This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa
File:                     34352e3232342e32302e302f32332d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          PkhNN/2qO0Swlj7pTJPP3+8MkPvJbOzW0pG3x/r7eyg=
Subject key identifier:   7C:31:05:3B:51:6C:21:4D:92:F5:A7:E5:DB:91:DB:70:BC:0A:57:55
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       3F445CB5AEA55FE6101FB7B7C5B3B815658407AD
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa
Signing time:             Tue 06 Jan 2026 19:13:14 +0000
ROA not before:           Tue 06 Jan 2026 19:08:14 +0000
ROA not after:            Tue 05 Jan 2027 19:13:14 +0000
asID:                     264668
IP address blocks:        45.224.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:5c:b5:ae:a5:5f:e6:10:1f:b7:b7:c5:b3:b8:15:65:84:07:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Jan  6 19:08:14 2026 GMT
            Not After : Jan  5 19:13:14 2027 GMT
        Subject: CN=7C31053B516C214D92F5A7E5DB91DB70BC0A5755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:9c:f7:1c:23:4b:39:d1:a1:96:3c:7c:6f:
                    e4:c2:8e:1a:f4:16:16:50:e7:04:47:f7:2d:54:ca:
                    c4:17:e1:01:cf:f8:2d:66:b2:25:0f:43:89:8c:82:
                    ff:12:12:d5:55:d3:91:71:ed:61:e1:7a:0f:58:00:
                    f6:96:62:ae:44:ef:87:87:7f:e5:6b:2e:29:db:9a:
                    c9:36:fc:0b:2c:36:0a:f4:8f:a3:d5:1e:ab:03:8e:
                    ec:97:78:49:70:c5:8e:64:04:a9:e5:44:a5:0f:6f:
                    dc:ee:2d:42:1e:f3:81:d7:05:d5:30:68:fb:a5:84:
                    04:0d:48:5e:f5:2b:85:f1:35:9e:7e:9c:a9:66:d7:
                    59:3a:de:3a:d7:29:eb:e5:7c:f0:d1:7f:52:b0:26:
                    a8:92:b3:22:b5:aa:3b:95:90:89:50:90:67:c1:1d:
                    cc:18:41:29:df:3d:a8:25:fb:cc:85:60:91:0d:20:
                    13:52:b3:3a:4e:ed:82:ac:0a:d5:71:d9:6d:9d:46:
                    01:f7:bd:2c:d2:e0:e6:ba:7a:c5:a0:76:b0:02:44:
                    cb:27:5a:1a:8e:16:a6:cd:ac:76:60:f3:3a:dd:30:
                    b1:1b:13:71:40:00:d6:13:bc:a1:04:f6:91:1e:5a:
                    77:26:98:0d:f5:bd:e6:e8:23:42:c4:e3:c0:b9:b3:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:31:05:3B:51:6C:21:4D:92:F5:A7:E5:DB:91:DB:70:BC:0A:57:55
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32302e302f32332d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:87:42:a5:7d:88:58:1d:64:24:f1:a7:b7:7b:d4:e6:56:40:
         0a:c2:b1:c0:31:76:b1:b0:9f:ac:d5:70:43:37:21:64:40:32:
         47:26:3d:79:14:8f:c1:d8:fb:79:61:73:cd:6c:0b:ae:e5:45:
         40:45:02:db:0d:c9:89:ee:18:bc:4e:b0:08:10:41:d9:b1:51:
         ae:3a:70:30:8c:c4:2d:ba:46:35:ad:f9:70:53:50:25:4b:7a:
         89:7e:be:ff:43:8f:06:05:03:a1:81:b0:70:09:6f:20:dd:2a:
         88:b6:be:60:33:f6:96:ed:a8:db:06:a0:ae:e5:91:dc:76:b7:
         52:b7:70:95:7f:48:92:0b:0f:b8:18:be:ca:ee:63:a4:c4:13:
         25:9c:70:c6:0b:a3:39:12:63:db:42:e7:5c:e7:48:81:6e:b0:
         e9:3e:fd:44:c0:e2:17:0d:66:16:ac:89:48:d2:ad:56:a3:b9:
         a2:cb:22:fc:26:20:37:fa:c6:b9:c4:9f:f1:05:3c:ef:d1:5c:
         04:d1:04:8a:65:db:b8:cc:4a:ab:25:e3:9f:3a:2d:bb:be:1a:
         30:f7:56:2a:34:f9:bb:4c:a3:d5:cf:bd:a7:ce:49:61:b4:2c:
         6e:78:4c:a3:61:43:19:87:9a:c4:87:2e:df:b5:b6:6d:31:17:
         be:ca:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:26:45 2026 by rpki-client