This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
File:                     34352e3233382e33362e302f32322d3234203d3e20323636383331.roa (raw, json)
Hash identifier:          SuUU/tCWc/2gFMsx8wCL3ueRGJyCXN/qg602CbzABoI=
Subject key identifier:   2E:02:3B:47:40:F5:D1:0C:03:22:51:50:B4:96:CB:4E:7C:E2:BD:F3
Certificate issuer:       /CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B
Certificate serial:       07A02AF9F8378C91A24F3E3FEA75082B457F030C
Authority key identifier: 66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
Signing time:             Tue 06 Jan 2026 19:32:17 +0000
ROA not before:           Tue 06 Jan 2026 19:27:17 +0000
ROA not after:            Tue 05 Jan 2027 19:32:17 +0000
asID:                     266831
IP address blocks:        45.238.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a0:2a:f9:f8:37:8c:91:a2:4f:3e:3f:ea:75:08:2b:45:7f:03:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B
        Validity
            Not Before: Jan  6 19:27:17 2026 GMT
            Not After : Jan  5 19:32:17 2027 GMT
        Subject: CN=2E023B4740F5D10C03225150B496CB4E7CE2BDF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:b7:92:8b:dc:ba:b9:15:66:0a:bd:68:04:
                    ab:37:1e:52:26:d1:24:8a:c5:73:e7:7b:b8:7e:0c:
                    fe:d4:65:ed:35:23:1a:1f:69:82:51:2b:c0:fa:9b:
                    0c:bf:88:fb:32:1b:32:0c:52:f9:7b:99:57:cc:2a:
                    9d:fa:e9:cf:0d:23:07:15:f3:ea:d8:c8:a2:6a:0d:
                    ce:35:b5:3c:58:e2:db:9f:c5:94:f0:c1:f4:76:07:
                    d6:41:73:d1:5b:cf:2c:0a:d8:75:01:b1:9a:ca:a5:
                    8c:d1:50:a0:73:44:cc:ba:c8:1b:92:2a:92:fd:e8:
                    8c:11:c8:ca:bc:f8:09:4a:42:a6:52:a4:a4:79:17:
                    d7:8f:1d:1a:60:dd:b7:d2:44:af:3d:38:08:a9:9d:
                    22:d1:61:f2:65:40:d8:a6:d0:3d:75:ec:81:38:2b:
                    c8:d5:6f:ed:0a:e6:ee:07:10:81:f9:a2:7e:0e:2e:
                    64:45:57:e2:c5:c9:67:17:60:4f:f0:3f:da:b9:dd:
                    74:78:27:f3:ed:d1:a2:f3:1c:aa:7c:82:6b:9d:98:
                    39:cf:a7:51:96:7b:12:05:9e:46:8a:21:f3:57:42:
                    d6:d1:59:77:66:28:5d:65:6b:65:2b:60:9e:f8:37:
                    0a:57:c4:10:a6:a5:e8:d0:14:e9:b7:a1:00:21:43:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:02:3B:47:40:F5:D1:0C:03:22:51:50:B4:96:CB:4E:7C:E2:BD:F3
            X509v3 Authority Key Identifier:
                keyid:66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:4b:b9:74:ca:e0:c5:da:de:f9:a7:1c:36:32:97:c2:1a:
         f8:8f:57:d0:c7:56:2f:74:a2:5d:3e:78:e2:95:30:3c:49:b3:
