This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137312e302f32342d3234203d3e20323635383333.roa
File:                     34352e37302e3137312e302f32342d3234203d3e20323635383333.roa (raw, json)
Hash identifier:          E+ksgDb/c7zzPsj5e0e8VF2//zwtSU8cFg3ElIuavXE=
Subject key identifier:   22:B0:1F:53:9C:B1:45:69:29:0C:63:74:FE:40:2A:09:10:43:DA:F7
Certificate issuer:       /CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
Certificate serial:       2483785BE914599AA9F18389CCB9DABBA6054749
Authority key identifier: 80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137312e302f32342d3234203d3e20323635383333.roa
Signing time:             Tue 06 Jan 2026 19:25:33 +0000
ROA not before:           Tue 06 Jan 2026 19:20:33 +0000
ROA not after:            Tue 05 Jan 2027 19:25:33 +0000
asID:                     265833
IP address blocks:        45.70.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 01:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:83:78:5b:e9:14:59:9a:a9:f1:83:89:cc:b9:da:bb:a6:05:47:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB
        Validity
            Not Before: Jan  6 19:20:33 2026 GMT
            Not After : Jan  5 19:25:33 2027 GMT
        Subject: CN=22B01F539CB14569290C6374FE402A091043DAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:4d:8d:9b:d7:dc:8f:02:b6:70:dc:04:25:
                    e2:e7:a8:df:c0:46:06:4c:b2:a5:ab:39:73:11:28:
                    de:c4:c9:b9:29:ee:7b:6c:5e:a1:c3:37:2e:50:e0:
                    01:cd:91:8a:ac:7c:3c:94:12:52:37:3e:f7:c0:56:
                    98:6b:de:aa:de:a9:d0:28:49:0e:69:6c:f5:e3:8b:
                    d1:07:b9:f6:ba:3c:aa:71:a0:ab:99:ef:26:dc:c9:
                    6e:ae:19:9a:c9:aa:4b:88:e7:28:94:ec:1e:b1:dd:
                    1a:86:d8:ab:50:bb:3d:84:85:bc:df:16:7f:a2:7f:
                    e7:df:9f:c1:d7:ef:50:dc:d0:3d:1b:98:64:4d:3f:
                    68:bf:ce:c2:ec:f2:1f:06:0a:1f:ad:15:57:21:4b:
                    d2:04:94:b8:f4:e2:b3:9b:30:59:00:ef:4d:49:a6:
                    fc:3c:e8:76:55:a0:58:65:9c:5a:34:98:7d:11:32:
                    45:cc:fd:46:83:c7:1e:e2:e3:ff:1c:74:11:b2:4c:
                    65:f8:11:bb:16:92:10:de:30:e0:43:79:02:a9:80:
                    08:8d:1a:4a:34:04:8d:7b:ef:3e:f0:74:23:91:dc:
                    0c:8a:96:bd:47:21:81:14:9d:b0:30:1b:81:f5:cd:
                    fb:be:2a:e6:ff:f1:fe:df:47:31:bf:ef:bf:11:25:
                    7f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B0:1F:53:9C:B1:45:69:29:0C:63:74:FE:40:2A:09:10:43:DA:F7
            X509v3 Authority Key Identifier:
                keyid:80:F7:A4:CB:2F:28:ED:1C:BB:79:FD:29:CE:13:77:70:37:61:DF:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80F7A4CB2F28ED1CBB79FD29CE1377703761DFEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/989BCE6925D2E47C485897998703979101B6FBA495FBD089F0835A87C3829297/0/34352e37302e3137312e302f32342d3234203d3e20323635383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:49:bf:66:55:70:dd:e4:cf:f8:cc:a9:14:e1:c6:55:f9:05:
         28:e2:32:68:95:8c:a7:68:07:7b:33:d3:97:30:4a:8b:40:7c:
         fd:27:22:7e:b5:94:78:96:03:13:ca:c4:86:ca:9b:5b:6f:6a:
         ca:85:87:ed:d0:c6:c9:a3:ab:1c:bd:56:c7:71:68:28:ff:d7:
         aa:36:95:df:e5:1d:7d:e6:40:45:3e:6f:28:20:90:a5:d8:29:
         1f:16:d3:df:0f:47:a1:35:7c:97:21:d5:52:ea:57:1e:72:66:
         a8:dd:fd:e9:53:dd:f4:fd:7e:a4:5b:fa:24:54:e0:10:ca:88:
         73:69:f4:a7:e4:a9:49:f3:64:37:9c:cc:99:7d:6d:61:b8:16:
         08:9f:38:c7:ef:9f:fd:94:d2:b7:81:ad:f5:24:35:f3:ef:3d:
         d9:27:a0:6d:2c:2d:0c:54:4f:cc:a3:11:62:7a:f8:7d:6d:37:
         d1:8b:ce:2f:1b:99:a3:b1:9b:c6:c4:ca:f1:d6:08:74:2c:46:
         8c:66:44:76:12:77:68:51:92:ab:74:35:10:4b:b8:14:b7:7b:
         84:43:fa:14:59:fa:d6:e5:ab:1f:cb:5b:43:80:43:86:17:50:
         05:48:7c:74:e7:17:00:0f:50:d5:0d:0b:81:d7:2d:f9:7b:11:
         37:e1:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:50 2026 by rpki-client