This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
File:                     34352e36352e3138382e302f32322d3234203d3e20323636383533.roa (raw, json)
Hash identifier:          9v5ql3tr8HvtOyqGZVkhNAMM7DXe4NtheyayiDJBqWU=
Subject key identifier:   88:6F:0F:CA:DE:47:55:63:06:55:32:61:B9:D5:0E:FE:F8:82:6B:AA
Certificate issuer:       /CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Certificate serial:       7DED36B3C824D971B79B502DB35C02951A363A77
Authority key identifier: AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa
Signing time:             Tue 06 Jan 2026 19:46:55 +0000
ROA not before:           Tue 06 Jan 2026 19:41:55 +0000
ROA not after:            Tue 05 Jan 2027 19:46:55 +0000
asID:                     266853
IP address blocks:        45.65.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ed:36:b3:c8:24:d9:71:b7:9b:50:2d:b3:5c:02:95:1a:36:3a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
        Validity
            Not Before: Jan  6 19:41:55 2026 GMT
            Not After : Jan  5 19:46:55 2027 GMT
        Subject: CN=886F0FCADE47556306553261B9D50EFEF8826BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:85:8a:84:c4:7b:32:d6:00:ff:65:2e:cb:
                    5e:4c:2f:b1:54:6f:1b:a2:95:e5:ad:7e:d6:f8:b8:
                    d3:4b:52:78:30:c9:35:f7:cc:2a:55:e9:39:6d:c9:
                    11:42:56:bc:77:8d:24:b0:4d:e9:aa:55:a4:8d:47:
                    1a:77:a7:cf:23:49:da:4c:52:11:2e:ab:50:a1:43:
                    f6:e5:df:2b:f4:ae:41:a7:c3:53:46:43:ef:17:f7:
                    dd:03:3a:4a:b1:b5:8b:cb:75:ae:9c:e7:ea:75:5d:
                    e2:c9:59:d7:35:36:4d:91:3f:82:44:76:37:90:e7:
                    c9:b8:5d:bc:3d:5c:ac:15:30:c4:93:f3:3f:65:8a:
                    93:32:7f:8f:53:a8:e4:79:6e:0b:ee:4c:28:48:02:
                    7b:4b:fb:a4:ee:12:dc:86:60:3b:35:04:f9:54:79:
                    2e:1f:31:2f:2e:d2:00:35:a5:97:c4:0c:e9:14:00:
                    8b:96:3b:fe:03:9e:61:d9:3c:d3:cd:c7:cb:f5:ea:
                    27:4c:89:86:16:9b:11:72:dd:29:36:d8:dd:f2:f3:
                    c2:64:32:cf:80:24:ba:28:94:00:68:0e:a1:3d:b6:
                    7a:3a:94:11:58:07:2a:00:00:fd:e7:af:22:93:4b:
                    0e:5d:68:42:a9:3c:2a:d0:5c:d6:4b:d6:a1:f7:ec:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6F:0F:CA:DE:47:55:63:06:55:32:61:B9:D5:0E:FE:F8:82:6B:AA
            X509v3 Authority Key Identifier:
                keyid:AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e36352e3138382e302f32322d3234203d3e20323636383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:87:01:a2:7e:91:a8:f4:3f:d0:84:96:22:19:e3:ce:c7:d2:
