f6:5a:95:9a:d3:86:d7:d5:d3:1c:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:96:9F:94:00:82:78:6F:F5:52:AE:D9:7D:62:91:21:69:EA:A4
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:00:b4:48:1e:71:f6:95:bc:74:1b:54:43:22:a8:25:e1:
         80:6a:39:df:92:d9:ee:66:ad:d4:1f:e5:ac:68:31:7d:e9:c6:
         32:7d:10:24:30:cc:4f:8f:d9:85:60:56:74:ec:ce:55:3e:dd:
         2e:24:bd:86:69:b2:53:d8:fb:ef:c8:35:a7:36:12:99:7c:2d:
         e2:e1:d6:42:d1:91:e1:41:f3:b9:39:9c:78:99:8e:a0:50:bd:
         b3:8a:73:fe:9d:00:9f:1e:c6:b7:8f:e4:cb:66:50:0c:1d:76:
         7b:56:dd:3e:b1:e1:2f:ed:56:61:17:db:a4:29:9b:61:5b:2d:
         ae:02:18:86:2c:56:70:ac:91:f0:c3:47:77:db:bb:0a:51:de:
         44:73:e5:93:55:8c:96:c8:41:fd:bb:d3:47:67:2c:9d:84:17:
         7d:84:96:2a:2a:ad:13:7a:52:74:ea:c0:7c:20:9e:23:51:da:
         dd:90:65:dd:a8:60:49:ae:a4:fb:74:c4:8b:24:77:2d:62:e0:
         10:cd:de:a9:d3:9a:6d:40:15:f4:38:1b:4e:c0:67:5f:6b:f6:
         3e:27:f8:6b:bd:e6:7c:da:95:fe:1d:74:8f:9f:af:8f:17:80:
         67:ef:79:1b:6c:8f:cd:73:c1:bb:82:bb:70:b4:50:54:95:ba:
         38:0d:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:53 2026 by rpki-client