This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/34352e3233392e39362e302f32322d3232203d3e20323636383634.roa
File:                     34352e3233392e39362e302f32322d3232203d3e20323636383634.roa (raw, json)
Hash identifier:          pZiNleVuR7f0pT7KIQF3mEQsOReND2f193QeL7hx3MY=
Subject key identifier:   27:31:B1:96:AE:73:1C:9E:70:F9:C4:0C:C5:A8:DA:2F:35:DB:04:59
Certificate issuer:       /CN=4EF72CA9E6161B7548136AAB8BCF62028BA33AF0
Certificate serial:       7064923078B1536350A113CD567C0617E24C4252
Authority key identifier: 4E:F7:2C:A9:E6:16:1B:75:48:13:6A:AB:8B:CF:62:02:8B:A3:3A:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/34352e3233392e39362e302f32322d3232203d3e20323636383634.roa
Signing time:             Tue 06 Jan 2026 19:13:56 +0000
ROA not before:           Tue 06 Jan 2026 19:08:56 +0000
ROA not after:            Tue 05 Jan 2027 19:13:56 +0000
asID:                     266864
IP address blocks:        45.239.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 01:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:64:92:30:78:b1:53:63:50:a1:13:cd:56:7c:06:17:e2:4c:42:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF72CA9E6161B7548136AAB8BCF62028BA33AF0
        Validity
            Not Before: Jan  6 19:08:56 2026 GMT
            Not After : Jan  5 19:13:56 2027 GMT
        Subject: CN=2731B196AE731C9E70F9C40CC5A8DA2F35DB0459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:79:9d:51:08:60:82:da:4d:8a:87:e7:05:
                    61:a8:bd:4a:fb:25:55:eb:57:17:c9:87:98:3c:2d:
                    3c:a7:9c:88:8e:b9:3a:06:52:00:2f:35:bb:ed:fa:
                    a9:aa:7e:22:fd:68:e6:09:ab:d9:c7:38:5f:f8:e0:
                    17:82:9d:dc:49:97:2b:89:de:a9:62:09:f8:fa:5e:
                    8f:7e:9a:67:c0:1c:bc:38:b1:02:6e:22:c6:21:ad:
                    02:11:16:f8:86:26:13:3d:2e:07:fb:08:19:28:b1:
                    b1:81:25:93:ad:29:47:eb:bb:72:46:be:ca:f7:66:
                    46:95:4f:36:81:61:3d:1f:1e:8f:7b:07:81:fa:06:
                    11:8c:0d:4c:6b:6c:f0:ae:b0:86:b0:1b:4e:33:f0:
                    51:d3:70:e6:28:9c:19:07:51:05:d2:af:1d:6f:c8:
                    07:d2:76:85:da:fb:9f:00:af:8b:8a:a8:2d:f5:06:
                    b5:51:9f:3b:f5:3f:22:b1:36:29:79:2a:19:0c:0c:
                    c0:77:5c:ee:73:64:5d:90:26:43:bf:01:9f:39:b8:
                    23:bd:fd:72:34:e2:fe:c0:c6:1d:20:42:08:45:bc:
                    74:c0:85:b6:b1:87:a7:5c:1a:76:d2:5f:96:33:5f:
                    e1:0e:3d:87:44:61:b9:43:e5:fc:90:65:bc:7b:35:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:B1:96:AE:73:1C:9E:70:F9:C4:0C:C5:A8:DA:2F:35:DB:04:59
            X509v3 Authority Key Identifier:
                keyid:4E:F7:2C:A9:E6:16:1B:75:48:13:6A:AB:8B:CF:62:02:8B:A3:3A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4EF72CA9E6161B7548136AAB8BCF62028BA33AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11AB08C91584D003AA330ACAAC2ADC57E8B6F42D3AFAEF184A01C5604BA02822/0/34352e3233392e39362e302f32322d3232203d3e20323636383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:b3:b3:29:99:3e:82:f1:49:94:be:34:3c:5b:74:1c:fd:
         f7:95:20:69:3f:c5:95:0a:50:42:e5:14:4a:21:7f:09:56:f8:
         08:ff:6b:24:d0:bc:7d:b2:f2:11:d6:6c:5d:b9:64:fa:ad:ed:
         d3:bd:00:fb:73:22:36:49:91:50:0a:7e:e4:6b:a2:30:f5:69:
         6f:76:3b:2c:b0:1b:33:fe:5f:e4:f3:c1:4e:72:c4:12:ea:3c:
         56:c4:d8:6c:b5:18:8e:85:1d:9b:13:c8:7c:7b:8c:bb:d9:fd:
         d9:fe:a0:e3:41:e1:68:f1:f6:3e:89:59:74:b7:f2:b9:a5:e1:
         1e:b1:8d:dc:1d:bd:a9:37:e1:9b:99:3b:3d:08:f0:fe:b0:39:
         6b:3f:c4:8d:93:bb:eb:86:66:1f:74:13:53:5c:1c:d0:db:4b:
         be:e0:d7:e0:f6:3f:7e:5c:65:ad:45:bf:6f:9f:91:4e:3c:a2:
         5d:24:b2:ba:8a:64:51:5d:76:66:6e:68:a0:a2:ef:e5:88:66:
         02:c6:6c:14:e5:b1:53:a5:21:ea:a1:d4:ae:7c:b0:a3:d4:e6:
         93:29:a0:3b:b4:ef:51:cc:76:65:82:6a:0f:c2:9e:64:53:82:
         c5:60:54:b1:dc:39:89:61:84:5f:73:6c:11:d6:93:1c:57:6c:
         3c:98:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:33:14 2026 by rpki-client