This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa
File:                     34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa (raw, json)
Hash identifier:          Cw6j23wmtWt7qRHXCIhV/MR41sL4fK7JdYE4utrc6aw=
Subject key identifier:   CF:01:3D:06:AA:FE:EF:90:9A:E6:CB:FF:36:FC:31:AF:E4:67:F5:91
Certificate issuer:       /CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
Certificate serial:       108BEE5510164ACED9050620AF7AB7479E4F90D0
Authority key identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa
Signing time:             Tue 06 Jan 2026 19:35:26 +0000
ROA not before:           Tue 06 Jan 2026 19:30:26 +0000
ROA not after:            Tue 05 Jan 2027 19:35:26 +0000
asID:                     266793
IP address blocks:        45.234.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8b:ee:55:10:16:4a:ce:d9:05:06:20:af:7a:b7:47:9e:4f:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
        Validity
            Not Before: Jan  6 19:30:26 2026 GMT
            Not After : Jan  5 19:35:26 2027 GMT
        Subject: CN=CF013D06AAFEEF909AE6CBFF36FC31AFE467F591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:5e:8c:d5:3b:e0:55:6b:dc:d0:67:bc:04:
                    61:a1:16:73:08:86:46:4a:d0:fa:3b:78:d4:6d:4b:
                    e1:e0:eb:9b:83:fa:6a:4d:cb:02:ee:01:54:d2:2f:
                    8e:a2:cb:6e:dc:1f:34:f3:99:83:60:47:38:65:38:
                    71:db:28:cc:fd:95:11:a1:3a:06:2e:76:74:41:8e:
                    35:9f:4c:52:51:f3:82:c3:c0:7e:81:88:ec:06:56:
                    4b:bf:c5:de:96:de:90:11:5b:3b:7b:a5:67:cf:02:
                    29:5e:c8:58:85:38:f9:0c:39:cd:8c:3c:2f:0e:13:
                    d4:a5:d1:d3:90:89:56:d8:cd:fc:73:ec:7a:2f:b3:
                    74:13:dc:44:5b:50:9d:9f:7d:2d:95:b4:56:a3:8a:
                    fd:35:2f:b7:7a:ec:94:a6:43:d1:60:94:73:b1:2f:
                    d6:c5:90:58:6c:db:15:59:6a:d7:17:05:51:23:2b:
                    5a:ff:ab:d4:d0:5a:6e:0b:30:3f:2c:cd:2f:5d:67:
                    3e:11:20:de:1d:a5:ae:ae:96:98:32:21:de:a4:05:
                    0e:c1:f9:ae:5e:82:ab:7a:22:15:f3:ab:85:93:27:
                    6d:f1:0c:6b:e5:3f:e1:50:38:75:fe:79:c6:34:b8:
                    f0:e9:ec:ec:f0:ba:7f:1b:57:4e:ef:72:76:8a:3a:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:01:3D:06:AA:FE:EF:90:9A:E6:CB:FF:36:FC:31:AF:E4:67:F5:91
            X509v3 Authority Key Identifier:
                keyid:6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:46:3c:a9:9d:a2:8e:ae:d9:88:4a:cf:83:65:29:af:3c:3c:
         c3:dc:8e:59:b2:cd:41:cc:78:a9:33:02:98:44:1f:59:12:09:
         83:a7:77:00:03:5c:b6:6e:5f:53:2f:48:56:33:e9:01:43:19:
         0f:fc:50:b3:b2:cb:b8:62:ab:a3:6b:61:56:31:f0:f8:c6:bf:
         8c:a6:63:76:2d:0f:a5:77:cb:20:d5:a6:db:d0:ed:9a:36:24:
         30:89:f5:c7:e7:36:a9:31:8e:31:d8:9e:a7:7d:ef:b1:a7:01:
         35:e1:ed:66:71:47:53:5e:39:57:fb:86:70:35:c9:49:02:4c:
         c6:0c:3f:41:4e:12:7f:c8:00:d1:ff:94:86:59:3a:57:d2:0c:
         67:c0:1d:c5:2f:cf:51:e8:ab:40:bc:a3:7e:61:ed:23:68:47:
         51:e7:8e:9e:a3:f1:c9:14:6d:6a:21:e1:43:d3:7c:5b:b8:9e:
         4b:1b:86:3a:c5:64:8c:83:d6:04:6b:de:b7:6d:86:bb:63:67:
         96:5d:f6:6a:67:e7:12:81:aa:b3:92:f4:8c:3e:60:02:c8:2e:
         47:bc:d2:8a:35:17:e6:d0:2f:37:10:83:01:71:d0:18:e9:13:
         35:bc:de:f9:51:a3:2b:11:17:71:f8:63:8b:14:15:85:66:43:
         f0:26:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:11:12 2026 by rpki-client