         62:a4:c3:f3:5d:27:f1:98:eb:38:4f:c2:17:fc:b1:46:f5:01:
         ab:be:68:b1:dd:79:6c:76:c5:3b:9f:ab:14:01:be:7f:6b:cf:
         e0:37:c7:a6:0b:c8:7a:79:b5:fa:cb:d7:d0:a7:44:69:86:11:
         ef:37:8f:77:29:28:26:8e:15:c2:b2:49:9f:e9:33:1f:bb:19:
         28:a5:2b:f8:8c:01:ae:32:e2:cb:62:e1:64:26:78:3e:31:fb:
         6d:34:3e:6c:73:72:e6:2c:00:1a:cc:5a:01:22:0f:2d:45:e8:
         46:74:06:d6:bc:ae:84:84:3a:f1:96:a7:c5:ed:79:9c:02:3d:
         eb:32:b7:92:a9:ee:4f:45:fc:27:a7:e3:0f:96:f1:1f:32:e8:
         e9:fa:27:54:c2:85:c7:56:7d:51:64:a9:0a:7e:b2:14:2e:25:
         be:96:98:a4:e9:d2:64:36:3a:57:28:65:7f:1b:c6:8e:11:a9:
         06:a8:38:ab:b9:f4:dd:6e:5d:8c:44:43:a1:00:a0:9d:f9:ba:
         7d:ce:ef:a6:68:6c:25:70:ff:ca:ce:c2:56:ee:a2:1a:f5:dd:
         d3:ad:18:21:05:1b:6d:15:82:57:5c:a0:e2:7d:9e:29:22:f5:
         3d:82:b8:42
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfe02s8gk2XG3m1Ats1wClRo2OncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI4MDY2M0VCQzFCQjU0NEM1NUI0Q0UwMEM1OEJDMDM4
RjJCQkI2QjAeFw0yNjAxMDYxOTQxNTVaFw0yNzAxMDUxOTQ2NTVaMDMxMTAvBgNV
BAMTKDg4NkYwRkNBREU0NzU1NjMwNjU1MzI2MUI5RDUwRUZFRjg4MjZCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yoWKhMR7MtYA/2Uuy15ML7FU
bxuileWtftb4uNNLUngwyTX3zCpV6TltyRFCVrx3jSSwTemqVaSNRxp3p88jSdpM
UhEuq1ChQ/bl3yv0rkGnw1NGQ+8X990DOkqxtYvLda6c5+p1XeLJWdc1Nk2RP4JE
djeQ58m4Xbw9XKwVMMST8z9lipMyf49TqOR5bgvuTChIAntL+6TuEtyGYDs1BPlU
eS4fMS8u0gA1pZfEDOkUAIuWO/4DnmHZPNPNx8v16idMiYYWmxFy3Sk22N3y88Jk
Ms+AJLoolABoDqE9tno6lBFYByoAAP3nryKTSw5daEKpPCrQXNZL1qH37GfZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiG8Pyt5HVWMGVTJhudUO/viCa6owHwYDVR0j
BBgwFoAUq4BmPrwbtUTFW0zgDFi8A48ru2swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzJEQzhDNjdCNjUzRDI2QTA0QTk3MzQwQjk4NEUyODNC
NTFCNjQ4ODI2NDQ1NjFCNDc1MTU3MDZGNDk5OTcwLzAvQUI4MDY2M0VCQzFCQjU0
NEM1NUI0Q0UwMEM1OEJDMDM4RjJCQkI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQjgwNjYzRUJDMUJCNTQ0QzU1
QjRDRTAwQzU4QkMwMzhGMkJCQjZCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDMyREM4QzY3QjY1M0QyNkEwNEE5NzM0MEI5ODRFMjgzQjUxQjY0ODgy
NjQ0NTYxQjQ3NTE1NzA2RjQ5OTk3MC8wLzM0MzUyZTM2MzUyZTMxMzgzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzUzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1BvDAN
BgkqhkiG9w0BAQsFAAOCAQEAhocBon6RqPQ/0ISWIhnjzsfSYqTD810n8ZjrOE/C
F/yxRvUBq75osd15bHbFO5+rFAG+f2vP4DfHpgvIenm1+svX0KdEaYYR7zePdyko
Jo4VwrJJn+kzH7sZKKUr+IwBrjLiy2LhZCZ4PjH7bTQ+bHNy5iwAGsxaASIPLUXo
RnQG1ryuhIQ68Zanxe15nAI96zK3kqnuT0X8J6fjD5bxHzLo6fonVMKFx1Z9UWSp
Cn6yFC4lvpaYpOnSZDY6VyhlfxvGjhGpBqg4q7n03W5djERDoQCgnfm6fc7vpmhs
JXD/ys7CVu6iGvXd060YIQUbbRWCV1yg4n2eKSL1PYK4Qg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:30 2026 by rpki-client