This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
File:                     34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa (raw, json)
Hash identifier:          iS5gsUnhj6ZJJRXVuW07ylHL2YiftfgBteO5acc8Rhw=
Subject key identifier:   0F:37:57:7F:A4:81:D0:08:69:0C:80:47:27:1D:4E:03:73:E6:C4:97
Certificate issuer:       /CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Certificate serial:       368224528C426A20A49CBF5B97E6DDF9B2463D
Authority key identifier: 92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
Signing time:             Tue 06 Jan 2026 20:58:32 +0000
ROA not before:           Tue 06 Jan 2026 20:53:32 +0000
ROA not after:            Tue 05 Jan 2027 20:58:32 +0000
asID:                     262204
IP address blocks:        45.170.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:82:24:52:8c:42:6a:20:a4:9c:bf:5b:97:e6:dd:f9:b2:46:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
        Validity
            Not Before: Jan  6 20:53:32 2026 GMT
            Not After : Jan  5 20:58:32 2027 GMT
        Subject: CN=0F37577FA481D008690C8047271D4E0373E6C497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:57:85:f7:13:b4:f6:48:1b:2f:0a:54:6d:
                    96:8e:40:ea:f1:64:e9:68:d3:5b:88:1c:c8:07:c4:
                    f8:6a:82:ea:ae:e5:72:73:77:57:cf:30:5d:d5:1d:
                    d6:59:c7:bf:bd:90:4b:c9:b1:6e:33:57:f3:75:f3:
                    19:10:9d:9e:25:29:91:f9:55:23:d3:27:64:6f:44:
                    2d:4b:03:2f:28:fe:90:ec:0a:a9:4b:84:82:c7:d7:
                    2b:b6:cb:14:f1:f5:94:bd:5d:8d:00:23:0a:ab:0b:
                    c1:64:bf:73:50:1e:f6:32:84:c3:5f:84:b8:5e:54:
                    74:fc:56:f7:e6:cb:86:84:eb:dd:b0:ee:9d:84:7d:
                    b2:83:89:56:5f:33:94:39:ea:21:66:ab:cf:cb:be:
                    b4:88:5c:19:8b:9c:bd:7f:52:fe:54:5c:6e:e0:a5:
                    d1:fa:31:1e:a3:b7:05:ef:55:a9:18:ab:39:c5:04:
                    58:5b:9c:8e:55:0d:63:40:1a:0c:52:e5:a3:42:88:
                    50:96:ed:91:48:ec:0a:e5:93:67:4a:1e:eb:ea:01:
                    aa:b1:f0:d4:c6:f7:aa:20:36:56:99:3c:c7:c1:59:
                    cd:49:9f:7f:7e:94:e7:f7:2f:be:2e:e7:e0:05:71:
                    f8:27:3b:1b:ed:2b:04:2e:f7:cd:b9:8e:25:6d:16:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:57:7F:A4:81:D0:08:69:0C:80:47:27:1D:4E:03:73:E6:C4:97
            X509v3 Authority Key Identifier:
                keyid:92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:55:a2:8b:15:e2:fb:e2:bc:59:f8:a8:aa:11:74:c2:43:c6:
         68:02:f6:0d:eb:d0:e1:51:05:2b:c2:38:18:7b:a7:87:e8:2a:
         15:42:a3:b8:3b:1d:e6:dd:36:db:53:53:ec:ba:7f:99:2a:a8:
         dd:ab:1f:97:d6:1f:67:5c:53:04:f3:3f:b5:bc:19:b0:e6:1b:
         be:08:e6:3c:98:9a:11:49:3f:59:68:5d:90:30:52:d5:38:90:
         20:50:4c:d7:0e:37:ef:80:60:fa:a2:f4:9e:7f:a2:25:35:43:
         63:5e:91:f5:c3:e5:bf:63:6e:49:f9:b5:3d:4c:c7:90:4f:f2:
         85:e5:c4:c1:d5:42:25:d8:ac:bc:6e:ee:a3:c1:9f:66:dd:2d:
         91:b2:f0:73:ec:5a:98:3f:0e:4e:f5:18:44:c8:13:23:6f:1d:
         1c:14:34:1f:62:1f:f6:ac:e4:fa:53:89:5a:ea:62:e1:da:e3:
         b5:46:af:45:09:25:53:4f:25:08:18:ed:db:14:4e:d2:3a:99:
         bd:fc:20:f6:b6:d7:dd:d4:97:26:ed:6b:8f:34:c6:05:35:9a:
         f7:d5:5f:2b:19:6d:fa:01:a9:ff:27:b9:55:9f:b4:ae:c7:12:
         ee:13:db:a5:38:17:f8:3b:98:68:de:9c:61:91:53:dd:bf:2e:
         2b:c6:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:06:01 2026 by rpki-client