This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa
File:                     34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa (raw, json)
Hash identifier:          Juce3v5zMd47gkvusR6Nl+yd1bWXFOnrl9MaEDWQRPc=
Subject key identifier:   38:02:7C:CB:46:09:6E:3A:E4:C1:18:F8:B4:F5:FC:39:72:0F:75:45
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       75C8B1148FE714E62A652DD48C839C022D592361
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa
Signing time:             Tue 06 Jan 2026 19:46:15 +0000
ROA not before:           Tue 06 Jan 2026 19:41:15 +0000
ROA not after:            Tue 05 Jan 2027 19:46:15 +0000
asID:                     266846
IP address blocks:        45.238.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c8:b1:14:8f:e7:14:e6:2a:65:2d:d4:8c:83:9c:02:2d:59:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Jan  6 19:41:15 2026 GMT
            Not After : Jan  5 19:46:15 2027 GMT
        Subject: CN=38027CCB46096E3AE4C118F8B4F5FC39720F7545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:c6:02:a9:16:76:c6:f2:a0:af:bc:22:00:
                    98:cd:9e:17:c2:61:b0:7e:c3:74:42:10:f9:31:1f:
                    18:c1:68:56:01:3e:73:b9:15:43:0a:50:ca:77:26:
                    e7:d9:ee:33:d8:1b:b0:e2:7a:28:a7:47:05:e3:dd:
                    cb:1e:51:43:14:d8:99:7f:d4:a5:fc:b1:48:ed:ba:
                    ff:fb:05:eb:5c:cc:bf:80:53:0f:32:2f:ab:ec:82:
                    d1:be:42:b4:82:06:0d:e0:ac:5f:89:d3:79:64:d0:
                    bd:07:81:4b:6c:87:ec:72:e4:67:8b:04:82:e2:80:
                    d2:19:db:ca:c5:be:d4:c9:34:18:ef:91:b0:1f:ca:
                    3e:af:05:64:73:65:5b:80:fd:ab:f5:02:9d:9c:22:
                    c1:d1:cf:5c:a1:4b:0f:ee:17:d8:7e:ea:0a:c4:98:
                    91:fc:ba:3d:72:bc:bd:46:a8:0b:8b:8c:38:09:4d:
                    7a:e2:10:0e:fa:27:b1:65:39:d0:45:09:64:ad:c7:
                    2a:d6:dd:f9:09:c7:b4:50:85:82:5f:cb:d2:d8:f3:
                    97:56:72:69:c4:6c:c9:d6:96:67:b3:ba:90:e4:41:
                    62:9d:29:21:91:e1:25:23:30:44:92:6b:21:0b:a4:
                    01:e8:88:70:87:e3:ec:78:7a:31:41:c7:9d:b6:d9:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:02:7C:CB:46:09:6E:3A:E4:C1:18:F8:B4:F5:FC:39:72:0F:75:45
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:53:1e:a2:39:3f:d4:a3:d9:be:13:af:5e:99:7d:db:db:
         46:6f:7b:59:8b:a8:b5:b0:9f:4f:df:c8:53:b7:03:45:b7:4b:
         57:b1:2a:9a:f6:e0:5e:24:ef:d8:a2:8d:d0:eb:74:d9:ef:fe:
