This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32342d3234203d3e20323636383534.roa
File:                     34352e3233392e36302e302f32342d3234203d3e20323636383534.roa (raw, json)
Hash identifier:          xTnFBdyicjgz3YGHyYb8O2btd3NWtOlhjY25MVKrV1M=
Subject key identifier:   72:7A:3A:57:E0:2F:B2:57:D2:09:E7:43:9A:2F:78:DB:B2:89:26:C6
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       4133B2FC23B29C9C373C6CC3DA4DB48B0419DF2D
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32342d3234203d3e20323636383534.roa
Signing time:             Wed 31 Dec 2025 14:45:02 +0000
ROA not before:           Wed 31 Dec 2025 14:40:02 +0000
ROA not after:            Wed 30 Dec 2026 14:45:02 +0000
asID:                     266854
IP address blocks:        45.239.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:b2:fc:23:b2:9c:9c:37:3c:6c:c3:da:4d:b4:8b:04:19:df:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Dec 31 14:40:02 2025 GMT
            Not After : Dec 30 14:45:02 2026 GMT
        Subject: CN=727A3A57E02FB257D209E7439A2F78DBB28926C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:04:dc:83:7d:93:ef:e7:4d:a4:14:54:38:
                    44:b5:f7:29:7c:36:5b:19:3c:c2:15:51:1d:25:2a:
                    60:60:1f:fc:58:ea:88:22:7d:2f:e1:60:7f:e9:44:
                    3b:fa:d2:3c:32:c7:03:98:79:3a:db:d6:f1:54:77:
                    63:d7:f8:ca:e7:27:2e:17:dc:8f:dd:54:c7:bf:ab:
                    24:1c:5a:c0:ca:a7:a8:5b:9d:a8:4f:56:9d:22:8d:
                    f9:95:2c:88:ee:3e:99:1a:8d:48:f7:64:94:e9:05:
                    71:36:f8:88:d7:8b:b0:19:e8:ab:80:8f:da:eb:97:
                    d1:e3:21:35:02:04:5f:e9:f8:61:8e:7e:60:a1:b8:
                    27:48:38:08:25:67:bf:d4:6a:70:61:9e:78:1d:2d:
                    98:40:b4:fd:45:6b:fc:fc:54:aa:a7:09:fc:34:db:
                    95:06:b0:d8:49:ee:de:35:00:4d:04:cf:1c:41:f5:
                    5c:5b:83:41:2d:18:ad:9d:4a:d4:ed:67:d4:b9:43:
                    eb:a2:55:54:75:c8:a3:85:86:e2:7e:2e:db:82:b0:
                    3a:01:f9:59:77:a7:42:67:1d:9b:f6:4a:ab:2c:27:
                    4b:56:f2:89:1d:14:8e:ea:40:e6:a6:c8:4e:57:a6:
                    04:dd:0e:de:b5:fa:d0:f3:3a:fd:7b:a6:e0:a2:17:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:3A:57:E0:2F:B2:57:D2:09:E7:43:9A:2F:78:DB:B2:89:26:C6
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32342d3234203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:15:a4:06:3a:df:d5:62:82:16:7b:f9:0d:0b:b5:08:a5:
         34:d0:33:5d:ae:a6:2d:29:15:45:b2:ea:5b:12:1e:83:91:69:
         0e:e2:ec:34:40:0a:d0:8c:1f:23:c9:c4:9d:bb:fb:81:69:17:
         10:5c:37:a4:b8:a2:73:87:69:dd:d8:c3:06:41:12:61:04:f9:
         b1:63:74:7e:b1:e7:f5:41:50:15:52:a0:90:35:af:69:45:e0:
         07:e8:48:9c:44:85:ae:30:72:5c:02:e6:ca:fb:84:d0:1b:7b:
         a0:ca:60:0e:1f:29:8b:b5:c2:de:fc:29:3d:79:d1:db:01:18:
         57:60:58:50:33:fa:6f:76:8e:ab:0e:d8:f2:38:0d:d5:1a:b2:
         14:05:c4:96:1b:5d:5b:52:c2:cc:39:04:98:f1:6a:02:e9:ce:
         29:b1:67:9d:b5:2c:34:2b:6d:69:cd:9a:87:b3:e1:f1:31:19:
         d8:b5:f4:cd:76:c7:b2:ad:ac:9d:d8:74:bb:5f:e6:81:e4:96:
         c5:11:77:59:cb:8d:a4:ba:5c:c0:cf:ec:ff:a4:eb:90:73:f0:
         41:ff:9b:d1:75:fc:be:26:65:cc:84:d5:b7:f3:91:a7:31:65:
         e3:c4:d7:82:99:07:74:84:f4:99:27:31:82:6b:eb:8d:44:56:
         52:96:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:29 2026 by rpki-client