         57:bd:28:1d:bf:9c:b7:c1:34:cc:9f:2b:fa:6b:49:b1:c6:fb:
         e4:71:e4:6a:33:e1:ad:37:e9:9c:35:1c:26:34:51:90:ae:f1:
         91:96:7d:86:95:42:a5:e5:14:82:40:3d:b0:86:82:cc:d5:fc:
         6e:2e:2e:c5:0b:85:36:8d:e2:cd:db:c3:f1:8b:36:57:16:f9:
         3c:aa:6f:73:2c:1d:2f:ae:74:fc:80:28:ca:44:6b:df:26:fe:
         42:3e:7d:b4:83:fe:78:64:09:fc:20:18:f1:f8:b7:5f:37:42:
         43:cb:91:52:e9:ad:5d:ef:f6:fc:10:45:54:94:ee:4e:86:10:
         93:e4:aa:3c:19:9e:cb:1c:55:4f:d0:7d:1b:c3:ce:28:c0:91:
         4d:56:e3:5e:ba:0a:e4:52:f7:dc:97:7c:46:92:90:74:d0:35:
         ee:4c:71:ca:13:78:82:09:a7:5c:53:35:e7:71:ed:1f:51:59:
         d4:3f:7a:d3:28:bf:06:84:a2:1b:5e:6a:a9:ce:23:ef:f7:c8:
         3f:27:04:0f:74:aa:c7:36:bf:7d:77:4f:bf:d1:4d:66:b9:a4:
         23:48:1a:16
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUB6Aq+fg3jJGiTz4/6nUIK0V/AwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYyRTk3QjVCNTlERjRDRkRCODJFNUZCREFEOEYzRUE5
M0IyQzA3QjAeFw0yNjAxMDYxOTI3MTdaFw0yNzAxMDUxOTMyMTdaMDMxMTAvBgNV
BAMTKDJFMDIzQjQ3NDBGNUQxMEMwMzIyNTE1MEI0OTZDQjRFN0NFMkJERjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6SLeSi9y6uRVmCr1oBKs3HlIm
0SSKxXPne7h+DP7UZe01IxofaYJRK8D6mwy/iPsyGzIMUvl7mVfMKp366c8NIwcV
8+rYyKJqDc41tTxY4tufxZTwwfR2B9ZBc9FbzywK2HUBsZrKpYzRUKBzRMy6yBuS
KpL96IwRyMq8+AlKQqZSpKR5F9ePHRpg3bfSRK89OAipnSLRYfJlQNim0D117IE4
K8jVb+0K5u4HEIH5on4OLmRFV+LFyWcXYE/wP9q53XR4J/Pt0aLzHKp8gmudmDnP
p1GWexIFnkaKIfNXQtbRWXdmKF1la2UrYJ74NwpXxBCmpejQFOm3oQAhQ0QRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULgI7R0D10QwDIlFQtJbLTnzivfMwHwYDVR0j
BBgwFoAUZi6XtbWd9M/bguX72tjz6pOywHswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNkM1N0NBMUMyMTcyODlFNjBCMEExRENFOUZFMkNDQUEw
N0VDRDY0QjcwNUJGMkRDNzM1M0Q1RENCMjJFNDFELzAvNjYyRTk3QjVCNTlERjRD
RkRCODJFNUZCREFEOEYzRUE5M0IyQzA3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjJFOTdCNUI1OURGNENGREI4
MkU1RkJEQUQ4RjNFQTkzQjJDMDdCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjZDNTdDQTFDMjE3Mjg5RTYwQjBBMURDRTlGRTJDQ0FBMDdFQ0Q2NEI3
MDVCRjJEQzczNTNENURDQjIyRTQxRC8wLzM0MzUyZTMyMzMzODJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3uJDAN
BgkqhkiG9w0BAQsFAAOCAQEATA5LuXTK4MXa3vmnHDYyl8Ia+I9X0MdWL3SiXT54
4pUwPEmzV70oHb+ct8E0zJ8r+mtJscb75HHkajPhrTfpnDUcJjRRkK7xkZZ9hpVC
peUUgkA9sIaCzNX8bi4uxQuFNo3izdvD8Ys2Vxb5PKpvcywdL650/IAoykRr3yb+
Qj59tIP+eGQJ/CAY8fi3XzdCQ8uRUumtXe/2/BBFVJTuToYQk+SqPBmeyxxVT9B9
G8POKMCRTVbjXroK5FL33Jd8RpKQdNA17kxxyhN4ggmnXFM153HtH1FZ1D960yi/
BoSiG15qqc4j7/fIPycED3Sqxza/fXdPv9FNZrmkI0gaFg==
-----END CERTIFICATE-----
Generated at Tue Jan 13 08:30:12 2026 by rpki-client