This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134392e302f32342d3234203d3e20323635373135.roa
File:                     34352e36352e3134392e302f32342d3234203d3e20323635373135.roa (raw, json)
Hash identifier:          dVk4qE0xxIQiHTgczNI7uYeW0CuJZyHyyKsuRYC+Krw=
Subject key identifier:   A9:3D:1D:73:17:34:DB:BE:E9:B4:58:D5:21:7D:23:BF:CC:38:14:5D
Certificate issuer:       /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial:       3962EB08D6423948537FF6A0AAAA0207067A760D
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134392e302f32342d3234203d3e20323635373135.roa
Signing time:             Tue 06 Jan 2026 19:38:00 +0000
ROA not before:           Tue 06 Jan 2026 19:33:00 +0000
ROA not after:            Tue 05 Jan 2027 19:38:00 +0000
asID:                     265715
IP address blocks:        45.65.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:62:eb:08:d6:42:39:48:53:7f:f6:a0:aa:aa:02:07:06:7a:76:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
        Validity
            Not Before: Jan  6 19:33:00 2026 GMT
            Not After : Jan  5 19:38:00 2027 GMT
        Subject: CN=A93D1D731734DBBEE9B458D5217D23BFCC38145D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:23:2e:db:34:c7:0c:58:2b:e1:c8:1d:8f:
                    39:41:37:d4:a6:d8:8f:1d:4e:cc:87:60:93:3d:ac:
                    01:d0:c0:56:73:9f:25:71:7b:3d:6d:24:0d:61:d6:
                    6b:1f:fb:46:93:38:d9:df:f4:6a:6f:1c:6e:22:8f:
                    dc:61:d1:42:aa:b1:5b:98:c7:8d:b5:f5:99:cd:08:
                    f5:6a:9b:cf:52:bc:8d:d9:7d:9d:61:21:50:8c:03:
                    50:a9:24:52:b7:23:1a:f8:59:6d:23:2a:df:d6:98:
                    7a:a6:65:5b:02:c6:99:a9:8b:20:f2:5b:d9:c9:49:
                    e9:81:02:42:f1:44:5f:5a:71:a0:6a:30:d1:45:49:
                    18:9b:fd:26:7b:a1:09:2a:e4:7e:74:23:77:c9:fa:
                    d9:72:73:9f:7f:a4:ac:8b:cd:bd:ad:ea:b0:80:d8:
                    24:65:fe:57:dc:67:af:ed:d5:97:e6:85:40:05:56:
                    dd:5b:05:fd:e3:d7:b4:43:82:d6:a4:2d:b6:c2:6b:
                    36:d0:6e:a5:f5:8a:79:19:bd:c3:bf:59:c7:aa:77:
                    1c:2c:1b:28:d1:3b:05:6b:af:a8:7e:13:a9:fd:3a:
                    dc:87:23:7c:f2:28:bb:8b:4c:1c:ca:66:ca:c2:d5:
                    4f:aa:bb:64:71:5d:a6:3a:ee:b5:b4:26:61:f2:a6:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:1D:73:17:34:DB:BE:E9:B4:58:D5:21:7D:23:BF:CC:38:14:5D
            X509v3 Authority Key Identifier:
                keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3134392e302f32342d3234203d3e20323635373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:e1:22:a0:78:6f:4d:3b:85:46:ac:f4:8f:7b:00:46:93:
