This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36332e302f32342d3234203d3e20323636383534.roa
File:                     34352e3233392e36332e302f32342d3234203d3e20323636383534.roa (raw, json)
Hash identifier:          zZ/HKhDM6tvtxWsXSobPlycDRLc2nZg0AfxQttbfILk=
Subject key identifier:   66:98:EA:2D:4F:D1:F4:F6:F0:BF:00:2F:CD:73:14:36:F4:2C:E8:94
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       0E57EB2F5219B1BC641779D48A26D202C9B8CE
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36332e302f32342d3234203d3e20323636383534.roa
Signing time:             Wed 31 Dec 2025 14:45:00 +0000
ROA not before:           Wed 31 Dec 2025 14:40:00 +0000
ROA not after:            Wed 30 Dec 2026 14:45:00 +0000
asID:                     266854
IP address blocks:        45.239.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:57:eb:2f:52:19:b1:bc:64:17:79:d4:8a:26:d2:02:c9:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Dec 31 14:40:00 2025 GMT
            Not After : Dec 30 14:45:00 2026 GMT
        Subject: CN=6698EA2D4FD1F4F6F0BF002FCD731436F42CE894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:fd:71:39:54:ba:63:65:12:52:cc:0a:6d:
                    86:00:58:36:06:6f:ec:a4:57:ed:49:ce:1f:52:b8:
                    e8:04:e4:aa:83:51:4d:56:7b:4e:ee:fa:23:90:90:
                    c4:ac:e7:8d:a0:17:35:4a:48:d3:c7:7f:fa:99:fc:
                    94:1a:7c:e4:b9:5f:a9:74:72:23:df:1c:46:cb:26:
                    86:03:31:ed:09:09:6f:0b:e9:79:4c:d1:d2:d1:7c:
                    7a:f0:56:cd:4a:a1:69:b2:90:e1:59:5b:a5:7e:13:
                    2a:49:45:74:21:4e:1a:a6:33:89:d3:78:74:97:d6:
                    7a:e5:c8:e9:47:27:63:07:e1:c6:f0:87:11:b6:65:
                    7e:d9:45:d0:20:9d:4b:c2:bf:34:31:9a:fc:c6:78:
                    05:44:ef:f0:07:1d:41:b7:c2:5e:ef:12:e2:84:9e:
                    00:99:87:31:2b:cb:5d:89:5e:18:77:ea:ab:57:30:
                    58:07:ee:7c:9f:ee:1e:f4:76:e4:6a:a1:ea:1d:e5:
                    e1:75:01:c1:14:ae:15:52:3d:9f:fc:2a:3b:c2:19:
                    32:99:ed:50:10:2e:3f:60:23:9d:40:fc:86:db:ed:
                    1f:4f:94:ed:99:57:57:60:e9:98:5a:0b:49:33:92:
                    a5:01:27:ed:e6:b4:0d:ff:9f:a0:2e:e1:67:7f:8d:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:EA:2D:4F:D1:F4:F6:F0:BF:00:2F:CD:73:14:36:F4:2C:E8:94
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36332e302f32342d3234203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:95:53:da:6b:52:4b:59:80:d4:64:cc:5f:a3:e9:79:85:5e:
         1f:b5:ce:46:bf:11:8f:b9:d4:e4:a3:c1:00:25:87:f7:6f:55:
         c9:6d:0a:7e:40:29:76:b4:99:d4:7b:dd:af:be:54:ef:c0:13:
         d8:f1:89:8c:d0:89:f3:d6:98:38:d4:d4:ea:11:6f:4b:1e:70:
         06:e5:7d:65:64:46:fa:e6:4a:9a:d9:02:09:70:76:4b:39:67:
         e8:b0:e1:49:c2:c1:56:49:cf:91:fe:5b:b6:42:41:c0:f5:6a:
         85:d0:c0:d9:be:28:6f:b1:ba:62:df:44:2b:51:40:86:04:34:
         0a:2f:92:22:6a:6c:35:13:5e:3e:cf:d8:a0:d0:7d:5c:7f:be:
         ff:cf:cf:bc:33:37:88:c4:17:8a:c5:da:31:87:49:e6:df:b6:
         ba:c0:87:2e:0a:ab:e8:a6:47:c2:3f:60:be:ad:b6:9a:4f:53:
         73:44:1b:80:f8:82:5d:f4:24:ae:ee:30:07:f0:c6:8e:39:6f:
         07:5d:0b:9c:ce:12:77:f2:b0:31:82:eb:e1:b3:d3:4b:6a:d3:
         0c:03:01:ce:39:fd:39:42:4e:4f:72:5d:c1:78:6c:23:8e:68:
         b0:0b:2b:69:8e:ea:ec:dc:a8:01:98:4a:f0:14:eb:a3:23:98:
         42:75:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:28 2026 by rpki-client