This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/34352e3233392e34382e302f32322d3234203d3e20323633323338.roa
File:                     34352e3233392e34382e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          tmDMveANvaNd15MFnZjKrjIPGf69BIbN0OS3+gEBbr8=
Subject key identifier:   F7:5D:0E:09:8E:47:DC:B7:7A:7B:AB:B6:80:E6:E8:87:64:5D:30:96
Certificate issuer:       /CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
Certificate serial:       35C8644EB6283E2A0DA5BEE351D378DD82E202B0
Authority key identifier: E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/34352e3233392e34382e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 06 Jan 2026 19:12:34 +0000
ROA not before:           Tue 06 Jan 2026 19:07:34 +0000
ROA not after:            Tue 05 Jan 2027 19:12:34 +0000
asID:                     263238
IP address blocks:        45.239.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c8:64:4e:b6:28:3e:2a:0d:a5:be:e3:51:d3:78:dd:82:e2:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
        Validity
            Not Before: Jan  6 19:07:34 2026 GMT
            Not After : Jan  5 19:12:34 2027 GMT
        Subject: CN=F75D0E098E47DCB77A7BABB680E6E887645D3096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:bc:c0:3b:f5:ab:d5:8d:eb:50:5e:f5:2b:
                    4a:7a:d4:c5:90:a4:88:05:20:f6:7d:f2:f3:79:41:
                    16:ab:ec:1d:30:36:be:1f:05:31:77:d9:4a:c9:06:
                    f2:28:f9:41:cf:1c:93:11:0a:de:2d:db:e5:57:2b:
                    28:0e:e1:09:2d:e0:25:1b:4b:f1:99:30:14:03:7e:
                    b6:0a:9a:1e:a7:82:f9:9f:d1:65:0e:37:06:45:fb:
                    b4:a4:8d:90:10:5a:ab:f6:e1:15:cf:44:77:14:a3:
                    61:3b:40:75:53:05:82:de:6b:b2:0e:b6:7b:03:49:
                    82:a2:02:85:9b:bd:38:21:cc:e4:eb:9b:6c:eb:a9:
                    79:5a:62:77:84:fb:74:a9:b8:ba:25:c9:48:1d:8b:
                    46:9c:01:4b:39:10:f1:8f:e9:ef:af:89:b3:98:89:
                    4a:54:80:b6:6c:b7:77:c7:29:10:08:9d:0e:7b:59:
                    89:b2:3a:4b:70:0b:4e:65:6d:e8:0b:80:f7:63:a3:
                    a2:4a:f9:19:cd:53:09:c1:7f:c5:c2:d1:f8:a4:19:
                    9f:a4:be:db:19:d4:b4:93:bc:2d:49:c1:ab:63:96:
                    43:f7:5f:90:49:f5:a8:47:8a:19:18:c0:b8:bf:2c:
                    66:1a:96:f7:21:c3:c2:ac:cf:f0:63:e8:e5:a7:10:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:0E:09:8E:47:DC:B7:7A:7B:AB:B6:80:E6:E8:87:64:5D:30:96
            X509v3 Authority Key Identifier:
                keyid:E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/34352e3233392e34382e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:3b:4e:8a:a4:49:7a:d7:67:86:ea:e6:6b:15:56:24:1b:
         51:9a:c1:fe:08:fd:2c:8f:c9:de:42:93:72:72:6a:9d:cf:ba:
         b7:a8:c9:9a:19:39:56:9a:c9:10:bf:44:46:14:7a:2c:df:ee:
         8f:25:95:4f:73:7c:b3:ad:03:1a:46:bf:de:38:db:e5:02:f5:
         31:b7:75:25:d4:50:ea:78:8f:17:1f:6e:7b:6d:75:d5:dd:fe:
         01:90:1c:fa:0d:60:1d:2f:17:83:7f:6a:31:95:94:f2:37:b8:
         ca:4b:ed:c7:77:27:9a:78:48:26:6a:6a:0f:55:fb:9d:7a:32:
         49:03:9d:d9:d1:30:7d:82:41:67:14:5f:7d:3e:72:54:1f:4c:
         05:af:28:12:31:a7:a5:90:4e:23:76:de:e8:e3:e1:13:1a:dd:
         63:9e:8f:f4:43:bd:29:55:a1:a8:af:87:36:b8:06:fe:55:c4:
         ad:98:78:b1:2e:44:5c:6f:b2:93:96:d7:63:4f:a3:f3:13:f4:
         e4:ae:9e:87:a1:e6:92:93:09:b1:16:5f:96:14:5a:f1:90:09:
         8a:43:cb:0d:58:05:2c:88:82:5b:58:17:3c:69:32:48:20:07:
         0a:7e:a1:8c:5b:f5:1a:12:25:81:00:d7:10:34:fc:72:58:ab:
         e9:a0:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:28:15 2026 by rpki-client