This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
File:                     34352e3233302e382e302f32322d3234203d3e20323636373130.roa (raw, json)
Hash identifier:          PjdW6Gt115D0xt6IJ0qEdbS+zE7pSztNB769lXNLMxo=
Subject key identifier:   A2:C2:FE:F9:91:ED:4D:E6:9C:47:0A:E2:02:5D:61:7C:0F:11:9F:36
Certificate issuer:       /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Certificate serial:       5EE4EC4AA77DC81036C9C32030E0E70DF25ECC45
Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
Signing time:             Thu 08 Jan 2026 13:59:24 +0000
ROA not before:           Thu 08 Jan 2026 13:54:24 +0000
ROA not after:            Thu 07 Jan 2027 13:59:24 +0000
asID:                     266710
IP address blocks:        45.230.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e4:ec:4a:a7:7d:c8:10:36:c9:c3:20:30:e0:e7:0d:f2:5e:cc:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
        Validity
            Not Before: Jan  8 13:54:24 2026 GMT
            Not After : Jan  7 13:59:24 2027 GMT
        Subject: CN=A2C2FEF991ED4DE69C470AE2025D617C0F119F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:61:0e:68:5e:a9:a9:58:81:fd:a5:13:b9:
                    81:9b:2d:4d:f8:52:e5:75:3c:29:10:3d:43:6b:c0:
                    e5:21:8c:f8:89:94:64:a4:d7:63:93:35:6a:a1:ac:
                    b3:72:08:60:0c:60:6a:ce:98:b7:0e:16:9f:5a:ac:
                    b7:60:fa:09:d2:90:bb:1b:5f:ea:02:57:55:f3:53:
                    82:62:7e:f4:dd:c7:d8:91:16:59:5d:84:de:cd:d0:
                    f1:fb:16:3a:10:17:8d:88:fa:e4:aa:b2:c4:41:fd:
                    66:70:93:cb:bb:de:47:3a:29:54:43:10:06:6c:42:
                    df:58:fa:24:c3:61:98:28:bb:d3:5e:1f:5c:f0:db:
                    68:92:fb:76:28:42:87:98:29:e7:48:02:b5:59:d6:
                    c6:9d:ce:30:58:d9:eb:2e:8b:f8:bd:d7:b9:47:e0:
                    ef:21:f8:b1:e2:39:b3:ad:88:92:67:df:a1:de:0d:
                    b7:d3:db:57:99:60:94:58:04:e3:96:03:ec:c2:56:
                    95:bf:58:18:8e:fa:9f:1f:10:d0:31:75:1c:98:e9:
                    33:b3:49:69:5a:c0:aa:fc:fd:20:57:4f:0a:d9:5d:
                    ad:23:85:1c:61:ff:e3:16:d1:c4:0a:35:d1:34:fc:
                    3f:57:d7:66:ab:91:0b:09:0f:9a:f7:ab:f7:7e:a4:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C2:FE:F9:91:ED:4D:E6:9C:47:0A:E2:02:5D:61:7C:0F:11:9F:36
            X509v3 Authority Key Identifier:
                keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:b3:4a:85:e9:f6:c9:a1:24:81:07:4c:5f:13:05:05:96:
         2b:ef:af:3b:c7:6d:4a:dc:f3:56:62:d9:f5:14:66:09:37:8f:
         15:03:19:24:c8:93:53:5a:36:c0:59:7b:0e:18:ee:dc:fd:7a:
         d1:95:34:34:d0:0c:65:a6:87:08:2a:3a:db:98:fb:5b:14:6e:
         00:17:c6:89:10:b0:5a:9a:46:96:a0:0f:5e:c7:6c:21:a8:82:
         71:43:c4:07:ad:57:4a:c8:ab:3f:22:4b:b9:51:38:5a:75:8e:
         df:37:47:17:ff:84:a9:a7:97:ae:9c:19:46:c8:09:bb:37:33:
         97:89:11:26:8e:b5:6f:d5:9e:25:57:3f:09:4a:c9:36:90:7a:
         61:a0:52:98:7c:61:40:e7:fc:a4:95:a9:81:12:40:82:fa:a8:
         93:82:7e:5a:5e:91:eb:47:d5:84:df:6f:5e:f7:5c:6e:a5:e9:
         d6:3a:ad:41:4b:f5:e3:30:84:eb:ee:42:ac:28:db:61:ee:dc:
         b0:74:d6:73:09:73:38:3b:7b:c9:14:1d:c2:79:3a:88:8f:ea:
         70:b9:95:69:9f:df:01:f3:fd:6d:3a:7b:5a:48:8b:fd:35:36:
         da:2f:9d:12:b5:c4:90:49:a6:8f:de:d0:f6:ea:ff:cf:22:d3:
         de:db:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:53:44 2026 by rpki-client