This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32332d3233203d3e20323635383236.roa
File:                     34352e37302e3232382e302f32332d3233203d3e20323635383236.roa (raw, json)
Hash identifier:          cc/HvGAF7CbJMn+ObiWopGWYmG2YgO+DtoR2oikGzTE=
Subject key identifier:   42:A4:98:F9:7C:4D:1A:0D:05:E0:8B:2D:C3:B0:B5:EE:C2:FA:DD:B6
Certificate issuer:       /CN=F785859FBACDBEF31792F07975E7101B28F16433
Certificate serial:       629A25DE185F7D9F5D96AD54ABC3EF12301E485D
Authority key identifier: F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32332d3233203d3e20323635383236.roa
Signing time:             Tue 06 Jan 2026 19:18:59 +0000
ROA not before:           Tue 06 Jan 2026 19:13:59 +0000
ROA not after:            Tue 05 Jan 2027 19:18:59 +0000
asID:                     265826
IP address blocks:        45.70.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9a:25:de:18:5f:7d:9f:5d:96:ad:54:ab:c3:ef:12:30:1e:48:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F785859FBACDBEF31792F07975E7101B28F16433
        Validity
            Not Before: Jan  6 19:13:59 2026 GMT
            Not After : Jan  5 19:18:59 2027 GMT
        Subject: CN=42A498F97C4D1A0D05E08B2DC3B0B5EEC2FADDB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:30:38:2e:1a:ec:0d:29:1b:99:95:93:60:
                    51:d0:de:58:9b:53:a7:b9:fd:18:e4:49:13:7d:e3:
                    93:c3:41:92:e2:66:49:c7:87:0b:c6:f0:11:10:d2:
                    5c:6d:b0:b5:fb:01:fa:be:74:88:55:d7:5c:b1:91:
                    3a:b4:5e:46:e1:77:06:63:c1:9f:41:ea:a8:ba:a4:
                    4a:c1:6f:99:1c:67:a7:4f:37:49:c7:86:83:42:39:
                    37:f8:36:b3:7f:17:99:69:a4:c1:c3:de:da:20:de:
                    d7:fe:b5:0a:81:86:ce:9e:c4:d2:2f:41:80:6b:7c:
                    06:89:df:6b:e5:00:6f:c2:a6:ef:26:48:80:96:2a:
                    3a:9d:85:af:21:e5:03:ab:75:36:93:67:5e:95:80:
                    2c:af:06:c5:13:bc:f3:27:c9:11:71:9e:48:5f:b7:
                    21:9d:56:ab:36:ba:ef:da:f7:5c:01:a8:25:be:dc:
                    6a:e2:08:f1:fc:0f:60:23:d0:aa:fc:9e:c3:c8:b3:
                    30:44:c4:3c:49:e5:b1:48:19:0b:4e:a6:01:5a:e5:
                    33:fa:c6:6d:ae:ec:b7:e2:7d:46:1d:3a:0e:1a:46:
                    d8:26:81:be:7b:0b:3e:15:87:cc:37:1e:16:59:60:
                    40:5d:bb:bc:fa:cf:b3:24:24:4a:79:4e:56:29:82:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:98:F9:7C:4D:1A:0D:05:E0:8B:2D:C3:B0:B5:EE:C2:FA:DD:B6
            X509v3 Authority Key Identifier:
                keyid:F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32332d3233203d3e20323635383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:c6:e8:10:76:2a:bd:07:8b:55:09:88:8d:d0:12:86:1d:43:
         e4:5d:75:2c:f9:21:f6:aa:fb:3b:9d:15:66:5e:bf:6d:10:5f:
         c2:4b:eb:8e:db:a7:bb:2d:13:f6:f7:74:40:1f:17:f8:3b:25:
         37:b3:f1:a8:ee:61:19:ab:6e:a4:92:dd:43:e4:f6:0a:b7:10:
         2c:59:d2:2e:bd:9d:e2:ed:11:7a:e3:48:06:f0:a1:01:5d:b7:
         79:30:b5:5d:cc:9b:ce:91:ff:85:82:f3:73:b0:63:e6:79:04:
         43:76:ff:4b:43:5c:41:8f:84:57:ac:20:93:b2:d1:c0:c1:08:
         d8:60:7e:fa:12:e1:05:8f:41:10:de:53:58:dc:65:fc:11:49:
         d3:48:07:33:10:c8:a6:7e:ef:03:d3:0a:41:6a:1e:cc:23:d2:
         a0:fe:af:d2:a6:d9:51:5c:15:eb:e8:8b:d0:b6:6f:d6:4a:63:
         1a:f1:fb:41:d9:1f:20:ad:7d:f9:62:a9:2a:d2:db:98:2e:9f:
         a1:81:00:36:b2:73:42:78:bf:ba:4b:b1:3d:1d:4d:1a:9e:95:
         fd:e1:06:da:2c:00:68:1f:e0:5c:9f:eb:5b:44:c3:33:91:10:
         39:4b:ad:d1:c3:22:8f:c8:94:68:43:45:69:fb:9e:9f:f9:fe:
         3e:67:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:59:51 2026 by rpki-client