This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa
File:                     34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa (raw, json)
Hash identifier:          7AmZMJHOId7auHc6vtXFaYWORJN4yesmSxHsw4gDA3o=
Subject key identifier:   1A:3B:8B:E3:D6:C5:21:D3:B6:B2:92:00:BB:71:29:7B:A1:E7:94:97
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       0AB1679E0A75DF903E6A861DEC356559BE405236
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa
Signing time:             Tue 06 Jan 2026 19:44:11 +0000
ROA not before:           Tue 06 Jan 2026 19:39:11 +0000
ROA not after:            Tue 05 Jan 2027 19:44:11 +0000
asID:                     266844
IP address blocks:        45.238.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b1:67:9e:0a:75:df:90:3e:6a:86:1d:ec:35:65:59:be:40:52:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Jan  6 19:39:11 2026 GMT
            Not After : Jan  5 19:44:11 2027 GMT
        Subject: CN=1A3B8BE3D6C521D3B6B29200BB71297BA1E79497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:c4:04:7f:b8:8a:e8:45:77:e1:bb:43:eb:
                    2d:4b:08:b9:93:08:5c:54:4a:75:7d:f3:6c:3c:b7:
                    cc:84:8a:02:6c:c5:59:ea:4d:33:e9:d2:6d:ff:cc:
                    1b:5d:31:59:42:3c:be:bb:03:3f:37:a3:de:ed:8c:
                    ad:42:5f:a6:05:91:10:3a:52:64:94:db:15:01:43:
                    fe:05:d0:3a:2c:fd:a5:29:5a:d5:77:e9:df:08:04:
                    02:57:a2:ed:cc:7e:7d:a6:26:fb:ed:c2:86:8c:65:
                    75:5f:69:1e:c1:64:c0:e4:8b:1c:99:7c:f5:f1:a0:
                    40:58:e9:b4:7e:bc:25:70:09:fd:d7:b9:a8:62:ed:
                    25:99:e8:55:9a:ac:4c:50:58:e8:04:38:95:8f:01:
                    83:59:7f:ee:e0:a5:dc:22:0a:97:0a:03:60:e1:43:
                    d4:cd:59:ac:e6:05:24:ad:da:87:b5:ef:a0:8e:8b:
                    20:75:13:63:77:b9:56:18:25:e2:02:88:84:ee:b6:
                    c9:c1:76:41:38:ff:57:ed:be:2b:94:fb:cd:82:63:
                    f0:d4:a9:81:eb:db:dd:26:a1:99:f5:a1:dc:f0:3b:
                    da:c0:ba:e8:d4:9a:0b:1b:a9:b5:e5:b0:d3:86:a6:
                    3d:8f:e4:2d:82:80:aa:f6:52:df:20:7b:a9:cc:b4:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3B:8B:E3:D6:C5:21:D3:B6:B2:92:00:BB:71:29:7B:A1:E7:94:97
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135332e302f32342d3234203d3e20323636383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:44:79:f5:27:3a:c2:ab:14:07:0e:1d:eb:70:20:6f:a8:5f:
         8b:4e:e0:18:8e:05:14:b5:03:40:09:c2:12:60:77:c7:e8:05:
         41:64:dd:bc:6f:95:7b:c4:89:79:01:42:a5:57:a7:92:8c:af:
         90:e8:2b:e5:59:8d:ce:70:38:b9:d3:76:95:af:68:77:62:ea:
         e3:c3:c5:39:5a:c8:f0:25:b7:7d:98:56:11:fc:b8:6a:03:4c:
         0f:ae:f1:41:27:e1:c7:83:88:bd:e8:b7:d7:c6:e5:88:26:58:
         cd:02:7e:40:9b:e4:ba:5a:6a:ec:2d:db:b9:1d:04:98:31:68:
         0d:55:66:3c:e3:23:0e:59:62:91:66:f6:cc:b1:b5:fe:11:d4:
         bd:b0:9d:a1:f0:26:4c:79:b9:db:e1:29:73:46:18:d7:43:46:
         c8:30:77:4b:b7:ec:ad:5e:06:61:34:4d:f7:c1:fd:2a:a9:b4:
         7f:c1:bd:3c:f9:20:3e:01:92:85:90:fa:9a:00:51:cf:39:e6:
         57:4b:62:bf:3b:66:92:2e:c1:d9:9d:29:01:0f:72:a1:ac:8a:
         96:b6:05:d9:01:bf:e8:75:3e:6d:d4:61:d2:e6:9e:47:5e:81:
         cd:a6:e2:ad:01:21:be:6f:2f:72:03:b2:c5:47:52:d9:da:52:
         4f:b3:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:14 2026 by rpki-client