This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/34352e3233322e33322e302f32322d3234203d3e203532333431.roa
File:                     34352e3233322e33322e302f32322d3234203d3e203532333431.roa (raw, json)
Hash identifier:          vTzKiNqcROb1V3QpZt0l+cQo9cV3ZOCBt0Zp9n2TgwE=
Subject key identifier:   96:44:3C:50:5D:4D:CD:58:80:13:A7:C1:57:97:FB:1C:84:05:69:4D
Certificate issuer:       /CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
Certificate serial:       65BF0AE8F58A3980E3EA29BAB1AA955D3285CD2D
Authority key identifier: 31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/34352e3233322e33322e302f32322d3234203d3e203532333431.roa
Signing time:             Tue 06 Jan 2026 19:17:05 +0000
ROA not before:           Tue 06 Jan 2026 19:12:05 +0000
ROA not after:            Tue 05 Jan 2027 19:17:05 +0000
asID:                     52341
IP address blocks:        45.232.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bf:0a:e8:f5:8a:39:80:e3:ea:29:ba:b1:aa:95:5d:32:85:cd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
        Validity
            Not Before: Jan  6 19:12:05 2026 GMT
            Not After : Jan  5 19:17:05 2027 GMT
        Subject: CN=96443C505D4DCD588013A7C15797FB1C8405694D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:ca:99:2b:32:4f:4b:40:2e:e1:f9:d9:16:
                    f7:e8:53:d1:40:d5:c1:05:f9:8e:4e:01:a7:01:56:
                    5f:f6:11:9d:58:ef:4e:da:86:ef:cd:7f:37:3d:0a:
                    b7:6c:09:de:2a:cd:a0:a9:37:b4:c7:3a:02:53:38:
                    bb:1c:3b:35:18:40:6a:95:30:ba:cb:0d:d3:b7:14:
                    14:73:58:5a:03:ed:1b:f2:af:d5:7c:74:79:e3:c8:
                    62:3e:46:94:06:6d:b1:c1:5c:7f:4c:89:08:9d:3e:
                    cd:21:3b:04:6e:92:6d:6b:cc:2a:fa:35:d7:98:a9:
                    1e:a3:3b:19:70:07:c3:03:c8:07:c1:bb:dc:88:4b:
                    1e:73:3d:18:12:15:b4:35:2f:21:bf:d9:a0:f5:80:
                    9d:63:58:a0:01:ef:06:84:26:09:f5:3b:20:23:c0:
                    57:b4:4b:ca:01:68:d5:e2:fe:1b:29:e2:43:6f:b7:
                    91:58:0a:01:67:cc:89:17:d9:0f:07:b9:98:20:17:
                    82:07:b3:2e:1b:7e:78:bd:8f:85:07:a6:c3:65:a3:
                    e0:7a:2c:a4:c5:cb:33:d5:3a:fc:6a:47:06:7d:d4:
                    04:03:74:07:2b:9c:ef:fd:b8:e4:91:17:07:74:eb:
                    9c:4e:c7:fa:51:d6:79:73:d7:6c:2e:cb:b4:f5:69:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:3C:50:5D:4D:CD:58:80:13:A7:C1:57:97:FB:1C:84:05:69:4D
            X509v3 Authority Key Identifier:
                keyid:31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/34352e3233322e33322e302f32322d3234203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:86:d6:c0:62:94:a4:a6:06:dd:bb:39:7f:da:0c:e4:30:
         01:f7:83:5f:ed:30:cd:c0:17:76:5c:2f:1e:39:53:4c:22:1d:
         b7:a2:18:aa:2d:53:fe:7e:89:38:f6:bb:b2:25:be:e4:15:d4:
         2c:7a:5e:cb:11:07:02:b8:a3:e9:65:77:da:8b:3f:e3:46:28:
         6b:1a:62:3c:ce:5f:db:2e:29:86:93:9c:7b:a1:20:68:cc:c2:
         51:22:04:3f:4a:9c:39:15:61:af:15:1b:77:b2:04:72:87:07:
         e0:f8:fc:45:44:c7:8b:10:26:62:17:7a:b6:85:df:16:a6:82:
         e3:1c:d3:69:1e:6e:7d:cd:19:f8:e6:49:26:13:6f:18:a8:eb:
         75:62:de:b5:5b:1f:46:c3:58:5b:28:69:23:fe:f7:fe:c6:1c:
         67:3e:e1:31:97:42:d4:0b:e6:ec:8a:81:e3:78:73:33:ac:d7:
         ad:f8:29:a3:24:be:da:2e:a1:eb:46:2a:51:10:c8:3c:61:f4:
         ae:25:84:1c:55:01:af:42:a5:a8:d2:39:e1:18:23:2c:0b:a1:
         b7:4c:51:51:e4:86:3b:42:b8:c8:8a:2d:25:29:5d:15:c7:f9:
         d2:a5:bd:22:4a:1b:09:54:26:78:46:19:c2:e2:af:94:cf:d9:
         e3:66:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:11:13 2026 by rpki-client