This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa
File:                     34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa (raw, json)
Hash identifier:          DHBvn2anvRfHw1DKDJU8rUm0jlSHj3T/BaDJrAXHbpQ=
Subject key identifier:   DF:E5:A6:8E:91:20:A1:5A:B8:8B:C3:FA:0F:8B:97:F9:C0:A8:B9:EF
Certificate issuer:       /CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
Certificate serial:       22E1CF24CCE9FC9D820A254BED3D13C4F8072594
Authority key identifier: DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa
Signing time:             Tue 06 Jan 2026 18:58:29 +0000
ROA not before:           Tue 06 Jan 2026 18:53:29 +0000
ROA not after:            Tue 05 Jan 2027 18:58:29 +0000
asID:                     266863
IP address blocks:        45.239.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 13:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e1:cf:24:cc:e9:fc:9d:82:0a:25:4b:ed:3d:13:c4:f8:07:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07
        Validity
            Not Before: Jan  6 18:53:29 2026 GMT
            Not After : Jan  5 18:58:29 2027 GMT
        Subject: CN=DFE5A68E9120A15AB88BC3FA0F8B97F9C0A8B9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:6b:0a:4e:b6:f1:f4:bc:39:be:fd:fd:23:
                    44:0b:03:70:25:8e:81:97:1a:ed:91:da:49:f6:22:
                    00:11:47:f4:6c:9e:85:41:bb:9e:9b:4a:22:4c:62:
                    33:89:e0:f3:37:b9:da:ac:36:5d:90:1f:93:36:c8:
                    69:0d:ce:99:20:b8:e2:e0:7e:c1:f3:e7:29:06:44:
                    0b:0a:c2:0b:9e:9a:f3:b6:38:eb:5b:12:14:30:7c:
                    c8:98:f0:ac:30:d2:d8:68:e4:a6:90:01:bf:1d:4f:
                    7f:bd:46:94:dd:b1:35:fd:0f:03:44:88:5d:c5:ea:
                    46:cc:a0:c7:54:c6:a2:92:04:47:05:d9:bb:21:ea:
                    63:7d:93:50:76:c6:a7:70:da:40:24:c8:94:43:02:
                    ca:91:d1:3d:75:93:77:d3:9d:91:22:e7:07:3a:e0:
                    e6:6e:6e:92:ab:c7:25:92:fd:17:27:97:c1:43:77:
                    52:ad:d6:8f:ef:c5:c9:fb:a2:d3:7a:ce:2b:c8:4c:
                    5d:fe:13:2e:c1:e0:51:0e:cb:82:18:62:10:ea:8b:
                    c4:a9:92:e1:7c:ad:db:43:41:10:5c:44:7f:22:53:
                    a7:03:70:65:ae:4c:28:fe:e7:c3:40:cb:a6:ab:24:
                    36:81:48:4a:79:93:b7:64:9d:df:ab:06:12:eb:c6:
                    32:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E5:A6:8E:91:20:A1:5A:B8:8B:C3:FA:0F:8B:97:F9:C0:A8:B9:EF
            X509v3 Authority Key Identifier:
                keyid:DF:7C:CE:89:EE:1A:19:AE:75:BC:29:23:6E:F6:D7:40:9E:BD:4D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF7CCE89EE1A19AE75BC29236EF6D7409EBD4D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F345C766F28AEFBCCC4C3107A2217A819764A7E0EE8A43E68AE3A181DD96713D/0/34352e3233392e3132382e302f32322d3234203d3e20323636383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:25:f6:6d:79:48:51:af:39:c1:95:d8:95:7f:35:b5:bf:ad:
         3f:5c:2d:47:e7:8e:43:79:d4:ec:f5:bd:6a:f3:c4:68:71:11:
         42:b5:9e:81:83:cd:b9:23:7c:82:4f:5a:9c:81:14:72:39:0d:
         a2:59:94:b2:c3:4e:98:87:f0:b2:f9:90:9f:22:30:a1:70:1c:
         cc:74:5b:10:e3:67:8a:69:19:61:fb:35:ae:85:42:b1:d8:1f:
         93:5f:13:94:33:32:3c:35:c9:eb:26:97:59:52:d0:6d:54:05:
         81:49:49:a1:9e:bc:d9:e2:df:8c:ac:9c:a3:e4:ca:94:74:23:
         5e:82:ff:b1:88:41:58:b8:ae:3d:7c:da:62:29:d9:5e:f0:5f:
         f9:c8:49:f7:1c:97:5b:f2:4c:c4:61:42:3e:20:c1:e5:b8:df:
         8b:4d:92:26:22:3f:3e:16:94:ce:78:08:ae:bf:f6:da:b5:dd:
         85:c9:b8:e1:88:15:de:6a:a4:b9:ef:38:32:df:f9:df:d1:cc:
         52:84:08:d8:f6:6e:70:2a:4f:22:44:91:41:41:c6:f3:68:d3:
         e8:e6:89:b8:97:d3:18:e4:60:79:72:d4:47:49:8b:a0:cf:05:
         87:fa:bf:a1:d1:e2:bd:4a:d6:b8:2b:cd:91:41:d1:fe:1e:f0:
         92:2d:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:08 2026 by rpki-client