This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa
File:                     34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa (raw, json)
Hash identifier:          4O+JDrarrft+qcieRkethHbjBBz9mlrjrZjrZ280KEA=
Subject key identifier:   EE:64:D0:0B:BB:F0:A4:9B:5F:06:88:53:D6:F3:09:61:71:CE:DC:D2
Certificate issuer:       /CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
Certificate serial:       50A8888D98EE1ADF6DDCB68E14C8485F69AF4ADF
Authority key identifier: 8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa
Signing time:             Tue 06 Jan 2026 19:37:48 +0000
ROA not before:           Tue 06 Jan 2026 19:32:48 +0000
ROA not after:            Tue 05 Jan 2027 19:37:48 +0000
asID:                     266711
IP address blocks:        45.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 06:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a8:88:8d:98:ee:1a:df:6d:dc:b6:8e:14:c8:48:5f:69:af:4a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EEE8A60C988421683DBC2FDDE169C9AA912EF90
        Validity
            Not Before: Jan  6 19:32:48 2026 GMT
            Not After : Jan  5 19:37:48 2027 GMT
        Subject: CN=EE64D00BBBF0A49B5F068853D6F3096171CEDCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:ab:c6:03:cf:d5:76:4a:c8:e2:88:f3:17:
                    b6:f7:fc:5b:0e:93:32:0c:8d:c1:c3:3e:43:15:ac:
                    03:fe:1b:29:9d:fd:31:0a:90:57:63:40:82:8c:75:
                    54:e8:f9:6e:44:a6:59:cc:fe:b1:0a:2f:81:b2:7f:
                    ce:08:bf:37:45:06:76:bb:af:3c:97:d7:20:74:19:
                    ad:4f:f5:14:9c:0d:87:b7:6b:4c:3a:ef:04:e5:01:
                    2a:3b:3d:9b:fb:09:f1:b4:b4:b0:63:01:d7:aa:e7:
                    18:63:ef:ac:fe:b0:56:fe:17:dd:01:be:f0:5c:a5:
                    db:34:f7:52:78:87:72:93:6c:f9:fe:55:6f:c2:db:
                    17:b6:87:60:7b:43:76:06:2c:7e:12:31:55:a3:d4:
                    6d:ad:33:f0:ce:18:f6:e9:97:41:31:c6:d7:9c:10:
                    46:61:04:04:1a:79:3b:6d:12:a8:65:89:fd:76:18:
                    8a:db:f7:bf:82:a8:6a:ea:f3:46:c6:1f:a8:b4:0f:
                    ce:f1:a0:93:91:fa:2b:ae:be:c0:32:e2:9e:63:cc:
                    73:c9:88:0e:76:f4:2f:26:50:98:42:b3:04:d3:67:
                    a4:03:07:cf:e2:a6:76:94:e0:0c:8a:ad:26:9c:0e:
                    b6:6d:39:d5:f8:0f:f8:31:20:86:50:e7:a3:db:87:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:D0:0B:BB:F0:A4:9B:5F:06:88:53:D6:F3:09:61:71:CE:DC:D2
            X509v3 Authority Key Identifier:
                keyid:8E:EE:8A:60:C9:88:42:16:83:DB:C2:FD:DE:16:9C:9A:A9:12:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EEE8A60C988421683DBC2FDDE169C9AA912EF90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC13474CBC610F8F06084D5A0D5953A0326E771918715584C0C90A5686FBB82/0/34352e3232392e3234372e302f32342d3234203d3e20323636373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:e9:ce:8c:64:4e:db:0b:c7:ed:fc:99:1d:ae:b0:7b:c6:
