This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa
File:                     34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa (raw, json)
Hash identifier:          ih+ytvUmQZZ6tQvK1JvPIS9Mce1I8Gcnr76wqPL3Ufs=
Subject key identifier:   3D:E9:E0:7F:EE:C9:07:8A:5A:9C:25:51:F1:D0:82:80:72:07:BA:22
Certificate issuer:       /CN=53AEED6EF7E19754562BCA9484F6AC8AA88893AA
Certificate serial:       5AF2DE34212E94E02740EC46C8712D5BD70DBA0B
Authority key identifier: 53:AE:ED:6E:F7:E1:97:54:56:2B:CA:94:84:F6:AC:8A:A8:88:93:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa
Signing time:             Tue 06 Jan 2026 20:51:39 +0000
ROA not before:           Tue 06 Jan 2026 20:46:39 +0000
ROA not after:            Tue 05 Jan 2027 20:51:39 +0000
asID:                     266771
IP address blocks:        45.232.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f2:de:34:21:2e:94:e0:27:40:ec:46:c8:71:2d:5b:d7:0d:ba:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AEED6EF7E19754562BCA9484F6AC8AA88893AA
        Validity
            Not Before: Jan  6 20:46:39 2026 GMT
            Not After : Jan  5 20:51:39 2027 GMT
        Subject: CN=3DE9E07FEEC9078A5A9C2551F1D082807207BA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:b2:d3:4c:ec:f9:87:0c:f0:94:eb:2d:f6:
                    cd:a6:cc:fd:0f:39:0d:51:ca:3c:ff:12:f7:b9:54:
                    94:f3:68:2d:26:e6:82:1b:28:61:f5:3f:e6:2f:f8:
                    a6:5e:02:99:bc:0f:2e:77:76:c2:a5:29:88:13:fe:
                    d8:f3:c4:99:0f:48:f1:64:a2:fc:60:a8:39:94:33:
                    0a:d4:67:17:89:ee:49:eb:7c:d3:e6:1f:3d:0b:1d:
                    ff:46:93:60:2d:f0:48:2a:8b:2a:70:59:f0:eb:c9:
                    9e:62:f9:e1:72:a9:f4:6e:78:a7:93:68:50:68:30:
                    d1:d3:9b:6e:b8:1e:bc:74:d2:19:78:d8:d0:59:33:
                    68:59:47:c4:99:76:f9:7d:e9:1f:e2:84:6c:48:a6:
                    10:81:0d:7b:c8:19:c9:ff:96:da:82:9f:01:b3:49:
                    8b:67:d9:f3:67:ac:1b:5a:bc:1b:62:5c:48:21:ca:
                    4f:40:29:9e:5b:c4:dd:ef:52:96:84:34:cc:44:ab:
                    14:9c:9f:8b:b5:b6:5a:fa:e0:50:6c:57:3a:c8:6f:
                    33:a2:b5:10:ba:56:99:fa:ad:07:5e:c4:20:1d:0c:
                    8e:d6:68:65:60:b2:aa:1c:22:01:0c:ef:a3:68:db:
                    87:2c:2f:f9:fe:77:b1:98:92:60:45:e9:df:41:c0:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E9:E0:7F:EE:C9:07:8A:5A:9C:25:51:F1:D0:82:80:72:07:BA:22
            X509v3 Authority Key Identifier:
                keyid:53:AE:ED:6E:F7:E1:97:54:56:2B:CA:94:84:F6:AC:8A:A8:88:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:52:ce:23:32:27:40:0f:50:fd:5b:09:6d:0e:de:b6:5c:
