This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/34352e3233302e33342e302f32332d3234203d3e203634313039.roa
File:                     34352e3233302e33342e302f32332d3234203d3e203634313039.roa (raw, json)
Hash identifier:          5GK9uhqlf/yat0D0gaWncsUyBX1uVtywnjRnF6mg/+I=
Subject key identifier:   DF:AE:4F:6C:D6:A6:73:D5:B5:62:37:01:89:D0:89:0D:30:1D:54:FC
Certificate issuer:       /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
Certificate serial:       79D9D48F1E2E27DC292ABCFF2F0D2DF9512CCF55
Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/34352e3233302e33342e302f32332d3234203d3e203634313039.roa
Signing time:             Tue 06 Jan 2026 19:35:28 +0000
ROA not before:           Tue 06 Jan 2026 19:30:28 +0000
ROA not after:            Tue 05 Jan 2027 19:35:28 +0000
asID:                     64109
IP address blocks:        45.230.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d9:d4:8f:1e:2e:27:dc:29:2a:bc:ff:2f:0d:2d:f9:51:2c:cf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
        Validity
            Not Before: Jan  6 19:30:28 2026 GMT
            Not After : Jan  5 19:35:28 2027 GMT
        Subject: CN=DFAE4F6CD6A673D5B562370189D0890D301D54FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:77:98:a1:09:b0:e2:8a:ce:01:79:f8:4d:df:
                    08:da:62:79:64:e9:63:af:41:d2:1b:1f:8f:d5:71:
                    d9:f1:6e:40:b0:49:f2:20:db:f0:06:42:4d:07:f6:
                    05:cb:32:16:50:10:a2:d9:ec:99:da:49:0a:0a:11:
                    d7:9c:01:53:0d:de:47:6a:0d:db:f4:fb:87:2a:86:
                    72:3c:fe:41:87:3f:ac:28:d7:9e:f5:ad:45:1e:b2:
                    b8:ba:ea:9d:b2:4b:37:be:31:67:fb:d8:8c:60:a4:
                    63:26:08:e6:92:73:09:2d:b7:9a:92:bb:5c:53:08:
                    c4:87:7a:69:87:3a:b4:29:c7:9c:cc:c3:36:89:83:
                    d0:eb:2d:86:fa:be:eb:37:89:c2:7f:95:90:8d:5a:
                    2b:71:96:27:25:7c:9a:99:be:3b:40:52:d1:2c:96:
                    9e:f2:5b:fe:4e:15:c5:17:2c:bc:dd:9b:85:1c:8a:
                    8d:e2:fc:f5:a0:ee:ce:cf:fa:00:e0:47:8a:31:72:
                    7a:48:02:0f:ed:d3:7d:72:97:10:1e:ae:9a:d2:04:
                    67:70:31:da:dc:09:ba:01:5a:86:60:0d:c9:b4:11:
                    74:be:6c:1c:af:82:58:14:16:3c:3e:8e:17:49:77:
                    ed:ca:8e:38:bd:24:e6:d1:12:b9:d5:96:c8:da:5a:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AE:4F:6C:D6:A6:73:D5:B5:62:37:01:89:D0:89:0D:30:1D:54:FC
            X509v3 Authority Key Identifier:
                keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/34352e3233302e33342e302f32332d3234203d3e203634313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:42:ce:3b:8b:8d:8a:a9:da:cf:b5:7c:7a:87:ca:be:05:30:
         42:8c:d3:f3:22:c4:b0:a4:85:70:4c:ac:56:76:22:21:87:6c:
         7a:b2:ab:37:ec:87:b0:03:94:2c:db:f3:d7:cc:f3:64:2d:97:
         87:15:5c:eb:0c:26:17:2a:0f:3c:f0:c2:14:54:b1:ca:69:98:
         77:21:96:ea:78:ba:91:26:5c:98:26:b6:37:95:1f:41:ac:02:
         35:1f:35:77:60:05:17:38:8b:88:a4:44:40:26:3d:68:ea:e6:
         f1:80:01:1c:34:46:f2:f9:0e:a3:1a:7d:79:a1:46:58:e2:15:
         5d:b5:48:ce:0f:f1:e9:50:58:82:4b:c9:90:19:28:a1:52:1c:
         18:5d:0f:56:26:8a:b6:a4:5c:c9:f1:53:39:a4:dc:77:f9:69:
         1c:72:17:d6:f4:af:83:d8:10:8c:63:e6:22:c1:f9:9c:fc:6a:
         6e:cc:25:99:2d:13:f8:6d:ac:0c:77:87:92:2f:94:aa:fb:8d:
         7e:0f:5b:d4:81:07:75:5e:23:ce:11:5a:3a:1d:94:d0:be:11:
         d2:bf:44:d4:54:ad:d6:22:56:e6:e5:e4:1a:ca:5e:97:ae:de:
         eb:24:67:56:e2:25:ec:82:be:84:39:54:b4:6b:89:45:03:86:
         7a:a8:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:59:23 2026 by rpki-client