This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38362e302f32342d3234203d3e20323636383134.roa
File:                     34352e3233342e38362e302f32342d3234203d3e20323636383134.roa (raw, json)
Hash identifier:          MJLGXf/c5qZ3xjTLNf5u0/Wl4xFlNu75XZrvTGeAniE=
Subject key identifier:   23:D0:CF:6B:F8:81:52:78:C1:CC:FC:39:D6:44:5E:81:FC:37:E4:D5
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       2313BBE15EC36B1C0371C6AACE2094F5A7918F3F
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38362e302f32342d3234203d3e20323636383134.roa
Signing time:             Wed 07 Jan 2026 20:59:20 +0000
ROA not before:           Wed 07 Jan 2026 20:54:20 +0000
ROA not after:            Wed 06 Jan 2027 20:59:20 +0000
asID:                     266814
IP address blocks:        45.234.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:bb:e1:5e:c3:6b:1c:03:71:c6:aa:ce:20:94:f5:a7:91:8f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Jan  7 20:54:20 2026 GMT
            Not After : Jan  6 20:59:20 2027 GMT
        Subject: CN=23D0CF6BF8815278C1CCFC39D6445E81FC37E4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:62:0f:48:9c:d2:55:c1:a6:87:7a:7b:27:
                    21:7e:9c:17:3b:af:9b:f9:33:0e:f9:18:39:e2:bd:
                    3f:79:5d:0e:fb:31:c7:09:98:32:57:bc:d7:4c:6d:
                    15:61:ff:b5:44:2d:0f:28:4a:7a:bd:22:e4:65:2e:
                    7a:e0:2a:db:21:9c:95:78:ef:29:1f:2c:32:5c:69:
                    68:13:92:ad:91:65:12:e3:bb:d2:b9:6f:8e:10:a6:
                    be:88:2e:99:5b:77:d8:9e:ae:bd:e0:3c:cd:f4:1d:
                    5a:3b:a8:44:79:38:99:cc:63:5f:4f:2c:40:ad:8e:
                    65:d9:e8:31:af:88:bc:7b:ac:1e:27:11:60:f5:67:
                    0d:3f:58:93:51:fd:d3:54:de:0e:18:a4:f3:16:ae:
                    ba:b3:b1:b2:66:f8:0e:bf:26:13:30:c5:65:c0:cd:
                    54:19:d2:1b:bf:15:7e:af:8f:d9:f2:1e:1c:82:09:
                    e9:b1:fd:af:8f:01:51:a1:00:c0:5e:26:0d:e5:de:
                    d6:76:43:57:bf:f5:ff:0f:67:b9:15:d9:22:b3:de:
                    ac:04:c5:bc:c8:d6:73:f4:fd:15:1c:82:ee:26:37:
                    6a:2a:52:00:c5:e8:81:fd:f1:2c:3a:35:49:42:66:
                    03:4f:83:77:dd:25:61:a5:bf:cd:58:d8:d9:d0:8a:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D0:CF:6B:F8:81:52:78:C1:CC:FC:39:D6:44:5E:81:FC:37:E4:D5
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38362e302f32342d3234203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:e9:b8:82:7b:fb:93:9f:ff:a4:12:e4:60:7c:1d:f4:93:
         4c:14:9c:e1:9d:74:26:7c:f5:6d:58:48:8d:79:1f:35:77:51:
