This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/34352e3233302e36342e302f32322d3234203d3e20323636373032.roa
File:                     34352e3233302e36342e302f32322d3234203d3e20323636373032.roa (raw, json)
Hash identifier:          sZKkea4xmNdkbWprZBYAdTrlxVACCzL24NlmA9JFUKk=
Subject key identifier:   07:B9:3D:A6:24:34:74:CC:D1:F4:5C:4E:20:F6:2D:17:3F:B6:0D:2D
Certificate issuer:       /CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
Certificate serial:       249C72AC6FA4B8AE29D25BF66D6070E443EA0B12
Authority key identifier: 27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/34352e3233302e36342e302f32322d3234203d3e20323636373032.roa
Signing time:             Tue 06 Jan 2026 20:52:30 +0000
ROA not before:           Tue 06 Jan 2026 20:47:30 +0000
ROA not after:            Tue 05 Jan 2027 20:52:30 +0000
asID:                     266702
IP address blocks:        45.230.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9c:72:ac:6f:a4:b8:ae:29:d2:5b:f6:6d:60:70:e4:43:ea:0b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27FE79291A5C3D66DAA7564D181C08DDA1B23D02
        Validity
            Not Before: Jan  6 20:47:30 2026 GMT
            Not After : Jan  5 20:52:30 2027 GMT
        Subject: CN=07B93DA6243474CCD1F45C4E20F62D173FB60D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:b8:c5:b8:8a:f3:6b:e1:9c:fe:88:df:38:
                    a0:d3:eb:f5:a6:b9:31:a7:cf:de:65:ce:98:ca:f0:
                    d6:83:03:a5:ac:01:00:6e:7f:c8:83:c8:fb:0a:99:
                    5e:1e:c0:14:a3:13:d6:12:8b:53:a2:ff:96:10:10:
                    03:0b:1d:61:a4:23:4b:cc:2f:32:0f:44:10:9f:85:
                    f4:61:e5:b7:cb:a4:5b:34:01:cd:2f:82:35:f9:97:
                    44:96:86:bc:1b:4f:f9:dd:36:4d:65:ad:78:c0:d0:
                    f6:6a:38:f8:66:64:59:71:ff:7b:04:a2:7b:93:a8:
                    50:b4:16:58:f3:38:5d:85:92:72:f0:56:d7:ea:bc:
                    e8:56:f9:22:60:d4:61:c1:8a:4f:8f:05:9d:33:5d:
                    3a:f0:5e:cb:b7:92:f1:5f:31:c0:c2:24:05:4b:70:
                    fd:a5:88:41:96:a7:af:14:e1:d9:64:46:2b:3f:15:
                    61:45:af:ad:33:d3:85:f8:a0:e5:e9:86:92:98:4d:
                    ec:6c:b3:a6:0e:69:cd:2c:dd:9b:09:5a:7e:b2:92:
                    75:0d:32:5b:68:bd:7c:56:10:c2:f3:bf:44:f9:c7:
                    71:7a:b2:99:0d:ec:84:45:58:0e:ad:00:92:f7:6d:
                    7e:7e:65:6c:1d:37:17:f8:b5:a1:6e:e9:4e:6e:ec:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B9:3D:A6:24:34:74:CC:D1:F4:5C:4E:20:F6:2D:17:3F:B6:0D:2D
            X509v3 Authority Key Identifier:
                keyid:27:FE:79:29:1A:5C:3D:66:DA:A7:56:4D:18:1C:08:DD:A1:B2:3D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27FE79291A5C3D66DAA7564D181C08DDA1B23D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E5DA6A46D8582A3AC672D5744AF4793C5C0C55C06AD919F84AC45CCB94F07DD/0/34352e3233302e36342e302f32322d3234203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:81:c7:2a:e6:cd:96:2e:35:0a:ff:1d:bb:c5:d5:f5:70:
