This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131372e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          e2TI4+ujLWvksI0fVAWIVB+yj2jQx3BhzQEgidElbmI=
Subject key identifier:   31:DE:A3:D7:03:28:3B:03:4E:39:5A:E5:67:E1:95:6E:45:66:CC:3E
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       6939FF2BBC660CE980677FCFCF5B3E7BCC091C93
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 22 Jan 2026 20:26:57 +0000
ROA not before:           Thu 22 Jan 2026 20:21:57 +0000
ROA not after:            Thu 21 Jan 2027 20:26:57 +0000
asID:                     265684
IP address blocks:        45.5.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:39:ff:2b:bc:66:0c:e9:80:67:7f:cf:cf:5b:3e:7b:cc:09:1c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Jan 22 20:21:57 2026 GMT
            Not After : Jan 21 20:26:57 2027 GMT
        Subject: CN=31DEA3D703283B034E395AE567E1956E4566CC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:8e:a7:b8:42:b0:90:bb:b5:02:32:11:3a:
                    fd:40:c3:f5:c5:0e:e1:9c:f5:fd:6a:10:67:80:f0:
                    f9:7d:3f:ee:87:70:cb:ce:7a:7f:4a:98:0f:a9:98:
                    dd:5d:06:33:87:75:6d:e7:10:74:90:e7:8b:de:60:
                    b2:6c:05:b4:42:6d:3b:d1:41:50:d4:72:65:bd:11:
                    c2:73:ad:0e:ce:c6:3a:7d:27:c6:87:be:58:e3:67:
                    83:4c:97:16:07:61:97:36:05:87:df:6d:0b:b2:87:
                    4a:51:c9:c7:f9:7c:66:c4:cc:0e:ba:5f:70:26:bb:
                    7b:ac:4a:a3:fa:ff:71:26:4f:51:9b:81:15:1f:a7:
                    f6:07:9d:55:93:f5:1a:3c:78:9b:84:45:af:6d:c9:
                    5e:34:f7:56:70:04:7a:9e:55:45:71:07:57:d8:ec:
                    d6:6c:ee:3c:12:5e:49:be:69:97:33:c1:a7:7c:2f:
                    5d:4a:2d:d0:e0:c7:5b:80:ac:a0:6d:e7:fc:92:b8:
                    31:3d:81:b2:80:03:81:99:67:62:0e:74:31:a4:ec:
                    30:6a:af:2e:60:3d:b7:0b:43:f8:d9:57:f5:fd:ee:
                    f0:4e:b7:0e:ae:f5:d6:b7:e1:0d:bb:a3:5d:c2:06:
                    03:aa:2e:36:3d:d7:8b:3c:42:cd:36:e4:1b:5f:b2:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DE:A3:D7:03:28:3B:03:4E:39:5A:E5:67:E1:95:6E:45:66:CC:3E
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:82:ce:fe:68:8d:f9:98:34:94:1f:c4:39:dc:fd:4c:c9:
         0d:10:2b:ad:b1:a9:27:ee:cc:39:09:3b:74:d1:c3:21:af:5d:
         90:94:9f:69:81:d3:e8:59:2b:8c:29:ff:79:40:4b:f1:4c:b3:
         3a:68:65:1e:1a:0b:e8:44:8d:14:e4:fa:54:aa:a7:66:f0:e9:
         ce:49:53:4b:6e:ed:a5:3e:89:a6:65:79:e9:31:9c:6a:e3:69:
         f6:08:49:30:4f:86:fc:0e:92:0b:d0:46:51:31:29:e7:14:66:
         b0:7a:01:66:f5:72:03:f1:f0:bb:f2:3e:28:78:02:7d:20:1b:
         68:51:0e:31:f2:9e:c1:ff:1e:2f:d2:35:d7:ed:5a:3c:1e:8b:
         44:0f:fe:d8:a8:ff:03:6e:27:48:55:bd:1d:53:db:e3:54:09:
         8c:83:8b:ee:62:12:12:5f:d7:4e:10:05:3c:07:5a:e7:e9:1b:
         01:99:e4:79:a0:87:02:9b:10:29:ed:e6:8f:f8:ad:f5:39:43:
         e0:89:58:94:1e:ff:83:cb:62:00:a3:2e:9a:c9:c2:f1:1f:f7:
         4f:0b:14:38:06:a6:b7:d8:c3:34:ea:dc:f4:c3:0b:da:74:b2:
         9f:fd:89:8a:25:f2:ed:c9:af:10:7a:f1:47:72:7b:7e:84:4b:
         07:06:06:d8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUaTn/K7xmDOmAZ3/Pz1s+e8wJHJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNjAxMjIyMDIxNTdaFw0yNzAxMjEyMDI2NTdaMDMxMTAvBgNV
BAMTKDMxREVBM0Q3MDMyODNCMDM0RTM5NUFFNTY3RTE5NTZFNDU2NkNDM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqIo6nuEKwkLu1AjIROv1Aw/XF
DuGc9f1qEGeA8Pl9P+6HcMvOen9KmA+pmN1dBjOHdW3nEHSQ54veYLJsBbRCbTvR
QVDUcmW9EcJzrQ7Oxjp9J8aHvljjZ4NMlxYHYZc2BYffbQuyh0pRycf5fGbEzA66
X3Amu3usSqP6/3EmT1GbgRUfp/YHnVWT9Ro8eJuERa9tyV4091ZwBHqeVUVxB1fY
7NZs7jwSXkm+aZczwad8L11KLdDgx1uArKBt5/ySuDE9gbKAA4GZZ2IOdDGk7DBq
ry5gPbcLQ/jZV/X97vBOtw6u9da34Q27o13CBgOqLjY914s8Qs025BtfsnpRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMd6j1wMoOwNOOVrlZ+GVbkVmzD4wHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzM0MzUyZTM1MmUzMTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtBXUwDQYJ
KoZIhvcNAQELBQADggEBAJ4ogs7+aI35mDSUH8Q53P1MyQ0QK62xqSfuzDkJO3TR
wyGvXZCUn2mB0+hZK4wp/3lAS/FMszpoZR4aC+hEjRTk+lSqp2bw6c5JU0tu7aU+
iaZleekxnGrjafYISTBPhvwOkgvQRlExKecUZrB6AWb1cgPx8LvyPih4An0gG2hR
DjHynsH/Hi/SNdftWjwei0QP/tio/wNuJ0hVvR1T2+NUCYyDi+5iEhJf104QBTwH
WufpGwGZ5HmghwKbECnt5o/4rfU5Q+CJWJQe/4PLYgCjLprJwvEf908LFDgGprfY
wzTq3PTDC9p0sp/9iYol8u3JrxB68Udye36ESwcGBtg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:21 2026 by rpki-client