         40:e2:88:f6:ab:95:3b:0c:02:7b:99:f1:4d:d0:20:fd:ff:0b:
         e6:c6:89:74:22:28:3a:3d:cf:4c:9f:59:9b:73:9c:dc:65:3b:
         c9:db:1a:ff:15:82:47:49:2e:07:81:15:ac:c4:42:15:b2:41:
         4a:4d:11:34:06:aa:66:c1:d1:dc:dd:13:0e:94:79:c4:4c:ee:
         00:ae:38:97:cd:a9:74:41:6d:80:b4:2b:9e:5e:d7:88:20:21:
         92:b3:57:a0:bf:cb:f6:ad:91:ad:a1:73:14:1d:54:9a:fc:4c:
         4b:df:47:b6:d1:a0:96:59:3f:38:43:69:a4:f0:b0:a2:f1:9a:
         50:a6:70:76:52:cb:fa:52:1c:7d:06:bc:fb:7b:07:24:71:e8:
         18:9c:66:cd:0c:9c:7d:9e:1b:11:04:57:5f:f9:4f:4d:89:4c:
         58:26:75:b7:4e:85:36:0d:35:a8:fd:19:50:0c:4e:8f:c5:5b:
         8b:7e:d6:2a:92:bc:5a:ee:65:0e:3f:f3:3c:19:79:cf:60:eb:
         cb:1c:54:7a:a4:6c:f8:20:b5:72:2b:e3:d4:cd:28:75:26:8d:
         61:44:a9:ac:f5:dc:c5:22:e8:90:f7:eb:c3:27:17:41:a8:48:
         58:48:5a:de
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOWLrCNZCOUhTf/agqqoCBwZ6dg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk5OEIxMjBCM0U3M0UxQTgzMzE5RjM1MzMyOUMzQUJE
MEUxRTY3QzAeFw0yNjAxMDYxOTMzMDBaFw0yNzAxMDUxOTM4MDBaMDMxMTAvBgNV
BAMTKEE5M0QxRDczMTczNERCQkVFOUI0NThENTIxN0QyM0JGQ0MzODE0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJyMu2zTHDFgr4cgdjzlBN9Sm
2I8dTsyHYJM9rAHQwFZznyVxez1tJA1h1msf+0aTONnf9GpvHG4ij9xh0UKqsVuY
x4219ZnNCPVqm89SvI3ZfZ1hIVCMA1CpJFK3Ixr4WW0jKt/WmHqmZVsCxpmpiyDy
W9nJSemBAkLxRF9acaBqMNFFSRib/SZ7oQkq5H50I3fJ+tlyc59/pKyLzb2t6rCA
2CRl/lfcZ6/t1ZfmhUAFVt1bBf3j17RDgtakLbbCazbQbqX1inkZvcO/Wceqdxws
GyjROwVrr6h+E6n9OtyHI3zyKLuLTBzKZsrC1U+qu2RxXaY67rW0JmHypskHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqT0dcxc0277ptFjVIX0jv8w4FF0wHwYDVR0j
BBgwFoAUWZixILPnPhqDMZ81MynDq9Dh5nwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNDE3MUZGRUZGRDExOUQzNjQwREFDNzY5REIyREUzQkU3
MzA4RTc0QTJFNTUxQkU4OTE3QTVBOEQyNDFCMDMxLzAvNTk5OEIxMjBCM0U3M0Ux
QTgzMzE5RjM1MzMyOUMzQUJEMEUxRTY3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTk4QjEyMEIzRTczRTFBODMz
MTlGMzUzMzI5QzNBQkQwRTFFNjdDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzQxNzFGRkVGRkQxMTlEMzY0MERBQzc2OURCMkRFM0JFNzMwOEU3NEEy
RTU1MUJFODkxN0E1QThEMjQxQjAzMS8wLzM0MzUyZTM2MzUyZTMxMzQzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM3MzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1BlTAN
BgkqhkiG9w0BAQsFAAOCAQEAbfbhIqB4b007hUas9I97AEaTQOKI9quVOwwCe5nx
TdAg/f8L5saJdCIoOj3PTJ9Zm3Oc3GU7ydsa/xWCR0kuB4EVrMRCFbJBSk0RNAaq
ZsHR3N0TDpR5xEzuAK44l82pdEFtgLQrnl7XiCAhkrNXoL/L9q2RraFzFB1UmvxM
S99HttGgllk/OENppPCwovGaUKZwdlLL+lIcfQa8+3sHJHHoGJxmzQycfZ4bEQRX
X/lPTYlMWCZ1t06FNg01qP0ZUAxOj8Vbi37WKpK8Wu5lDj/zPBl5z2DryxxUeqRs
+CC1civj1M0odSaNYUSprPXcxSLokPfrwycXQahIWEha3g==
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:25:59 2026 by rpki-client