This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa
File:                     34352e37302e3230322e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          GiyELPiBRmq0a4NX4zCALmTOvy6joBfe3/N5QL92m/I=
Subject key identifier:   73:DA:08:BA:A1:40:A8:F6:BA:57:CD:FB:42:0F:11:DB:51:6E:69:56
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       3C255EBACFEA5A94F68BC1563574D70198C15790
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 06 Jan 2026 19:36:34 +0000
ROA not before:           Tue 06 Jan 2026 19:31:34 +0000
ROA not after:            Tue 05 Jan 2027 19:36:34 +0000
asID:                     52468
IP address blocks:        45.70.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 13:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:25:5e:ba:cf:ea:5a:94:f6:8b:c1:56:35:74:d7:01:98:c1:57:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Jan  6 19:31:34 2026 GMT
            Not After : Jan  5 19:36:34 2027 GMT
        Subject: CN=73DA08BAA140A8F6BA57CDFB420F11DB516E6956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:e3:27:6d:fa:f1:2e:c6:03:92:9d:11:43:
                    86:38:43:7d:6e:50:b6:74:48:7e:13:0d:86:eb:bc:
                    a5:f4:09:bf:82:cb:3a:2e:d7:13:40:b3:75:61:2b:
                    54:6e:50:10:ba:70:19:55:01:bb:40:98:1b:9e:4c:
                    24:9b:24:73:ad:61:8b:67:89:02:1f:99:99:70:4d:
                    08:f3:32:4e:99:a8:29:98:a6:94:dc:98:ce:d3:d4:
                    4d:a7:9c:59:00:37:b3:eb:af:5a:a6:35:da:53:e8:
                    6a:36:9c:0d:fb:db:60:0a:83:cc:98:8e:3c:ad:cd:
                    f6:06:90:e4:10:f3:ba:cb:56:d1:72:fe:f8:cf:5c:
                    78:f5:70:74:b5:31:2d:04:a1:36:af:19:a8:e9:d6:
                    e3:30:65:17:dc:01:73:f9:fa:47:a5:2a:17:d5:ae:
                    e0:21:97:7e:fb:54:fe:c1:76:b5:49:1c:22:fa:b1:
                    71:44:0b:a3:76:03:e4:fe:98:b9:e2:c5:55:dc:73:
                    e5:2e:1e:68:9d:cd:6a:18:61:7c:f4:22:b1:90:33:
                    81:59:83:d2:45:0b:2f:49:c8:c4:44:9e:c2:fd:e6:
                    76:87:45:1a:7c:1f:32:10:b1:0b:57:52:34:7c:72:
                    d6:2c:f4:35:ee:c9:55:d8:83:22:24:ce:63:25:7c:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:08:BA:A1:40:A8:F6:BA:57:CD:FB:42:0F:11:DB:51:6E:69:56
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:48:f5:a3:32:ee:f3:3b:00:4a:b0:ac:ec:85:4f:aa:0b:84:
         42:47:88:04:0b:16:ab:ad:39:e6:26:84:b1:9f:c5:3f:62:90:
         71:69:ba:d5:5f:22:4e:ad:bc:5b:bf:f5:cb:12:e7:55:c3:a0:
         7b:56:3c:a2:56:4a:41:73:07:86:e1:64:05:66:91:07:8a:6f:
         e1:25:fd:e0:9e:f5:22:92:7b:c8:5c:3e:1c:10:72:0b:4e:df:
         99:15:d6:d8:80:ef:e0:31:52:e2:00:6a:0a:17:60:13:dc:2c:
         82:22:53:58:f5:1f:7a:28:f8:1c:2b:da:2d:37:39:75:ea:d4:
         a0:c1:f5:66:4f:0b:db:83:0b:99:33:a7:9c:06:f1:dd:cc:1a:
         0e:7a:43:2c:a7:e2:ea:86:0d:28:a6:01:30:b2:50:1d:b0:3f:
         cc:50:a6:a1:ef:d9:68:e4:f3:aa:c2:21:ef:79:0b:08:3d:38:
         5e:63:41:d1:3a:47:be:ad:e2:fa:e7:78:c1:e3:74:df:7b:13:
         72:33:c3:d9:00:be:44:1f:8a:dc:6e:29:00:9b:b3:ea:d6:97:
         87:87:42:02:b4:cd:11:52:d3:38:48:ba:5f:b0:b9:2a:bb:5d:
         5c:e3:5c:c9:36:ae:b9:9e:16:de:5f:2d:50:80:52:3f:fa:87:
         60:d9:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:57 2026 by rpki-client