This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          KfCwacbp9eH9hJb9ZGCMfC5QzcFXtkIAZsp5iOIs0Ic=
Subject key identifier:   AF:40:53:D7:BA:24:DF:81:30:50:B9:F8:45:7C:79:DB:E2:7E:28:A9
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       13C3EA39E8A1D2C23A1E607F4C75BBDD96192C5B
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 06 Jan 2026 19:02:17 +0000
ROA not before:           Tue 06 Jan 2026 18:57:17 +0000
ROA not after:            Tue 05 Jan 2027 19:02:17 +0000
asID:                     266819
IP address blocks:        45.237.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c3:ea:39:e8:a1:d2:c2:3a:1e:60:7f:4c:75:bb:dd:96:19:2c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Jan  6 18:57:17 2026 GMT
            Not After : Jan  5 19:02:17 2027 GMT
        Subject: CN=AF4053D7BA24DF813050B9F8457C79DBE27E28A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:e3:13:0f:93:3c:c2:dc:3f:c2:89:0f:b3:
                    8f:26:03:80:40:a2:0e:64:13:22:59:d6:e8:a0:41:
                    b1:d7:8a:fc:3b:1e:72:89:e3:48:d5:ae:7b:f8:47:
                    20:49:e6:2e:4e:19:fe:78:e4:93:be:6f:aa:1e:a3:
                    6a:71:56:58:6a:15:ee:d2:3f:e1:53:fd:cd:80:41:
                    e2:02:d8:1c:a2:a3:73:e2:5a:be:99:5a:cf:54:d7:
                    93:96:a0:3d:b1:5f:86:a1:9d:ed:80:97:3b:3f:67:
                    7f:79:81:29:ed:0c:e2:4a:68:fc:81:f2:a1:b5:86:
                    94:48:49:96:ef:ee:75:49:45:be:10:94:b9:42:02:
                    b1:1a:47:7f:6a:66:b8:73:6e:f1:5c:31:7c:9f:a2:
                    bf:fb:a5:64:bb:55:9d:65:5f:1f:15:25:bc:39:3b:
                    b1:06:c0:8b:68:a2:a2:34:90:96:e1:9a:4c:bc:46:
                    97:74:76:82:3f:f3:7e:04:57:c3:d1:8e:46:be:6a:
                    72:80:2c:3c:10:76:4d:5b:c5:8d:29:12:bd:ad:8c:
                    65:79:91:e0:98:67:96:61:1f:61:25:ec:5c:c1:9b:
                    28:4f:ea:0b:f7:ae:2a:3c:2d:b4:97:7f:47:37:7d:
                    48:ac:d7:ed:2c:b7:65:21:ec:22:e3:3c:20:92:a7:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:53:D7:BA:24:DF:81:30:50:B9:F8:45:7C:79:DB:E2:7E:28:A9
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:06:fb:fc:6b:f6:02:06:df:cb:07:12:f8:ea:b0:96:df:
         1c:60:b7:e6:f3:cc:c7:78:79:5a:9b:24:8d:43:88:e6:de:b9:
         46:b9:f3:b6:3e:ff:6e:f5:b6:ea:fc:89:5f:c9:a1:28:f1:6f:
         5e:60:06:f6:98:96:57:c4:28:a9:cc:41:5a:88:77:61:ec:36:
         ac:ad:31:14:7f:3a:7e:c4:66:f6:f0:09:8f:7c:d7:0a:0e:79:
         b4:56:e1:1d:f7:56:8e:63:fa:6d:dc:ae:4f:ee:1a:b1:c6:f7:
         68:d8:c5:af:b5:b3:50:c1:39:31:a8:be:89:78:22:9e:fb:78:
         ec:f7:3a:ae:f7:28:70:ff:3b:51:e9:1a:b0:d9:f2:f1:0e:19:
         5f:10:b2:ac:76:9d:26:50:3c:1a:73:88:8c:70:d7:c0:02:87:
         a0:c9:da:18:be:7e:3d:fb:9a:e6:6a:73:f4:c8:00:02:c3:0b:
         ec:0c:25:ac:8d:ce:ba:80:26:85:a0:0b:99:3d:a8:83:3a:4e:
         e2:a3:13:36:d4:ba:40:ab:97:b1:5e:87:f2:29:02:bb:9c:53:
         91:10:19:ee:55:56:34:94:72:27:46:74:98:63:de:45:13:b1:
         a5:f0:de:db:db:c2:c3:23:a5:72:64:a5:79:9c:95:10:67:71:
         41:fd:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:41 2026 by rpki-client