This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34322e302f32342d3234203d3e20323636373734.roa
File:                     34352e3233352e34322e302f32342d3234203d3e20323636373734.roa (raw, json)
Hash identifier:          oxMzPLs3PbufUNBBr6DvUEyaRQsgjE/bKqycpSIG6ag=
Subject key identifier:   31:D7:2E:EF:6B:4D:EC:DE:95:0B:E8:C9:CA:5F:32:6E:71:62:DA:BE
Certificate issuer:       /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial:       343FD3FF6B43285709CE436A7461D18063E20A79
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34322e302f32342d3234203d3e20323636373734.roa
Signing time:             Tue 04 Nov 2025 21:00:00 +0000
ROA not before:           Tue 04 Nov 2025 20:55:00 +0000
ROA not after:            Tue 03 Nov 2026 21:00:00 +0000
asID:                     266774
IP address blocks:        45.235.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3f:d3:ff:6b:43:28:57:09:ce:43:6a:74:61:d1:80:63:e2:0a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
        Validity
            Not Before: Nov  4 20:55:00 2025 GMT
            Not After : Nov  3 21:00:00 2026 GMT
        Subject: CN=31D72EEF6B4DECDE950BE8C9CA5F326E7162DABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:34:51:9b:e7:ec:10:5f:ed:c4:52:c8:d7:
                    6c:c5:e1:89:6f:e4:f8:d4:21:2d:4c:4d:0b:e3:fc:
                    80:5a:bc:ab:cb:fb:ad:a2:71:d5:63:84:4b:15:9c:
                    3e:4a:cd:69:69:5c:3a:38:cc:fb:d9:3e:d5:4d:06:
                    21:9f:92:4d:1b:cb:d0:68:03:c5:19:b7:d7:8f:3c:
                    9d:aa:ee:8f:15:94:81:3b:87:7e:39:1e:b9:f4:30:
                    73:80:5c:c1:00:10:f4:4e:c0:4b:11:67:ff:2f:f7:
                    3c:bc:fe:12:bd:86:77:17:34:62:0f:62:b3:87:62:
                    79:91:1e:43:19:6d:e0:15:bb:bf:80:1a:06:8f:e0:
                    c3:e7:93:1a:52:5d:ae:f4:65:7f:94:57:19:79:d6:
                    b0:05:a8:f7:72:b7:2f:f9:c7:b6:72:62:88:96:47:
                    f8:93:f1:3a:cd:5b:1f:58:2c:df:ef:ff:43:e4:3d:
                    d0:e0:13:01:66:97:25:77:e5:93:a0:66:8d:3b:82:
                    28:60:52:d1:07:a1:47:44:00:8a:ba:af:30:15:88:
                    10:6a:26:ab:de:06:dc:27:39:40:ed:b5:69:35:b1:
                    d1:7b:77:79:d1:9f:aa:62:56:31:fb:1e:14:96:84:
                    ba:ac:40:31:4f:ea:47:db:e2:5f:ea:7a:48:8f:94:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:2E:EF:6B:4D:EC:DE:95:0B:E8:C9:CA:5F:32:6E:71:62:DA:BE
            X509v3 Authority Key Identifier:
                keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34322e302f32342d3234203d3e20323636373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:8c:2a:23:89:64:f2:97:16:ee:fe:1f:6a:72:e6:b8:db:
         d5:a9:ef:a5:4a:e9:e0:1d:6c:59:7c:66:a4:09:f9:ab:af:00:
         0b:66:0e:7e:48:bc:7e:31:c1:2d:f3:4a:dc:89:84:0e:44:bd:
         de:d9:4a:44:e0:a4:ae:ca:06:a5:79:40:76:9e:3f:d4:2c:90:
         d4:90:b6:cb:b6:79:14:36:2f:ee:f0:b6:b1:66:36:78:aa:e9:
         c9:ae:59:d4:29:11:b9:40:18:9f:cd:89:e5:75:b2:70:62:71:
         4c:65:41:f3:60:15:21:bf:09:18:e0:d9:86:8c:cd:26:ec:ec:
         40:6a:a1:22:8f:5d:e4:44:c7:43:74:cb:8d:8f:30:57:51:ac:
         45:da:73:9a:f5:da:b0:14:07:72:66:b9:3c:78:7a:d0:14:cc:
         d0:0e:42:12:09:93:fc:33:7a:48:84:d0:8d:ca:33:29:0d:7d:
         a1:06:6f:24:3c:30:dd:5d:c6:a3:f1:8f:d2:34:b7:41:f4:91:
         8f:40:15:0c:ca:8e:a2:d3:93:5c:c5:26:93:84:05:67:dd:e9:
         e7:19:fa:23:57:8d:a7:0d:7c:06:05:d5:3c:b9:36:6f:a3:a3:
         6a:03:83:4a:69:9b:c0:cd:02:b9:60:fb:3f:b0:f4:f5:f2:d1:
         c9:ee:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:43:11 2025 by rpki-client