         ad:eb:61:ce:6b:df:15:8e:0a:7c:57:bb:a9:f9:ae:b4:92:0b:
         93:85:42:23:26:18:c2:42:1d:92:4f:97:30:c8:33:c0:92:25:
         25:6f:88:c9:7d:f6:9d:94:bd:2c:38:22:8a:4c:54:1f:5a:be:
         20:fa:91:55:0d:19:cc:bb:67:df:1a:16:67:ca:84:b0:f6:61:
         31:be:9a:fb:bb:f6:a8:57:4c:4c:d9:8f:26:29:c4:82:43:47:
         d9:ad:d5:1c:15:64:c8:0c:8d:d9:62:6d:f7:78:8b:80:ff:72:
         69:c3:36:41:75:d8:0c:4b:84:e5:37:2e:b9:81:ee:63:36:5b:
         24:9e:39:f0:b1:16:cb:1b:0c:75:10:28:aa:93:b7:e0:16:89:
         9c:4f:33:62:5b:db:8c:0c:80:6e:37:66:ed:d9:e8:96:cc:a4:
         4b:02:1e:44:30:c4:49:16:fe:be:f8:85:ac:45:9c:08:ae:74:
         2c:69:70:17:f6:c9:2d:ad:db:13:40:eb:18:39:e2:13:42:06:
         e9:54:4d:1e:57:38:12:db:d8:e1:40:0f:7a:5d:8d:5c:79:ac:
         3d:2a:ac:3c:fa:7d:3c:3e:0c:6b:73:45:ba:5d:17:c8:b2:b7:
         3e:74:e6:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWvLeNCEulOAnQOxGyHEtW9cNugswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBRUVENkVGN0UxOTc1NDU2MkJDQTk0ODRGNkFDOEFB
ODg4OTNBQTAeFw0yNjAxMDYyMDQ2MzlaFw0yNzAxMDUyMDUxMzlaMDMxMTAvBgNV
BAMTKDNERTlFMDdGRUVDOTA3OEE1QTlDMjU1MUYxRDA4MjgwNzIwN0JBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Z7LTTOz5hwzwlOst9s2mzP0P
OQ1Ryjz/Eve5VJTzaC0m5oIbKGH1P+Yv+KZeApm8Dy53dsKlKYgT/tjzxJkPSPFk
ovxgqDmUMwrUZxeJ7knrfNPmHz0LHf9Gk2At8EgqiypwWfDryZ5i+eFyqfRueKeT
aFBoMNHTm264Hrx00hl42NBZM2hZR8SZdvl96R/ihGxIphCBDXvIGcn/ltqCnwGz
SYtn2fNnrBtavBtiXEghyk9AKZ5bxN3vUpaENMxEqxScn4u1tlr64FBsVzrIbzOi
tRC6Vpn6rQdexCAdDI7WaGVgsqocIgEM76No24csL/n+d7GYkmBF6d9BwHe9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPengf+7JB4panCVR8dCCgHIHuiIwHwYDVR0j
BBgwFoAUU67tbvfhl1RWK8qUhPasiqiIk6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNUNCRDAxQjQ2NUZFREY5RUU3MDgyODAxMTM2OEUwNzhB
RjFBNDY1Q0Y5MDI5M0YyMjU3ODk0QUI0OUExQzlFLzAvNTNBRUVENkVGN0UxOTc1
NDU2MkJDQTk0ODRGNkFDOEFBODg4OTNBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0FFRUQ2RUY3RTE5NzU0NTYy
QkNBOTQ4NEY2QUM4QUE4ODg5M0FBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzVDQkQwMUI0NjVGRURGOUVFNzA4MjgwMTEzNjhFMDc4QUYxQTQ2NUNG
OTAyOTNGMjI1Nzg5NEFCNDlBMUM5RS8wLzM0MzUyZTMyMzMzMjJlMzEzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeix
MA0GCSqGSIb3DQEBCwUAA4IBAQA9klLOIzInQA9Q/VsJbQ7etlyt62HOa98Vjgp8
V7up+a60kguThUIjJhjCQh2ST5cwyDPAkiUlb4jJffadlL0sOCKKTFQfWr4g+pFV
DRnMu2ffGhZnyoSw9mExvpr7u/aoV0xM2Y8mKcSCQ0fZrdUcFWTIDI3ZYm33eIuA
/3JpwzZBddgMS4TlNy65ge5jNlsknjnwsRbLGwx1ECiqk7fgFomcTzNiW9uMDIBu
N2bt2eiWzKRLAh5EMMRJFv6++IWsRZwIrnQsaXAX9sktrdsTQOsYOeITQgbpVE0e
VzgS29jhQA96XY1ceaw9Kqw8+n08Pgxrc0W6XRfIsrc+dObx
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:16 2026 by rpki-client