This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/34352e3233322e3230382e302f32322d3234203d3e20323731383436.roa
File:                     34352e3233322e3230382e302f32322d3234203d3e20323731383436.roa (raw, json)
Hash identifier:          FVSM6liP6xg86isp6uneTwRw+VW+eMzxoIe0SXzJ8Ck=
Subject key identifier:   29:CD:85:3E:BC:AA:8B:6A:32:A3:DA:A9:BB:79:40:47:00:9B:0E:D3
Certificate issuer:       /CN=D69D719244579050CE56AAA81D512523E96439A5
Certificate serial:       2C23B5B5D557F16FC71778DBA1F602A313118D36
Authority key identifier: D6:9D:71:92:44:57:90:50:CE:56:AA:A8:1D:51:25:23:E9:64:39:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/34352e3233322e3230382e302f32322d3234203d3e20323731383436.roa
Signing time:             Tue 06 Jan 2026 19:06:05 +0000
ROA not before:           Tue 06 Jan 2026 19:01:05 +0000
ROA not after:            Tue 05 Jan 2027 19:06:05 +0000
asID:                     271846
IP address blocks:        45.232.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:23:b5:b5:d5:57:f1:6f:c7:17:78:db:a1:f6:02:a3:13:11:8d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69D719244579050CE56AAA81D512523E96439A5
        Validity
            Not Before: Jan  6 19:01:05 2026 GMT
            Not After : Jan  5 19:06:05 2027 GMT
        Subject: CN=29CD853EBCAA8B6A32A3DAA9BB794047009B0ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:38:1c:e8:27:6c:76:7a:eb:5f:b9:b4:1d:
                    64:f1:bf:fe:4e:b0:10:f5:01:52:b9:2e:b8:84:1a:
                    20:1b:45:7d:f1:8d:40:b8:20:a0:89:de:be:3c:43:
                    c3:30:3d:de:57:cb:8b:7e:26:4b:27:5e:90:b4:50:
                    89:cd:c2:b8:87:0b:ed:51:71:4f:03:ba:db:16:e1:
                    4a:0a:8d:0b:70:a8:60:38:dd:9a:75:8f:ae:56:ac:
                    22:e8:53:3e:33:33:97:6a:3f:42:e7:1d:ec:27:42:
                    cb:28:d9:85:81:b1:59:3a:65:6c:05:ef:25:ad:c3:
                    3e:1c:d7:0d:27:50:8a:f1:30:d2:fb:16:5c:39:50:
                    bb:83:1b:0d:28:d6:c1:5e:6a:7b:73:0c:5b:9c:f0:
                    d9:70:4c:4f:ed:45:56:16:a0:ea:82:7b:6c:03:19:
                    d3:eb:f7:c4:bb:df:90:44:e4:95:f8:06:59:a0:1a:
                    ab:be:26:bf:c7:66:d8:2d:77:a2:5e:bc:71:6a:cf:
                    9a:25:ee:4e:2d:91:dc:7d:dc:b5:88:78:43:e0:94:
                    ac:c8:6d:75:3e:b6:7d:ad:83:da:bc:85:be:79:f1:
                    ec:d6:d7:0c:c9:6f:ad:a3:d2:15:c4:30:90:9d:4f:
                    ba:4e:f1:61:35:6c:e0:e1:b0:99:56:f8:78:59:5f:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CD:85:3E:BC:AA:8B:6A:32:A3:DA:A9:BB:79:40:47:00:9B:0E:D3
            X509v3 Authority Key Identifier:
                keyid:D6:9D:71:92:44:57:90:50:CE:56:AA:A8:1D:51:25:23:E9:64:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/34352e3233322e3230382e302f32322d3234203d3e20323731383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:b7:51:40:17:8d:86:24:b3:e7:a8:4a:47:05:8b:e2:e0:
