This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
File:                     34352e3233382e35362e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          5CNTAr780pZwWEC/NQLfrz5GkFpOz+2QQ9XsYuj0Ue8=
Subject key identifier:   DE:62:9E:EC:6D:58:A6:5E:9A:7C:88:39:2D:D3:7A:85:16:56:E0:76
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       3AE355FC0E8C47D82AB6DD7DD001C20C9E35CEE7
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:03:41 +0000
ROA not before:           Tue 06 Jan 2026 18:58:41 +0000
ROA not after:            Tue 05 Jan 2027 19:03:41 +0000
asID:                     52468
IP address blocks:        45.238.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e3:55:fc:0e:8c:47:d8:2a:b6:dd:7d:d0:01:c2:0c:9e:35:ce:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Jan  6 18:58:41 2026 GMT
            Not After : Jan  5 19:03:41 2027 GMT
        Subject: CN=DE629EEC6D58A65E9A7C88392DD37A851656E076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:81:35:43:8e:7c:1a:94:7f:35:27:e9:5e:
                    a7:8f:d3:82:1b:78:da:ab:72:57:9a:00:43:b7:85:
                    6e:6c:d5:01:08:b6:0e:f1:31:40:39:2e:48:c5:3f:
                    c4:9b:13:21:7f:54:d3:d3:76:7f:d4:c7:4d:c6:e5:
                    cd:f4:79:e7:f2:70:97:18:45:df:2f:15:21:61:4f:
                    57:b8:70:83:da:54:c2:74:34:27:36:e6:ea:60:8f:
                    e1:82:bc:89:d5:35:71:70:62:09:e9:81:ee:35:b0:
                    bd:85:27:18:ea:92:74:62:46:f8:78:d6:bb:1a:7c:
                    f5:95:f3:51:63:ff:b0:90:c0:05:14:12:d6:36:95:
                    1a:53:0a:3f:6c:d2:fc:6b:22:6a:b0:fb:b6:79:0a:
                    09:b5:80:d0:af:f7:0e:55:a3:72:43:d7:6f:78:06:
                    0f:11:c0:bb:2f:f6:20:4b:c7:f8:e5:11:25:ac:94:
                    34:4d:c7:dc:74:ab:5d:c7:d3:3b:6a:87:cb:cb:2d:
                    d4:fc:66:64:c5:4a:8d:00:7f:8a:e8:75:cf:2e:a3:
                    ca:80:c0:20:0c:4d:d2:1e:57:cb:0b:05:81:c9:fe:
                    dd:b4:93:f6:a7:be:da:cc:60:f2:39:a8:e9:98:55:
                    c8:e2:42:0a:21:e4:c9:38:d1:e7:3a:7c:04:fa:c8:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:9E:EC:6D:58:A6:5E:9A:7C:88:39:2D:D3:7A:85:16:56:E0:76
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:66:b4:42:c6:d3:51:e9:6d:d1:8c:34:0c:74:52:18:ad:
         13:96:60:d1:16:21:8d:4a:be:89:7e:e3:86:e9:61:00:3c:1d:
         eb:f8:8b:73:0c:cc:d8:8c:56:7f:43:06:b4:f1:f7:2f:c2:0a:
         0d:85:de:5e:dd:ff:32:86:d4:08:07:d1:2e:e7:75:f7:6c:ad:
         be:41:9e:1f:6a:0e:2b:75:cc:c4:46:af:63:2f:ba:ad:a8:a4:
         b8:01:0a:d3:ac:18:49:fa:78:ae:bd:86:0c:a6:27:4a:20:35:
         db:2d:4d:10:e9:13:f7:23:25:f6:9b:8e:74:f7:ac:b5:4a:d9:
         bc:6c:ff:88:0e:11:e3:b4:28:c5:99:bb:83:8c:d2:05:b8:d2:
         8d:79:d9:28:c4:16:a1:67:c3:d3:4b:a0:a6:b3:e7:98:e3:1c:
         13:51:a7:6d:50:22:97:30:d1:22:f7:27:39:e1:23:cf:68:3b:
         0e:6a:45:1b:e0:f3:06:46:09:48:2a:5f:80:10:9d:71:e5:ce:
         b7:1b:e6:6d:ea:e2:85:51:68:f9:dc:b2:03:ef:d5:eb:bc:93:
         05:92:41:c1:78:88:f7:40:1d:70:43:5c:3f:af:eb:b8:ac:2c:
         a6:3d:e1:0d:0f:e3:3f:95:11:b1:dd:63:ed:56:b7:99:0b:7c:
         03:79:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:52 2026 by rpki-client