         75:39:20:f9:38:3b:b5:ce:cc:36:4d:34:18:23:35:09:10:09:
         29:72:2f:e3:34:a1:be:cd:c3:d5:55:a7:f4:86:af:e0:47:3e:
         81:5c:cf:51:9a:3a:4b:78:85:ae:cf:3f:94:c3:c5:1a:bb:c5:
         ae:16:58:36:8c:25:ab:bc:9a:c2:bc:c6:c4:23:8d:8a:14:aa:
         3d:7f:bb:e7:fb:5c:8d:86:98:43:71:27:a6:bb:c9:05:67:77:
         6c:0d:13:42:2e:53:5c:cf:b3:22:b4:c0:c4:83:e0:d2:86:6d:
         b3:71:6d:36:5b:54:87:0a:d4:7e:c4:eb:ae:46:16:4b:02:90:
         bb:07:7e:ca:98:95:c3:53:fb:57:37:80:56:42:04:47:28:c7:
         0e:82:3a:cb:a0:f1:e0:45:52:b0:9c:63:99:44:65:ed:9f:d2:
         d0:6d:8b:82:aa:ba:e9:9d:c0:49:f8:25:56:e4:9a:5e:9f:b8:
         e1:ed:b8:ee:7b:a5:98:5f:2d:be:b0:86:b5:e2:e0:25:81:ff:
         5b:c5:ad:a1:56:0f:66:1f:12:6b:a5:05:10:bc:f4:82:00:76:
         c9:60:b9:38:dd:08:86:9e:c3:01:f3:8b:d7:ab:47:ec:aa:18:
         12:e0:3c:60
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJJxyrG+kuK4p0lv2bWBw5EPqCxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdGRTc5MjkxQTVDM0Q2NkRBQTc1NjREMTgxQzA4RERB
MUIyM0QwMjAeFw0yNjAxMDYyMDQ3MzBaFw0yNzAxMDUyMDUyMzBaMDMxMTAvBgNV
BAMTKDA3QjkzREE2MjQzNDc0Q0NEMUY0NUM0RTIwRjYyRDE3M0ZCNjBEMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOE7jFuIrza+Gc/ojfOKDT6/Wm
uTGnz95lzpjK8NaDA6WsAQBuf8iDyPsKmV4ewBSjE9YSi1Oi/5YQEAMLHWGkI0vM
LzIPRBCfhfRh5bfLpFs0Ac0vgjX5l0SWhrwbT/ndNk1lrXjA0PZqOPhmZFlx/3sE
onuTqFC0FljzOF2FknLwVtfqvOhW+SJg1GHBik+PBZ0zXTrwXsu3kvFfMcDCJAVL
cP2liEGWp68U4dlkRis/FWFFr60z04X4oOXphpKYTexss6YOac0s3ZsJWn6yknUN
MltovXxWEMLzv0T5x3F6spkN7IRFWA6tAJL3bX5+ZWwdNxf4taFu6U5u7L+rAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUB7k9piQ0dMzR9FxOIPYtFz+2DS0wHwYDVR0j
BBgwFoAUJ/55KRpcPWbap1ZNGBwI3aGyPQIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTVEQTZBNDZEODU4MkEzQUM2NzJENTc0NEFGNDc5M0M1
QzBDNTVDMDZBRDkxOUY4NEFDNDVDQ0I5NEYwN0RELzAvMjdGRTc5MjkxQTVDM0Q2
NkRBQTc1NjREMTgxQzA4RERBMUIyM0QwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0ZFNzkyOTFBNUMzRDY2REFB
NzU2NEQxODFDMDhEREExQjIzRDAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU1REE2QTQ2RDg1ODJBM0FDNjcyRDU3NDRBRjQ3OTNDNUMwQzU1QzA2
QUQ5MTlGODRBQzQ1Q0NCOTRGMDdERC8wLzM0MzUyZTMyMzMzMDJlMzYzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3mQDAN
BgkqhkiG9w0BAQsFAAOCAQEAnuGBxyrmzZYuNQr/HbvF1fVwdTkg+Tg7tc7MNk00
GCM1CRAJKXIv4zShvs3D1VWn9Iav4Ec+gVzPUZo6S3iFrs8/lMPFGrvFrhZYNowl
q7yawrzGxCONihSqPX+75/tcjYaYQ3EnprvJBWd3bA0TQi5TXM+zIrTAxIPg0oZt
s3FtNltUhwrUfsTrrkYWSwKQuwd+ypiVw1P7VzeAVkIERyjHDoI6y6Dx4EVSsJxj
mURl7Z/S0G2Lgqq66Z3ASfglVuSaXp+44e247nulmF8tvrCGteLgJYH/W8WtoVYP
Zh8Sa6UFELz0ggB2yWC5ON0Ihp7DAfOL16tH7KoYEuA8YA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:51:29 2026 by rpki-client