This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32332d3233203d3e20323636383134.roa
File:                     34352e3233372e34342e302f32332d3233203d3e20323636383134.roa (raw, json)
Hash identifier:          0bL+gOXcVG4J2W5qL7/oWZlyqVY30oun8gcObnvMuSE=
Subject key identifier:   63:99:B0:D2:B6:41:AA:C2:69:2A:7E:04:A0:5F:D1:49:A5:EB:94:22
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       01DF207FD1B2F20F96954C7BC251D7DA60B6A354
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32332d3233203d3e20323636383134.roa
Signing time:             Wed 07 Jan 2026 20:59:19 +0000
ROA not before:           Wed 07 Jan 2026 20:54:19 +0000
ROA not after:            Wed 06 Jan 2027 20:59:19 +0000
asID:                     266814
IP address blocks:        45.237.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:20:7f:d1:b2:f2:0f:96:95:4c:7b:c2:51:d7:da:60:b6:a3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Jan  7 20:54:19 2026 GMT
            Not After : Jan  6 20:59:19 2027 GMT
        Subject: CN=6399B0D2B641AAC2692A7E04A05FD149A5EB9422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:aa:a3:88:75:e7:cf:d8:1b:b2:8f:a6:28:
                    0f:a2:88:b1:74:fe:af:61:47:79:58:21:71:c8:fe:
                    e3:47:3d:df:fd:8d:a8:52:7f:3d:a8:23:30:3f:b8:
                    5a:61:f7:af:52:c0:d2:94:1d:e2:2e:e1:af:8c:c6:
                    27:9f:0b:55:a2:56:a4:a2:e0:9d:7a:41:a1:c5:eb:
                    13:77:d2:18:b8:6f:5f:5f:b6:50:49:c1:16:c2:1c:
                    3c:bb:8e:40:a6:0e:a2:36:bf:55:f1:00:6b:c2:09:
                    91:60:d9:0b:c2:33:df:31:15:65:3f:af:91:00:dd:
                    7e:57:78:b1:d0:9e:f8:66:ad:8e:ff:12:a8:0a:0f:
                    2c:85:85:30:5d:2a:c0:cc:0f:bd:a7:05:23:29:27:
                    0c:a1:1a:fb:c8:7c:b3:76:7c:ee:62:d0:d5:b5:92:
                    e3:7b:d8:9e:0f:99:85:e6:77:c0:88:df:88:07:b0:
                    5d:6d:0f:9d:58:ef:33:59:5c:13:a1:be:c1:4f:32:
                    78:fb:b4:ee:0c:6a:06:7a:68:20:f1:bf:4d:f1:af:
                    ef:92:77:b9:b4:41:7d:51:a8:72:be:86:c5:f8:ab:
                    1b:ab:50:f7:e3:d1:2d:76:3b:c4:53:2f:9f:f0:b6:
                    d3:d6:34:1d:c0:7f:18:db:f7:34:04:03:3c:82:5a:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:B0:D2:B6:41:AA:C2:69:2A:7E:04:A0:5F:D1:49:A5:EB:94:22
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32332d3233203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:99:59:3e:9d:25:ea:b6:a8:8b:c7:ec:33:06:d5:63:a5:ca:
         75:0c:bd:c4:e0:0b:3e:75:f7:e8:a5:d3:f1:3b:bc:52:6d:3f:
         42:3b:21:55:ae:b6:3c:19:13:f4:bb:67:15:2e:53:1a:56:25:
         ca:19:80:36:a6:27:87:84:7e:4f:b6:95:40:ca:f4:09:f0:88:
         1c:4e:2e:fb:b2:87:3d:27:2b:bb:84:97:81:70:1c:b0:ef:91:
         a4:a0:95:ab:3c:3a:bf:9f:a5:19:47:33:4b:27:be:51:24:0b:
         52:50:9c:a3:40:14:51:33:04:07:ce:de:23:78:47:a4:01:18:
         e3:1b:00:15:61:c3:48:51:18:df:4a:a7:05:33:30:70:6f:a6:
         52:86:fe:f7:e9:06:02:bb:0f:db:ba:fa:d2:81:0e:c4:8d:0e:
         d0:ae:3a:3d:88:0f:d3:06:d9:8c:68:4f:c0:ab:a8:19:a1:cd:
         e4:8f:07:92:5f:bd:c0:38:5d:37:3b:68:d8:16:32:00:93:04:
         b0:d6:b0:5d:ba:01:84:a9:c0:72:3a:83:09:df:6d:96:6a:17:
         59:87:9c:28:e8:07:e6:b8:52:7e:94:d4:1c:d1:d9:92:0f:e2:
         63:c7:29:10:87:5a:a9:7f:7e:a5:2c:64:25:65:56:52:9e:42:
         c0:b8:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:24:38 2026 by rpki-client