This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231342e302f32342d3234203d3e20323635373039.roa
File:                     34352e362e3231342e302f32342d3234203d3e20323635373039.roa (raw, json)
Hash identifier:          ocIhD31swyk9A4gj2/TgxlEwCIs/u3dRWGrhsq/X2nI=
Subject key identifier:   BE:8C:65:21:F2:E4:52:DF:E4:1B:23:06:7D:82:2E:08:21:70:38:9F
Certificate issuer:       /CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
Certificate serial:       0EB2AEABE7326807A2B0F741ACBB0DAEA1A1FF82
Authority key identifier: F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231342e302f32342d3234203d3e20323635373039.roa
Signing time:             Tue 06 Jan 2026 19:05:34 +0000
ROA not before:           Tue 06 Jan 2026 19:00:34 +0000
ROA not after:            Tue 05 Jan 2027 19:05:34 +0000
asID:                     265709
IP address blocks:        45.6.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:ae:ab:e7:32:68:07:a2:b0:f7:41:ac:bb:0d:ae:a1:a1:ff:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
        Validity
            Not Before: Jan  6 19:00:34 2026 GMT
            Not After : Jan  5 19:05:34 2027 GMT
        Subject: CN=BE8C6521F2E452DFE41B23067D822E082170389F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:ec:39:31:89:4d:aa:e9:ce:32:53:cd:25:
                    c2:90:ea:17:93:6b:5d:1e:7a:8d:c8:6e:4e:c1:5e:
                    e7:00:a9:64:dd:8d:b2:6c:78:0f:25:10:2b:82:bf:
                    e4:6e:8d:10:c7:10:6e:24:d9:2a:5d:d3:95:46:6a:
                    a6:1f:f4:6b:4e:61:c9:20:d0:67:b7:3a:01:db:33:
                    e9:2d:86:7b:86:73:52:90:f2:d8:f2:27:cd:60:37:
                    d8:95:ce:e5:c8:be:69:cb:2d:13:fc:fb:21:8b:07:
                    77:a4:d1:ce:3e:09:23:36:19:ca:62:3f:f4:16:21:
                    ce:04:75:f3:7c:89:5f:09:07:90:7d:08:65:3d:7b:
                    ab:00:66:33:f9:01:f0:e0:f3:ae:6e:ed:14:19:aa:
                    3c:66:80:32:a8:05:04:a2:99:d3:42:2a:1c:9b:c8:
                    b5:44:8c:41:13:05:3e:7a:6a:95:81:7c:d9:b0:f9:
                    c7:3f:8c:dd:9a:a4:f7:3e:27:e7:f1:4f:d2:25:cc:
                    7f:c9:fc:d6:c0:10:ac:45:a9:58:6b:3e:aa:e0:52:
                    b8:f3:88:88:0a:19:9b:ba:00:ff:0d:01:12:88:87:
                    c9:2d:34:2a:e1:9a:ab:8c:8d:d3:83:1f:f5:ca:55:
                    5b:d5:9c:db:52:b6:2c:1c:f3:25:46:3c:bf:b1:62:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8C:65:21:F2:E4:52:DF:E4:1B:23:06:7D:82:2E:08:21:70:38:9F
            X509v3 Authority Key Identifier:
                keyid:F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231342e302f32342d3234203d3e20323635373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:ab:e6:88:cb:74:8f:75:6b:03:e0:77:5b:67:97:39:f1:
         2a:47:9d:4b:71:87:32:80:2b:2f:0b:f0:41:6f:d1:cf:63:14:
         44:9a:68:1f:07:46:58:34:cb:dc:b5:2c:f5:65:40:fc:ec:78:
         7b:30:de:d6:24:98:68:b5:06:ed:38:f3:98:b4:e8:a6:78:22:
         b4:05:ae:46:be:92:07:87:20:58:6a:f7:4f:08:26:5d:85:c4:
         7d:7f:f8:21:30:88:d7:26:b0:1e:65:71:76:3d:a3:a1:41:8c:
         6c:30:13:b3:1e:f5:c4:5e:81:b7:4e:d7:ab:fa:ce:74:68:15:
         12:c0:82:f9:8e:a6:c1:4f:91:6f:97:c2:4f:26:50:f7:b8:13:
         b3:03:62:71:a9:ed:ed:e2:04:f3:09:38:7e:2f:47:5e:d3:e9:
         88:4b:da:af:97:44:68:b0:a8:71:78:73:50:07:d7:44:92:64:
         44:a8:79:de:ab:41:57:aa:4f:ee:40:55:db:06:a6:6b:98:30:
         4f:0d:6f:76:38:f3:32:07:ab:49:cf:4e:f0:88:ee:a3:fd:1a:
         bc:ac:df:76:73:e6:33:9b:e9:40:00:7a:7d:24:77:23:a0:0f:
         48:eb:ee:79:3b:eb:86:50:6f:67:50:5f:e7:fe:76:37:33:78:
         8e:6c:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:55 2026 by rpki-client