         48:b5:4d:d9:d7:e1:3b:c3:0c:d9:87:4a:10:d2:3f:e5:9a:ed:
         90:ef:f0:c2:39:a1:22:ba:d3:55:8c:e1:f8:6f:58:b4:76:38:
         1f:e9:e5:44:92:9d:fc:29:34:1a:ed:b6:0c:16:13:9d:97:8f:
         9d:d3:74:5f:22:f4:ea:72:5a:31:03:28:ee:02:82:e3:d9:c3:
         18:fb:c4:6b:5c:e7:f4:85:45:73:97:fb:4c:68:da:61:96:ee:
         bd:ac:db:a4:c1:4d:bc:c9:38:0e:c6:46:24:5b:eb:9b:a1:24:
         86:2e:f1:cd:a6:e5:af:44:52:e6:a3:04:cc:2d:a6:82:58:05:
         15:13:3b:c6:1f:72:db:da:1f:20:2c:59:e7:12:36:a0:29:98:
         1f:1f:c6:69:e4:fa:ae:1f:a7:88:77:b3:fb:ee:9a:6b:d5:e7:
         92:8b:d0:fb:c2:e2:51:e9:d7:5f:2f:c5:db:d3:d3:5c:54:da:
         da:65:eb:8f:f8:ab:98:31:cb:79:9b:82:66:a0:3e:dd:36:eb:
         18:38:aa:52:b0:10:63:a0:69:96:10:f1:d6:a6:4a:c6:a8:2a:
         7d:80:13:ad
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIxO74V7DaxwDccaqziCU9aeRjz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERBMDJERTUxRjNBRTlENDQ0NEIyOUZFNUZDODUyODZD
MjY0NTIxRjAeFw0yNjAxMDcyMDU0MjBaFw0yNzAxMDYyMDU5MjBaMDMxMTAvBgNV
BAMTKDIzRDBDRjZCRjg4MTUyNzhDMUNDRkMzOUQ2NDQ1RTgxRkMzN0U0RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZmIPSJzSVcGmh3p7JyF+nBc7
r5v5Mw75GDnivT95XQ77MccJmDJXvNdMbRVh/7VELQ8oSnq9IuRlLnrgKtshnJV4
7ykfLDJcaWgTkq2RZRLju9K5b44Qpr6ILplbd9ierr3gPM30HVo7qER5OJnMY19P
LECtjmXZ6DGviLx7rB4nEWD1Zw0/WJNR/dNU3g4YpPMWrrqzsbJm+A6/JhMwxWXA
zVQZ0hu/FX6vj9nyHhyCCemx/a+PAVGhAMBeJg3l3tZ2Q1e/9f8PZ7kV2SKz3qwE
xbzI1nP0/RUcgu4mN2oqUgDF6IH98Sw6NUlCZgNPg3fdJWGlv81Y2NnQiqzhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUI9DPa/iBUnjBzPw51kRegfw35NUwHwYDVR0j
BBgwFoAUDaAt5R866dRESyn+X8hShsJkUh8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RjhCMDU4RUVCRTVGMDEyNkNCNUNGODU3MTQxRDI5QzhD
NTQ3QzIyMDJBQjlGMDgwMzg1QTRGM0NGODU3NDM4LzAvMERBMDJERTUxRjNBRTlE
NDQ0NEIyOUZFNUZDODUyODZDMjY0NTIxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREEwMkRFNTFGM0FFOUQ0NDQ0
QjI5RkU1RkM4NTI4NkMyNjQ1MjFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEY4QjA1OEVFQkU1RjAxMjZDQjVDRjg1NzE0MUQyOUM4QzU0N0MyMjAy
QUI5RjA4MDM4NUE0RjNDRjg1NzQzOC8wLzM0MzUyZTMyMzMzNDJlMzgzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3qVjAN
BgkqhkiG9w0BAQsFAAOCAQEAbYnpuIJ7+5Of/6QS5GB8HfSTTBSc4Z10Jnz1bVhI
jXkfNXdRSLVN2dfhO8MM2YdKENI/5ZrtkO/wwjmhIrrTVYzh+G9YtHY4H+nlRJKd
/Ck0Gu22DBYTnZePndN0XyL06nJaMQMo7gKC49nDGPvEa1zn9IVFc5f7TGjaYZbu
vazbpMFNvMk4DsZGJFvrm6Ekhi7xzablr0RS5qMEzC2mglgFFRM7xh9y29ofICxZ
5xI2oCmYHx/GaeT6rh+niHez++6aa9XnkovQ+8LiUenXXy/F29PTXFTa2mXrj/ir
mDHLeZuCZqA+3TbrGDiqUrAQY6BplhDx1qZKxqgqfYATrQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:24:54 2026 by rpki-client