This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36322e302f32332d3233203d3e20323636383534.roa
File:                     34352e3233392e36322e302f32332d3233203d3e20323636383534.roa (raw, json)
Hash identifier:          c06klwWgGb7dqX1R0mMiJRCavJYyzW6ZnfRsXHyJP3c=
Subject key identifier:   B4:72:45:61:4A:F1:C8:08:B4:C3:29:94:F5:43:B0:C2:0E:FB:4F:6D
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       192B695F4A13C3C17C2237307E8B445A0377E33B
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36322e302f32332d3233203d3e20323636383534.roa
Signing time:             Wed 31 Dec 2025 14:45:00 +0000
ROA not before:           Wed 31 Dec 2025 14:40:00 +0000
ROA not after:            Wed 30 Dec 2026 14:45:00 +0000
asID:                     266854
IP address blocks:        45.239.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2b:69:5f:4a:13:c3:c1:7c:22:37:30:7e:8b:44:5a:03:77:e3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Dec 31 14:40:00 2025 GMT
            Not After : Dec 30 14:45:00 2026 GMT
        Subject: CN=B47245614AF1C808B4C32994F543B0C20EFB4F6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:14:79:b4:88:24:de:bf:58:8d:40:b8:fe:
                    b5:e6:d9:36:9f:35:9b:8c:46:58:0e:73:a6:6c:48:
                    0d:1f:6a:0c:de:ba:53:94:09:66:fd:8b:ce:69:37:
                    56:d7:78:d3:ed:a8:6c:34:2c:55:a5:2f:0d:76:3e:
                    c2:11:62:61:48:ef:8f:15:d8:26:83:7f:7d:78:34:
                    d2:90:f8:d8:62:7a:d1:e4:d5:b7:5e:e7:42:bc:ad:
                    d2:9b:51:a9:9d:d6:64:cf:84:48:2d:c4:75:4b:aa:
                    51:5a:75:cb:a0:8d:0e:6c:9a:f8:40:4a:82:37:e0:
                    04:f9:74:7a:58:46:5a:99:3e:e4:08:3c:94:47:62:
                    06:01:67:47:29:9c:1a:2a:d1:68:9a:fb:cf:88:ae:
                    15:0a:8d:2c:b6:2c:13:a3:6f:21:09:fe:e0:de:32:
                    b2:6e:df:8e:9c:41:df:e7:3b:ab:23:3b:b9:b8:00:
                    fa:ae:92:a3:ae:0a:4e:a1:5f:f8:0b:72:81:80:2c:
                    a8:fd:b6:c0:99:ef:13:4b:ff:6b:db:6b:db:de:0b:
                    12:44:ec:d1:2c:d6:55:a4:14:3d:81:24:60:ec:e6:
                    9e:1a:e4:24:36:a8:26:64:4f:bf:ef:9c:17:9e:1a:
                    42:db:c3:1c:34:2d:8a:1e:97:38:2c:6c:aa:25:1a:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:45:61:4A:F1:C8:08:B4:C3:29:94:F5:43:B0:C2:0E:FB:4F:6D
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36322e302f32332d3233203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:6d:a1:ef:d8:b0:76:87:1f:93:0c:2a:9f:b2:bf:99:a4:
         bc:1e:bf:6e:2d:30:22:38:db:e3:b3:d0:a7:ae:78:bb:31:25:
         ae:4a:3d:9a:75:10:47:a9:45:2d:a2:a7:f4:d2:9e:04:19:57:
         ec:db:3e:3a:73:ef:3f:2d:fa:b5:ba:95:ce:cd:07:32:f2:07:
         8f:b2:3d:da:6a:f2:33:cc:2d:3e:f5:7a:0b:05:a3:46:40:ce:
         2b:81:5e:10:2e:81:ce:00:33:f9:f5:bf:34:95:c6:93:77:78:
         dd:b1:32:ad:f0:8c:14:33:b7:16:8c:b1:a9:ab:cb:db:1d:ca:
         0c:74:f2:6b:57:4f:06:b3:da:ed:91:ed:f0:be:bd:f1:75:2e:
         3a:90:13:81:ec:5b:10:f1:5c:eb:14:97:b2:a8:4c:29:1b:4a:
         16:cd:71:c7:1a:08:65:c7:0b:69:5f:2a:1f:cb:ec:00:8c:77:
         88:aa:37:88:8d:3b:0c:2f:36:a2:50:1f:42:ec:ae:9a:a0:c8:
         f4:87:77:c2:02:3b:69:6c:f0:57:47:fc:34:21:c8:7b:79:0b:
         8b:e7:83:25:c6:42:e2:76:0f:16:c7:17:20:be:54:60:4c:b8:
         17:52:5c:ee:bb:28:10:af:cc:91:4b:89:54:71:72:55:26:01:
         a7:2a:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:29 2026 by rpki-client