         1c:93:86:35:19:b1:6b:47:fa:5f:73:90:af:91:e2:c5:12:1f:
         f1:0c:da:0c:5c:2a:08:65:78:33:57:65:1b:81:71:ec:ed:e8:
         2e:7f:09:34:f1:73:98:ac:3f:3f:90:be:34:5e:8b:b9:b0:97:
         5d:8f:17:35:95:a2:03:75:05:9b:05:33:f0:46:93:c0:64:be:
         fe:06:ed:e2:f9:c1:9d:25:15:77:2e:c9:40:44:2b:33:e0:8d:
         9a:e2:83:a2:e8:3b:0a:7a:ab:6a:c7:a1:21:3f:6a:a4:d5:8d:
         c4:76:68:e0:d6:69:75:89:d2:cd:0d:4a:d1:b3:2b:f9:2e:1f:
         82:91:85:00:3b:76:b5:22:12:bb:11:11:69:5f:9a:e7:22:8a:
         67:5e:63:28:b5:bd:3a:45:6d:68:a7:09:10:eb:a0:be:74:ae:
         53:46:d6:3c:ae:4f:eb:71:89:d0:21:19:c2:ad:04:d2:c6:b5:
         c0:d0:83:00:3d:bc:51:02:3e:c7:f4:d3:db:80:25:8c:e4:05:
         bf:fd:d0:94:2b:cf:c1:60:89:1f:62:7c:2c:a0:34:3b:08:58:
         63:17:49:9b:10:5a:aa:38:48:42:4b:3a:ce:61:21:9a:7a:9b:
         8f:0b:c7:6c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULCO1tdVX8W/HF3jbofYCoxMRjTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY5RDcxOTI0NDU3OTA1MENFNTZBQUE4MUQ1MTI1MjNF
OTY0MzlBNTAeFw0yNjAxMDYxOTAxMDVaFw0yNzAxMDUxOTA2MDVaMDMxMTAvBgNV
BAMTKDI5Q0Q4NTNFQkNBQThCNkEzMkEzREFBOUJCNzk0MDQ3MDA5QjBFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYODgc6CdsdnrrX7m0HWTxv/5O
sBD1AVK5LriEGiAbRX3xjUC4IKCJ3r48Q8MwPd5Xy4t+JksnXpC0UInNwriHC+1R
cU8DutsW4UoKjQtwqGA43Zp1j65WrCLoUz4zM5dqP0LnHewnQsso2YWBsVk6ZWwF
7yWtwz4c1w0nUIrxMNL7Flw5ULuDGw0o1sFeantzDFuc8NlwTE/tRVYWoOqCe2wD
GdPr98S735BE5JX4BlmgGqu+Jr/HZtgtd6JevHFqz5ol7k4tkdx93LWIeEPglKzI
bXU+tn2tg9q8hb558ezW1wzJb62j0hXEMJCdT7pO8WE1bODhsJlW+HhZX/HpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKc2FPryqi2oyo9qpu3lARwCbDtMwHwYDVR0j
BBgwFoAU1p1xkkRXkFDOVqqoHVElI+lkOaUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNEM2ODkzRjQwQ0Q4MDJFNDI4ODJBREY5MDQwQUU3NDVC
Mjg5OUQzQjdEOEZFQ0ZCNkI2M0RGNERDQ0ZGMjczLzAvRDY5RDcxOTI0NDU3OTA1
MENFNTZBQUE4MUQ1MTI1MjNFOTY0MzlBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjlENzE5MjQ0NTc5MDUwQ0U1
NkFBQTgxRDUxMjUyM0U5NjQzOUE1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTRDNjg5M0Y0MENEODAyRTQyODgyQURGOTA0MEFFNzQ1QjI4OTlEM0I3
RDhGRUNGQjZCNjNERjREQ0NGRjI3My8wLzM0MzUyZTMyMzMzMjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLejQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAnu7dRQBeNhiSz56hKRwWL4uAck4Y1GbFrR/pf
c5CvkeLFEh/xDNoMXCoIZXgzV2UbgXHs7egufwk08XOYrD8/kL40Xou5sJddjxc1
laIDdQWbBTPwRpPAZL7+Bu3i+cGdJRV3LslARCsz4I2a4oOi6DsKeqtqx6EhP2qk
1Y3Edmjg1ml1idLNDUrRsyv5Lh+CkYUAO3a1IhK7ERFpX5rnIopnXmMotb06RW1o
pwkQ66C+dK5TRtY8rk/rcYnQIRnCrQTSxrXA0IMAPbxRAj7H9NPbgCWM5AW//dCU
K8/BYIkfYnwsoDQ7CFhjF0mbEFqqOEhCSzrOYSGaepuPC8ds
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:03:58 2026 by rpki-client