This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa
File:                     34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (raw, json)
Hash identifier:          KqEDgK6dPR5pezxaXmPeaJ8fMkW3dzyGrMJP0llK+Uc=
Subject key identifier:   BD:26:8D:51:E0:59:19:9D:CA:C5:0C:8D:1F:D9:FB:86:90:93:04:38
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       74DC3A0AE8FAA7709E4EB6E01A72EE7F801EB533
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa
Signing time:             Tue 06 Jan 2026 19:02:17 +0000
ROA not before:           Tue 06 Jan 2026 18:57:17 +0000
ROA not after:            Tue 05 Jan 2027 19:02:17 +0000
asID:                     266819
IP address blocks:        45.237.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:dc:3a:0a:e8:fa:a7:70:9e:4e:b6:e0:1a:72:ee:7f:80:1e:b5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Jan  6 18:57:17 2026 GMT
            Not After : Jan  5 19:02:17 2027 GMT
        Subject: CN=BD268D51E059199DCAC50C8D1FD9FB8690930438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:81:93:f7:c6:91:65:cb:1a:c2:f9:ed:b6:
                    7b:90:47:5c:56:5f:32:9c:80:23:70:7e:93:25:16:
                    45:26:9a:9e:9c:c2:a8:b3:3f:6c:2b:22:65:0d:41:
                    80:80:3d:85:e5:a7:6e:1f:c7:88:d9:ce:3e:f2:dd:
                    bd:24:66:7b:31:06:34:1d:88:69:44:05:bc:46:76:
                    27:73:db:22:25:53:e7:a7:74:f4:17:37:cf:1c:42:
                    9f:6d:3e:28:ab:42:8e:18:c9:40:bd:e5:bb:c1:20:
                    92:af:c3:23:fe:0f:7f:04:e5:02:a4:ad:66:2b:bd:
                    52:bf:4e:4e:8b:7d:c4:be:a4:26:4a:3d:6d:c6:28:
                    f3:56:15:41:28:7c:da:5e:a6:02:9d:ef:56:01:e9:
                    d9:9d:b2:58:98:06:d2:6d:f0:da:93:a8:ff:5c:41:
                    10:73:e5:ce:76:ea:c7:a0:90:c2:95:4f:b9:09:fa:
                    d8:aa:83:a8:00:0e:28:ed:41:78:27:7e:5f:28:d3:
                    15:46:f5:4d:f5:b9:0b:d8:e1:16:26:9c:23:ff:15:
                    d2:93:98:e3:ed:2b:2c:7d:a1:92:2d:2e:04:12:d1:
                    46:c6:a8:b5:ac:0d:00:20:d5:06:eb:08:79:36:aa:
                    7f:86:61:8c:59:c3:17:be:25:46:1e:93:86:8c:ca:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:8D:51:E0:59:19:9D:CA:C5:0C:8D:1F:D9:FB:86:90:93:04:38
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:29:a5:8a:47:6b:77:97:8f:a0:a5:64:e2:2a:81:86:94:22:
         15:96:99:87:dd:3c:ff:16:f2:56:d8:05:31:c9:c7:43:a2:c2:
         f0:10:76:a8:e1:9d:84:ce:ed:de:74:dc:12:ca:f5:07:a1:30:
         e2:ff:1e:8a:e0:9e:31:2a:b8:e0:d9:2e:8a:b1:6d:c2:ae:b9:
         5d:2c:f0:02:44:ba:56:52:5a:91:62:5c:6d:ed:72:44:49:c3:
         7d:b5:a7:34:43:08:8a:83:9c:00:38:d0:a3:4c:7e:7a:9b:5d:
         d6:5d:cc:7f:27:22:04:f9:23:bf:21:8f:9f:45:92:4b:9a:ee:
         28:dd:d9:05:86:36:3f:25:5a:74:f9:37:cb:1f:a9:17:ed:0e:
         af:cd:65:c3:2a:ad:c6:5b:f6:e6:75:cf:67:21:ab:b6:8d:e0:
         94:09:f9:37:78:35:ae:35:5b:fb:02:49:cd:de:7e:94:11:88:
         6b:45:85:d7:c5:5f:ae:b2:18:8a:58:a3:08:c5:68:fe:62:48:
         99:48:1d:8e:1d:83:ec:be:95:08:f6:42:86:80:e6:a5:7d:5c:
         38:2f:0a:a4:20:88:0f:c2:af:24:8f:2c:da:0d:ab:9e:42:d7:
         94:91:83:0b:8b:a9:71:fe:e5:0e:5a:c2:19:23:84:2c:47:89:
         bc:07:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:05:53 2026 by rpki-client