This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37362e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37362e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          LuN7WsB1OWyIV5kRGh8aPkDpqwqnoL5a9HkdaNnlbd8=
Subject key identifier:   2D:F4:64:5E:46:BF:E9:15:93:3B:21:90:96:57:EB:DC:9C:C9:C6:DB
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       6254A66109507EB328250FB716496193E7F873AC
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37362e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 06 Jan 2026 19:04:48 +0000
ROA not before:           Tue 06 Jan 2026 18:59:48 +0000
ROA not after:            Tue 05 Jan 2027 19:04:48 +0000
asID:                     263157
IP address blocks:        45.239.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 12:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:54:a6:61:09:50:7e:b3:28:25:0f:b7:16:49:61:93:e7:f8:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Jan  6 18:59:48 2026 GMT
            Not After : Jan  5 19:04:48 2027 GMT
        Subject: CN=2DF4645E46BFE915933B21909657EBDC9CC9C6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:e4:1a:db:ff:1f:af:b8:0b:6e:e0:c0:86:
                    8a:fc:48:d0:02:71:5d:a0:49:c2:2f:0c:77:cc:1b:
                    29:51:00:ba:48:f9:2a:a2:28:1b:6f:43:22:d6:40:
                    98:4f:5b:f7:43:ed:e1:a8:6d:e7:96:2c:60:3b:fa:
                    ea:02:16:fd:90:87:e1:15:bb:8d:6b:fd:ee:c8:47:
                    d3:47:97:95:e0:40:a2:0e:45:85:a4:2f:cb:5a:f7:
                    b2:49:f1:1f:21:d1:c7:c6:08:7f:45:2a:ac:e0:07:
                    38:5f:48:cb:d3:83:7a:f6:57:73:5e:d0:55:ea:38:
                    57:81:e4:b0:93:fb:b1:c8:3b:99:e2:80:7a:1c:10:
                    0d:9d:b1:5a:e8:cc:11:25:24:9b:00:71:86:81:cd:
                    fa:16:04:1c:4d:86:40:e5:c9:43:e0:3f:2b:03:7a:
                    38:e5:e2:e0:c8:94:96:96:6a:e0:03:e2:a4:99:85:
                    f2:a3:56:80:93:2f:cd:8e:5c:8f:65:41:d0:e0:38:
                    ac:a4:11:a9:33:da:06:56:e0:8a:1b:d3:73:59:23:
                    5e:59:95:7e:44:ae:00:b4:9f:88:ab:9f:05:e0:47:
                    63:12:c3:38:11:33:2e:e6:51:8a:f8:12:a1:b7:a2:
                    af:98:57:da:e6:31:1a:30:a6:ec:d3:fc:12:92:64:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F4:64:5E:46:BF:E9:15:93:3B:21:90:96:57:EB:DC:9C:C9:C6:DB
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37362e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:5e:68:13:3d:cb:8c:89:26:34:a4:00:38:38:5c:28:61:
         c3:1d:be:55:e5:b4:cb:8e:0f:0b:a4:d8:b5:a1:75:4e:10:1d:
         ee:3a:95:5e:bc:2a:89:3f:94:06:f0:ad:c4:35:c7:fb:38:eb:
         b8:47:d1:72:74:47:bb:4b:88:9d:cd:32:8e:f3:60:85:48:b8:
         0e:08:ac:4f:c1:2a:a9:83:c2:07:fe:d0:f8:7c:f0:0d:1c:e8:
         28:05:ce:99:98:ee:b6:b2:b0:b3:e6:d1:a1:3b:1a:42:f3:0f:
         d0:77:07:d0:52:53:07:1f:84:ee:f3:73:54:e1:a0:16:0e:c2:
         af:73:dc:b6:2c:8e:bc:72:f5:3e:75:77:cc:ec:56:bd:a0:d2:
         e2:33:81:80:ac:ec:38:b4:da:07:a7:ad:eb:73:3c:a9:b2:3a:
         ab:6a:b5:04:d7:e9:6e:23:7b:a0:03:cb:29:ee:71:a3:3b:f9:
         58:d2:c7:d3:c9:66:5d:81:fe:4b:13:0e:a3:d3:67:ce:7e:03:
         0b:57:d0:46:5e:9d:e5:16:29:35:cd:ec:f0:50:f0:b3:38:fe:
         65:73:95:cf:95:ed:30:a1:96:73:f2:4b:3f:57:61:68:c5:1e:
         f8:50:c0:c8:a9:ef:ed:21:39:3b:de:f3:42:d2:3b:90:d5:f2:
         55:f3:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:47 2026 by rpki-client