This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3138382e302f32342d3234203d3e20323635353531.roa
File:                     34352e3233382e3138382e302f32342d3234203d3e20323635353531.roa (raw, json)
Hash identifier:          7KbaAONqtBUd5un3Nrvr25MhUJmC5kYcG9p3h5cLX3Y=
Subject key identifier:   CF:9F:85:69:65:16:39:0E:DB:06:2B:39:AB:2A:EE:0F:9E:C8:DD:6B
Certificate issuer:       /CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Certificate serial:       67D22E27AA42397FFE680FB5885FF49588115589
Authority key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3138382e302f32342d3234203d3e20323635353531.roa
Signing time:             Tue 06 Jan 2026 19:10:05 +0000
ROA not before:           Tue 06 Jan 2026 19:05:05 +0000
ROA not after:            Tue 05 Jan 2027 19:10:05 +0000
asID:                     265551
IP address blocks:        45.238.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d2:2e:27:aa:42:39:7f:fe:68:0f:b5:88:5f:f4:95:88:11:55:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
        Validity
            Not Before: Jan  6 19:05:05 2026 GMT
            Not After : Jan  5 19:10:05 2027 GMT
        Subject: CN=CF9F85696516390EDB062B39AB2AEE0F9EC8DD6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:c5:8c:48:a5:fb:71:cb:f4:b6:67:f5:57:
                    63:f3:ca:ed:a9:6f:f9:3e:fd:8d:1b:5d:83:ed:2a:
                    8e:73:f2:b7:69:ad:0e:aa:5d:0b:e5:db:35:f3:65:
                    04:07:e0:24:25:46:09:04:ee:6d:95:8e:1d:f4:60:
                    c0:94:8c:49:d8:e9:26:67:7c:e5:a6:05:85:a4:48:
                    12:6d:92:8f:4f:d0:a0:df:a1:25:0a:9c:8b:ec:53:
                    55:23:95:74:31:40:00:c4:e8:4e:01:8d:db:84:7d:
                    f1:2e:6b:8c:18:74:ba:f6:9a:0b:6a:a2:de:35:80:
                    65:dc:00:2f:ef:cb:82:5d:33:34:ad:52:34:b2:2c:
                    98:47:d6:c0:c9:77:e6:ce:c6:14:db:d9:49:1f:bc:
                    73:08:ae:85:ec:97:14:a3:15:24:18:ad:de:da:9d:
                    0c:2d:63:1b:56:25:c8:3d:e4:5c:3f:8d:01:d7:ef:
                    c7:13:3e:85:80:99:36:35:8e:2a:5e:e3:5a:7b:a2:
                    70:13:eb:7d:49:ee:4e:6a:1b:96:1a:97:7f:c1:8d:
                    b1:15:7e:f4:f5:88:b5:a6:e1:96:48:05:13:b8:8e:
                    28:aa:62:ec:fb:b6:af:8c:e4:35:53:dc:9d:cd:1c:
                    1e:09:63:53:25:ee:31:d5:d5:f5:62:a1:43:6f:70:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:85:69:65:16:39:0E:DB:06:2B:39:AB:2A:EE:0F:9E:C8:DD:6B
            X509v3 Authority Key Identifier:
                keyid:22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3138382e302f32342d3234203d3e20323635353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:eb:84:04:f6:df:56:57:5f:7f:1f:2c:10:85:61:72:e1:
         61:c6:8c:3a:47:54:0a:65:4b:08:e6:04:6f:7d:a6:9b:0c:38:
         dd:72:aa:04:58:ca:01:5b:a0:92:52:12:9f:6e:fd:35:a8:f1:
         d4:75:a6:3a:f2:96:8f:18:09:be:b7:79:92:3c:bb:8d:bc:d0:
         70:70:ee:86:82:b1:8c:4a:3e:5e:5a:c2:0f:ca:6d:36:34:30:
         a5:49:eb:2c:00:11:cb:0d:0b:74:26:ab:83:aa:2e:98:e6:17:
         97:a5:c9:00:40:36:f2:27:c7:04:b9:d2:12:e7:ec:77:ad:c8:
         a0:76:53:23:2b:9b:3c:fe:8c:c4:0a:b6:d5:ef:f1:4f:8e:72:
         56:f4:d4:86:3e:8a:3a:49:79:c7:15:9a:b6:73:ab:b1:2d:2e:
         f2:8b:22:4c:6a:0a:87:59:19:00:ad:c9:f8:d2:ee:f6:5b:64:
         78:70:85:6c:eb:66:d5:8a:95:66:0b:50:fe:92:35:76:2f:f6:
         60:85:65:0f:c4:70:27:5f:16:94:da:1b:f6:60:a1:66:e0:e3:
         53:39:95:a4:aa:1d:46:16:60:6e:65:30:07:34:55:c8:6d:7b:
         95:da:bf:3d:bf:87:e9:7b:7e:43:53:aa:86:fb:3d:7f:b9:25:
         91:99:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:28:10 2026 by rpki-client