         f9:0c:ac:0d:b4:61:a6:c0:30:2c:52:d3:34:f4:74:2b:1c:d8:
         4d:a9:65:10:47:88:45:25:f3:00:fa:1a:64:bb:26:a6:53:e0:
         44:a9:cb:5d:22:7b:ca:69:c7:ad:5c:81:57:65:ec:d6:58:d2:
         2d:d5:94:53:55:d8:e8:73:2a:14:4c:80:34:f9:7b:a4:71:65:
         09:3e:b0:1e:a5:0d:8e:76:23:77:e7:af:3d:f6:e8:73:bc:6b:
         58:8b:4e:58:53:d0:5b:42:e8:0f:10:d3:3a:c1:9c:c7:64:c4:
         9e:2c:9d:88:56:67:ee:80:8f:f4:ca:0c:be:0b:04:63:87:51:
         df:24:a7:f4:c7:59:0e:d9:72:54:44:58:84:e4:80:4d:e3:58:
         a9:13:72:fd:be:13:c2:c6:94:41:0d:f2:3f:9f:ba:6d:8c:90:
         1e:e6:76:c3:50:2c:a0:3a:55:8c:3b:9a:9f:98:25:8d:3d:d2:
         65:1b:83:6e:66:e7:a2:d4:63:5f:27:f9:52:2b:92:0e:d6:65:
         46:ce:95:2e:34:a1:e7:2e:50:bf:80:75:ab:ef:d0:db:3e:5b:
         6d:98:07:fd:9c:d1:34:e0:53:54:eb:c8:29:47:36:0a:16:01:
         28:04:17:21
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUKiIjZjuGt9t3LaOFMhIX2mvSt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVFRThBNjBDOTg4NDIxNjgzREJDMkZEREUxNjlDOUFB
OTEyRUY5MDAeFw0yNjAxMDYxOTMyNDhaFw0yNzAxMDUxOTM3NDhaMDMxMTAvBgNV
BAMTKEVFNjREMDBCQkJGMEE0OUI1RjA2ODg1M0Q2RjMwOTYxNzFDRURDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcb6vGA8/VdkrI4ojzF7b3/FsO
kzIMjcHDPkMVrAP+Gymd/TEKkFdjQIKMdVTo+W5EplnM/rEKL4Gyf84IvzdFBna7
rzyX1yB0Ga1P9RScDYe3a0w67wTlASo7PZv7CfG0tLBjAdeq5xhj76z+sFb+F90B
vvBcpds091J4h3KTbPn+VW/C2xe2h2B7Q3YGLH4SMVWj1G2tM/DOGPbpl0Exxtec
EEZhBAQaeTttEqhlif12GIrb97+CqGrq80bGH6i0D87xoJOR+iuuvsAy4p5jzHPJ
iA529C8mUJhCswTTZ6QDB8/ipnaU4AyKrSacDrZtOdX4D/gxIIZQ56Pbh8u7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7mTQC7vwpJtfBohT1vMJYXHO3NIwHwYDVR0j
BBgwFoAUju6KYMmIQhaD28L93hacmqkS75AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQkMxMzQ3NENCQzYxMEY4RjA2MDg0RDVBMEQ1OTUzQTAz
MjZFNzcxOTE4NzE1NTg0QzBDOTBBNTY4NkZCQjgyLzAvOEVFRThBNjBDOTg4NDIx
NjgzREJDMkZEREUxNjlDOUFBOTEyRUY5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUVFOEE2MEM5ODg0MjE2ODNE
QkMyRkRERTE2OUM5QUE5MTJFRjkwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREJDMTM0NzRDQkM2MTBGOEYwNjA4NEQ1QTBENTk1M0EwMzI2RTc3MTkx
ODcxNTU4NEMwQzkwQTU2ODZGQkI4Mi8wLzM0MzUyZTMyMzIzOTJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeX3
MA0GCSqGSIb3DQEBCwUAA4IBAQCB/unOjGRO2wvH7fyZHa6we8b5DKwNtGGmwDAs
UtM09HQrHNhNqWUQR4hFJfMA+hpkuyamU+BEqctdInvKacetXIFXZezWWNIt1ZRT
VdjocyoUTIA0+XukcWUJPrAepQ2OdiN356899uhzvGtYi05YU9BbQugPENM6wZzH
ZMSeLJ2IVmfugI/0ygy+CwRjh1HfJKf0x1kO2XJURFiE5IBN41ipE3L9vhPCxpRB
DfI/n7ptjJAe5nbDUCygOlWMO5qfmCWNPdJlG4NuZuei1GNfJ/lSK5IO1mVGzpUu
NKHnLlC/gHWr79DbPlttmAf9nNE04FNU68gpRzYKFgEoBBch
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:05 2026 by rpki-client