This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/34352e3233322e39362e302f32322d3234203d3e20323636373533.roa
File:                     34352e3233322e39362e302f32322d3234203d3e20323636373533.roa (raw, json)
Hash identifier:          HXTGdqtdfVtgcXojmCv2rooRh1mEZPcdaxyk8nbMX2U=
Subject key identifier:   61:63:C9:AB:C5:47:C4:3E:19:BB:0A:4E:21:18:75:F6:E6:77:ED:0A
Certificate issuer:       /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Certificate serial:       894501D0D3B011DB39CA18E09CFAED277B5493
Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/34352e3233322e39362e302f32322d3234203d3e20323636373533.roa
Signing time:             Tue 06 Jan 2026 20:53:50 +0000
ROA not before:           Tue 06 Jan 2026 20:48:50 +0000
ROA not after:            Tue 05 Jan 2027 20:53:50 +0000
asID:                     266753
IP address blocks:        45.232.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 10:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:45:01:d0:d3:b0:11:db:39:ca:18:e0:9c:fa:ed:27:7b:54:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
        Validity
            Not Before: Jan  6 20:48:50 2026 GMT
            Not After : Jan  5 20:53:50 2027 GMT
        Subject: CN=6163C9ABC547C43E19BB0A4E211875F6E677ED0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:98:6a:cd:a0:c2:31:4c:19:a8:9b:7d:58:
                    7f:a9:43:94:ac:8b:e2:05:f5:b3:b2:68:90:76:ad:
                    0e:06:23:f1:0e:58:0d:13:e3:28:03:71:9a:15:14:
                    ca:4d:73:fd:30:70:ee:06:b7:6b:bd:45:3a:56:aa:
                    f9:e0:8e:61:8b:ef:85:80:5f:50:c9:a1:78:e6:78:
                    5a:fe:52:7e:58:ed:8c:de:2f:c1:f2:98:87:94:84:
                    10:df:cb:cc:8e:26:76:db:53:55:a3:4f:bd:b2:63:
                    42:9b:aa:07:cb:e8:7b:ee:c5:f5:e0:40:90:09:e2:
                    07:41:43:0a:02:7d:cd:b1:c0:64:ab:6d:4a:5b:b5:
                    32:85:64:59:4b:4e:50:e0:85:75:1f:e5:04:e7:ba:
                    3e:85:f1:fb:e1:c8:8e:20:e0:2c:5d:43:ed:d6:8b:
                    cd:d4:35:bf:7e:a1:f5:7e:ba:1d:d0:8b:ce:70:6a:
                    43:b1:9f:e6:f8:54:f2:e2:57:03:91:bb:e8:18:c8:
                    59:4c:d4:b4:0e:12:43:5b:7f:78:37:13:cc:9d:16:
                    4c:46:72:08:84:b5:df:63:9d:52:24:53:31:c1:cc:
                    89:0b:70:cc:04:94:33:21:83:37:03:af:43:9b:5d:
                    9c:07:06:98:a4:0b:c4:9f:0e:b3:69:35:7c:03:74:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:C9:AB:C5:47:C4:3E:19:BB:0A:4E:21:18:75:F6:E6:77:ED:0A
            X509v3 Authority Key Identifier:
                keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/34352e3233322e39362e302f32322d3234203d3e20323636373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:41:9f:81:cc:87:5c:6e:89:62:59:79:cb:cd:34:e2:0e:4e:
         49:88:9c:3f:9c:67:46:1c:fd:2e:97:7e:fc:dd:f7:81:1f:da:
         62:f0:25:f7:e1:5d:ed:bb:0e:03:06:9f:37:53:1c:de:4b:61:
         28:ba:e3:38:b0:70:2b:ea:d8:03:ac:58:d6:75:c4:12:a0:ad:
         eb:d8:d5:ef:a6:36:e8:16:20:a9:76:5d:85:4c:8e:8f:13:0d:
         1e:42:81:d3:d4:d7:a6:4d:e3:09:1e:6b:61:f8:bd:4c:1f:73:
         15:46:7d:91:00:ad:6b:e4:60:e7:40:b7:89:49:7e:69:17:f8:
         a2:bd:0a:d4:94:21:d6:1e:f7:3b:9a:d9:d2:65:10:59:88:63:
         42:90:a7:00:a4:db:e5:ca:e2:46:62:1d:a9:bc:21:5c:9e:69:
         df:37:f3:69:42:4a:d0:0a:88:7b:88:d7:f8:93:75:79:11:c1:
         1a:9e:18:c5:f0:c5:73:95:f9:93:af:ba:74:3a:36:88:f2:70:
         2d:a2:b1:61:10:b2:43:e5:63:aa:05:23:1c:1b:ba:34:cf:6f:
         74:2f:e0:43:a9:a7:91:f3:53:41:e9:57:d6:cd:0f:ea:f6:5b:
         b1:19:6e:d7:0d:b8:c4:53:c5:f3:ca:4c:df:df:76:24:2d:31:
         42:dd:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:11:48 2026 by rpki-client