This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa
File:                     34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          xUusOFoOG+QtsaZIjrwoXi2K319yi8MRWtlWl6t2534=
Subject key identifier:   38:82:46:7B:73:7A:F3:00:3E:02:2B:7F:1F:6E:7C:A6:F6:29:A2:1E
Certificate issuer:       /CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
Certificate serial:       2552BBC0B2D6D79F5260569885D6E8AEC0EAF0D2
Authority key identifier: 30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 06 Jan 2026 19:16:59 +0000
ROA not before:           Tue 06 Jan 2026 19:11:59 +0000
ROA not after:            Tue 05 Jan 2027 19:16:59 +0000
asID:                     265703
IP address blocks:        45.239.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:52:bb:c0:b2:d6:d7:9f:52:60:56:98:85:d6:e8:ae:c0:ea:f0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
        Validity
            Not Before: Jan  6 19:11:59 2026 GMT
            Not After : Jan  5 19:16:59 2027 GMT
        Subject: CN=3882467B737AF3003E022B7F1F6E7CA6F629A21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:4a:bd:8c:91:1c:0e:66:27:c9:c6:24:c6:
                    4e:a8:0b:bc:c2:22:28:87:cc:ac:35:04:68:66:52:
                    e2:41:3a:76:e7:d6:2a:f9:d9:59:d6:56:99:6b:3e:
                    7b:d2:af:32:a9:9b:d4:86:04:e2:4b:37:a7:09:29:
                    9b:33:81:a4:ad:9f:24:d1:e5:c9:c5:fe:48:59:12:
                    62:3d:f1:58:31:e7:06:b4:06:7c:2d:16:53:a5:a0:
                    8d:24:1d:50:c2:1f:5b:09:67:dd:8e:8f:e7:c4:50:
                    a9:a6:f6:96:5b:d8:19:2d:4a:2d:81:d9:57:79:ac:
                    7b:3c:bf:18:f5:0b:d5:06:83:98:9b:61:20:5b:f8:
                    c1:a4:58:c3:73:18:49:3b:04:09:df:dc:86:c2:91:
                    1e:95:b0:14:25:2e:4d:10:04:2f:9f:12:05:33:28:
                    51:94:63:7b:90:0a:8f:8f:48:c4:63:4b:aa:5a:26:
                    fe:d0:dc:0d:96:39:ad:32:6f:8d:12:1d:70:0d:6a:
                    d8:f1:6e:15:7f:bd:6d:25:35:9a:91:ed:87:7c:f6:
                    fa:c0:0b:3f:49:dd:16:ff:0d:ea:82:1d:57:bd:cb:
                    5f:0e:c1:86:1b:b0:69:f2:20:ef:c7:1b:60:8e:26:
                    bf:7e:a2:12:6b:2f:b5:df:66:a2:45:59:e3:0f:a0:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:82:46:7B:73:7A:F3:00:3E:02:2B:7F:1F:6E:7C:A6:F6:29:A2:1E
            X509v3 Authority Key Identifier:
                keyid:30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:35:4c:b2:41:eb:24:fc:2b:57:89:f7:cf:be:5b:70:cd:18:
         b1:61:6f:4a:a5:23:8c:73:95:9c:5e:ef:22:0f:a6:c3:35:ba:
         35:a8:97:51:31:a2:0b:02:d7:36:a8:5e:eb:63:a8:87:5a:01:
         a2:c3:67:c4:08:45:74:3d:9b:71:a9:cb:b4:54:57:2f:38:e4:
         ee:08:a2:e8:70:69:da:cf:a7:bb:8d:3a:ad:c2:9b:92:20:c6:
         46:69:aa:e5:f4:25:be:f6:94:2b:7a:e7:81:ac:a0:31:91:44:
         fe:d9:ac:ea:9a:0e:c7:e7:cd:71:0d:a3:a7:96:84:39:a1:8e:
         05:b5:f8:51:5d:e3:0b:82:be:1f:4d:9b:7f:56:76:75:d4:1c:
         4f:db:e9:24:f5:17:68:52:a0:d8:6c:6f:8d:ad:dc:bf:31:e0:
         b7:45:09:e0:73:20:0a:25:eb:28:fd:39:3f:c5:04:31:e5:ed:
         35:e3:b5:c6:ae:d1:70:ba:fa:31:c5:db:a6:77:3c:a0:c9:97:
         1c:e3:0b:95:0f:3e:34:a5:36:d4:7d:5f:12:eb:93:45:3a:be:
         54:bd:9d:10:e1:af:c9:95:76:7e:85:80:7f:25:79:dd:77:2b:
         90:71:84:0b:8a:f9:02:63:f3:af:ab:d6:25:e1:7f:57:44:57:
         28:54:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:47 2026 by rpki-client