This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
File:                     34352e3232372e36322e302f32332d3234203d3e20323635383731.roa (raw, json)
Hash identifier:          +L4VV38TlOB1iUmgfCPRsz8xhBXZhsy3u+t/LTHpr3I=
Subject key identifier:   61:D8:F7:28:E5:DA:97:36:F5:EF:DA:E6:11:3D:2D:F9:E7:3A:C6:34
Certificate issuer:       /CN=C91FC34E769B491806E180E9DFF903C7D1F9B6F9
Certificate serial:       38F34300E10A4408A155D17FE19C9F03757168A3
Authority key identifier: C9:1F:C3:4E:76:9B:49:18:06:E1:80:E9:DF:F9:03:C7:D1:F9:B6:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
Signing time:             Tue 06 Jan 2026 19:07:18 +0000
ROA not before:           Tue 06 Jan 2026 19:02:18 +0000
ROA not after:            Tue 05 Jan 2027 19:07:18 +0000
asID:                     265871
IP address blocks:        45.227.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 08:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f3:43:00:e1:0a:44:08:a1:55:d1:7f:e1:9c:9f:03:75:71:68:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C91FC34E769B491806E180E9DFF903C7D1F9B6F9
        Validity
            Not Before: Jan  6 19:02:18 2026 GMT
            Not After : Jan  5 19:07:18 2027 GMT
        Subject: CN=61D8F728E5DA9736F5EFDAE6113D2DF9E73AC634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:d2:27:32:56:95:94:1a:aa:e6:23:b5:8e:
                    2b:39:5d:ed:0c:3d:86:8c:5a:a4:dd:02:8c:09:b3:
                    ab:00:08:ed:15:de:66:4e:6b:7f:14:b0:13:96:d2:
                    65:76:fe:c9:2e:d5:f7:53:97:bf:0f:cd:a7:54:4f:
                    7d:c3:46:d1:06:6a:bf:06:1d:77:37:ca:a4:b4:d2:
                    9a:0d:3e:81:89:3b:f5:3e:72:ca:39:a8:96:17:d2:
                    12:62:55:42:fc:64:af:87:2d:0e:b9:01:4e:5d:44:
                    50:be:76:fc:f1:4c:3e:e2:2f:c9:0e:25:57:9b:ee:
                    a5:06:87:f0:fd:de:4c:df:b0:6a:96:56:23:6c:c6:
                    30:bb:49:00:ba:1d:6e:27:09:e4:aa:ff:7b:a4:34:
                    ef:c8:e8:76:ed:ac:08:d7:74:75:f0:c1:7e:7a:c3:
                    ba:51:02:5d:d1:7c:89:af:8a:d4:02:8c:09:f8:e1:
                    72:c5:71:54:b9:7a:34:45:85:48:65:be:88:fd:91:
                    bf:b6:56:28:fb:e1:85:dd:43:1e:7f:98:eb:20:c3:
                    eb:55:37:e5:ee:4a:e2:61:ab:94:ab:40:ed:88:aa:
                    d0:e4:20:34:99:3d:99:37:f8:1a:d1:af:20:bb:9b:
                    e5:92:cc:37:46:0d:d0:0c:b4:e8:ab:18:bb:a5:2f:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D8:F7:28:E5:DA:97:36:F5:EF:DA:E6:11:3D:2D:F9:E7:3A:C6:34
            X509v3 Authority Key Identifier:
                keyid:C9:1F:C3:4E:76:9B:49:18:06:E1:80:E9:DF:F9:03:C7:D1:F9:B6:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:13:cb:85:e6:56:42:27:cb:eb:ba:91:1a:2c:bb:8a:9f:
         bf:bd:2c:af:6d:41:4c:fc:7f:8d:30:14:d0:56:02:77:f2:b5:
         01:20:b8:4e:34:97:8b:d0:52:ab:09:b5:fb:a8:90:91:d4:b7:
         35:31:4f:11:85:5d:99:6c:1e:cc:be:19:44:2c:b1:4e:cc:1c:
         cf:9b:84:d8:49:4c:48:92:75:54:3b:8f:b2:b7:20:d4:9d:b9:
         47:79:6f:c4:b5:1b:bd:29:de:36:b3:15:c8:8c:dc:6a:f0:dd:
         cb:fc:d5:43:69:fc:27:24:f9:43:47:37:a3:94:53:bb:9c:a0:
         c9:1c:82:b4:ac:e8:3d:4b:f9:e7:24:db:57:5d:32:07:bc:4c:
         1e:e7:34:b7:2b:a2:be:7a:f8:5e:5b:5e:8e:c1:92:bd:11:b8:
         91:84:99:62:56:76:da:0c:17:b0:66:1f:17:b4:8b:5b:5e:93:
         d9:69:ec:9e:38:7e:48:50:6d:c1:1d:97:a2:1f:39:8e:1e:ce:
         1e:af:85:62:0d:f1:c1:45:17:7f:5f:69:a4:b3:1e:83:02:98:
         ac:34:7c:11:76:1b:a9:22:c6:c4:49:71:0c:41:52:4f:78:df:
         54:c1:58:82:b5:1c:fc:c0:99:50:05:6d:4b:39:23:94:50:be:
         92:da:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:48 2026 by rpki-client