This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/34352e3233392e32382e302f32322d3234203d3e20323636383430.roa
File:                     34352e3233392e32382e302f32322d3234203d3e20323636383430.roa (raw, json)
Hash identifier:          AtWNltJBq4eBcfS7MgxVWvtjZnBp+is6nJ2+yEGQGw4=
Subject key identifier:   3C:25:B6:85:21:51:E6:FB:BD:32:41:2E:4B:51:77:98:10:7A:45:87
Certificate issuer:       /CN=B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74
Certificate serial:       6F19C4987F0ABC40D0A186B52CE3C8145E3D28D6
Authority key identifier: B8:BC:6B:CB:8E:51:8D:55:BF:D4:FE:5B:06:9D:BD:BA:40:C4:4A:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/34352e3233392e32382e302f32322d3234203d3e20323636383430.roa
Signing time:             Tue 06 Jan 2026 19:22:36 +0000
ROA not before:           Tue 06 Jan 2026 19:17:36 +0000
ROA not after:            Tue 05 Jan 2027 19:22:36 +0000
asID:                     266840
IP address blocks:        45.239.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:19:c4:98:7f:0a:bc:40:d0:a1:86:b5:2c:e3:c8:14:5e:3d:28:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74
        Validity
            Not Before: Jan  6 19:17:36 2026 GMT
            Not After : Jan  5 19:22:36 2027 GMT
        Subject: CN=3C25B6852151E6FBBD32412E4B517798107A4587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:f6:3b:35:1e:63:61:30:bd:cf:c2:33:d4:
                    2a:e8:b9:94:50:0c:c5:88:ec:89:a7:a4:ea:56:24:
                    90:c4:41:42:76:04:da:f2:e4:9e:ce:a8:a8:76:bc:
                    4a:76:05:65:cd:0f:84:47:d0:3d:28:ce:4c:eb:c3:
                    31:58:ea:12:34:7e:36:de:88:40:c5:77:81:3d:54:
                    44:fd:79:08:18:c3:a1:62:1e:a5:b9:eb:33:49:4f:
                    13:c5:ee:aa:89:f7:97:35:3f:a2:c7:84:56:e0:6e:
                    76:d9:21:a4:be:47:c6:70:e3:f4:84:9b:9e:50:81:
                    ef:be:4b:dd:39:8f:b2:b0:7a:ef:a5:7d:f8:08:ae:
                    67:10:40:8f:f6:a1:ed:ca:53:47:ad:44:39:14:c2:
                    6e:ab:86:f2:af:23:91:bf:18:49:3c:a6:23:c7:22:
                    1b:fc:f5:7c:ad:b4:c1:3d:18:cf:16:b3:b6:6d:2c:
                    af:0b:bc:93:6d:5b:95:92:0f:57:3c:cb:ed:ce:23:
                    0c:e7:b8:35:a7:15:5e:db:2e:35:2b:49:a5:56:aa:
                    4d:6b:d2:8a:81:39:a2:6b:b3:90:bc:07:64:a1:1b:
                    11:c3:cf:1f:18:dd:6b:57:a7:9e:58:ec:a7:40:8d:
                    9f:9a:e0:ab:c1:88:29:35:b6:ff:78:67:a9:d0:ca:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:25:B6:85:21:51:E6:FB:BD:32:41:2E:4B:51:77:98:10:7A:45:87
            X509v3 Authority Key Identifier:
                keyid:B8:BC:6B:CB:8E:51:8D:55:BF:D4:FE:5B:06:9D:BD:BA:40:C4:4A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8BC6BCB8E518D55BFD4FE5B069DBDBA40C44A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57589A8BF177909F244576702F17B86B4BC4685F46F06EF478DECC21499046D7/0/34352e3233392e32382e302f32322d3234203d3e20323636383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:64:29:e1:17:e5:97:62:d5:7d:1e:09:02:04:fb:ef:ea:23:
         85:13:09:f6:9b:04:03:73:e9:82:19:63:0a:74:95:ad:fe:c9:
         16:1a:0f:8f:f5:2a:f4:d8:d8:5e:a8:04:f4:db:fc:02:be:f8:
         65:f4:84:49:98:95:e8:73:a6:de:07:7c:a3:06:22:24:e1:94:
         26:9e:79:41:1d:5c:73:0e:ec:c3:bc:38:0d:67:40:c2:85:f9:
         8d:e2:00:53:94:79:b0:58:3b:c1:ec:88:c6:c0:08:02:52:6f:
         71:24:a2:2b:4e:6c:aa:02:be:ec:5a:8e:69:ca:db:bd:2a:74:
         42:06:5e:73:30:f0:21:67:da:3b:64:2a:71:8e:98:0f:ba:56:
         b6:77:fe:b4:aa:37:22:8e:11:c0:e3:16:ba:8e:4c:b1:a6:2a:
         e7:14:7e:b4:8b:e8:45:0f:98:a5:4c:8a:78:be:ce:d8:0c:8c:
         3f:e4:54:44:a1:e2:73:f1:aa:4e:ec:36:71:5c:16:cd:a1:43:
         99:d5:5b:a6:02:71:cd:ec:8b:81:92:cf:8d:ae:31:02:0b:cb:
         46:81:78:b0:f8:e7:5d:e5:94:e6:e3:79:d0:e6:df:b4:a7:88:
         32:4d:73:67:f1:4e:fd:58:7c:35:34:30:3a:08:61:1e:92:fe:
         32:37:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:59:27 2026 by rpki-client