         5e:3c:1a:a0:d3:d7:94:8e:dd:83:fb:2a:65:cb:b6:f8:ca:7f:
         0a:68:de:21:34:25:2b:71:00:b9:fa:3e:d4:f9:ce:67:27:4e:
         cb:64:10:7a:48:9f:75:5d:a6:02:fb:9e:cb:f3:af:e1:ff:4a:
         8c:26:3c:a9:98:db:35:40:df:a8:4d:13:7d:a9:0d:03:f9:5f:
         80:13:26:51:79:c0:c4:c9:2e:27:90:9e:64:63:6b:22:b9:ba:
         c5:87:cd:75:2a:04:17:51:f3:52:90:b6:11:14:9b:53:db:f7:
         36:96:60:a2:fb:7c:b9:99:91:32:17:63:a4:74:39:d4:e6:31:
         92:62:8f:9a:10:e4:e1:95:b5:42:4e:f8:91:24:e7:b6:db:41:
         a3:f0:97:5c:1f:5c:46:51:86:47:b4:21:9d:f0:2f:ab:43:49:
         f1:90:e2:d1:d3:f4:df:2d:b6:dc:3a:e2:f2:ff:0c:df:b0:56:
         43:e8:4c:d9:11:e2:2c:e5:50:d8:65:59:4c:61:fa:23:a2:ff:
         76:72:97:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdcixFI/nFOYqZS3UjIOcAi1ZI2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgxQUE0M0RGMDMxRTAzMTIxQjEwMzc0QzA1QjUyQkJC
MTdBQ0JFQTAeFw0yNjAxMDYxOTQxMTVaFw0yNzAxMDUxOTQ2MTVaMDMxMTAvBgNV
BAMTKDM4MDI3Q0NCNDYwOTZFM0FFNEMxMThGOEI0RjVGQzM5NzIwRjc1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxcYCqRZ2xvKgr7wiAJjNnhfC
YbB+w3RCEPkxHxjBaFYBPnO5FUMKUMp3JufZ7jPYG7DieiinRwXj3cseUUMU2Jl/
1KX8sUjtuv/7BetczL+AUw8yL6vsgtG+QrSCBg3grF+J03lk0L0HgUtsh+xy5GeL
BILigNIZ28rFvtTJNBjvkbAfyj6vBWRzZVuA/av1Ap2cIsHRz1yhSw/uF9h+6grE
mJH8uj1yvL1GqAuLjDgJTXriEA76J7FlOdBFCWStxyrW3fkJx7RQhYJfy9LY85dW
cmnEbMnWlmezupDkQWKdKSGR4SUjMESSayELpAHoiHCH4+x4ejFBx5222QCHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOAJ8y0YJbjrkwRj4tPX8OXIPdUUwHwYDVR0j
BBgwFoAU2BqkPfAx4DEhsQN0wFtSu7F6y+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERkYxQjgxRUFCODhFQ0QxMTQwODhEOTkyNjBGRkFCNDhE
NjgwRURGNTE2QTQzQURCMjkxODdBRDI1NTkxRTFCLzAvRDgxQUE0M0RGMDMxRTAz
MTIxQjEwMzc0QzA1QjUyQkJCMTdBQ0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODFBQTQzREYwMzFFMDMxMjFC
MTAzNzRDMDVCNTJCQkIxN0FDQkVBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREZGMUI4MUVBQjg4RUNEMTE0MDg4RDk5MjYwRkZBQjQ4RDY4MEVERjUx
NkE0M0FEQjI5MTg3QUQyNTU5MUUxQi8wLzM0MzUyZTMyMzMzODJlMzEzNzM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLe6w
MA0GCSqGSIb3DQEBCwUAA4IBAQAU2FMeojk/1KPZvhOvXpl929tGb3tZi6i1sJ9P
38hTtwNFt0tXsSqa9uBeJO/Yoo3Q63TZ7/5ePBqg09eUjt2D+yply7b4yn8KaN4h
NCUrcQC5+j7U+c5nJ07LZBB6SJ91XaYC+57L86/h/0qMJjypmNs1QN+oTRN9qQ0D
+V+AEyZRecDEyS4nkJ5kY2siubrFh811KgQXUfNSkLYRFJtT2/c2lmCi+3y5mZEy
F2OkdDnU5jGSYo+aEOThlbVCTviRJOe220Gj8JdcH1xGUYZHtCGd8C+rQ0nxkOLR
0/TfLbbcOuLy/wzfsFZD6EzZEeIs5VDYZVlMYfojov92cpeU
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:55 2026 by rpki-client