This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/34352e3233322e3132302e302f32322d3234203d3e203237373335.roa
File:                     34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (raw, json)
Hash identifier:          ZdahpsYhKxImC1xoOj9copAjk7XNZ3lvcTlbe0B1BwA=
Subject key identifier:   6C:68:92:A8:84:C3:BF:89:96:1C:23:83:27:1A:E3:FD:D9:9E:00:CC
Certificate issuer:       /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
Certificate serial:       23C752AAE4C794AB2BEA98F1D0489533ABD22EE2
Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/34352e3233322e3132302e302f32322d3234203d3e203237373335.roa
Signing time:             Tue 06 Jan 2026 19:39:18 +0000
ROA not before:           Tue 06 Jan 2026 19:34:18 +0000
ROA not after:            Tue 05 Jan 2027 19:39:18 +0000
asID:                     27735
IP address blocks:        45.232.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 19:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c7:52:aa:e4:c7:94:ab:2b:ea:98:f1:d0:48:95:33:ab:d2:2e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF
        Validity
            Not Before: Jan  6 19:34:18 2026 GMT
            Not After : Jan  5 19:39:18 2027 GMT
        Subject: CN=6C6892A884C3BF89961C2383271AE3FDD99E00CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:d8:30:b5:59:61:c4:6c:ac:43:40:8f:ff:
                    3d:ce:a3:4c:8f:ca:b4:9d:ff:41:c5:5a:54:49:56:
                    c5:bc:16:3f:2e:d3:ae:9e:8e:15:2b:78:7f:63:40:
                    11:54:bd:66:85:e1:74:85:84:e1:5d:2b:8e:11:ca:
                    e6:08:d1:76:2a:2c:3e:fa:a9:c9:a6:93:24:ec:a3:
                    4d:6b:ac:97:b1:ad:88:28:e3:da:8a:b0:c0:99:2f:
                    c5:19:9a:8c:bc:00:86:44:47:ae:36:28:2d:59:d1:
                    a2:17:15:5f:2d:4b:16:ec:37:c1:ad:7e:1b:bd:35:
                    1e:ed:6b:9a:b1:53:35:4f:57:c9:a5:61:f4:a6:6d:
                    43:b9:b8:21:f4:c9:a4:8d:8a:48:c4:c5:b3:c5:dc:
                    d7:22:8a:47:1e:42:39:3a:2c:46:f7:cb:71:72:a5:
                    eb:0b:4a:5a:cd:56:70:f6:91:72:dc:2e:94:71:bd:
                    af:b5:f6:d6:50:b4:0a:d8:0b:09:05:dd:cf:fa:91:
                    95:2f:62:3a:0d:a6:6d:c9:fb:5f:b5:47:20:8e:c2:
                    f1:b1:fe:8a:a5:d1:6e:af:3c:20:0e:42:1c:a6:a9:
                    56:ec:16:d2:cd:cc:37:3c:2f:e1:fb:d5:f7:7f:0f:
                    4b:11:a0:f9:28:ee:eb:e4:45:fe:00:f3:95:42:b5:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:92:A8:84:C3:BF:89:96:1C:23:83:27:1A:E3:FD:D9:9E:00:CC
            X509v3 Authority Key Identifier:
                keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/34352e3233322e3132302e302f32322d3234203d3e203237373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:1e:9b:99:16:65:0d:ec:0f:48:08:f8:fa:78:14:50:98:
         65:e0:18:76:3c:a9:fc:14:d8:79:6a:b4:83:17:0d:93:15:3e:
         e8:54:f9:24:c9:25:b8:91:ae:8d:94:4f:be:fd:f4:21:d4:43:
         6f:f7:85:0e:b8:96:9b:6a:f0:fc:ae:1f:90:ab:12:7c:f1:ad:
         42:8f:b0:9e:08:82:31:2f:ff:89:0f:68:37:75:c7:e8:a3:9b:
         84:79:64:b7:1d:b3:35:e8:41:17:93:65:d1:0d:d9:89:78:ed:
         59:ec:ee:91:d0:f2:00:4c:de:dc:8e:92:7f:53:c9:4a:7a:06:
         1e:5c:5f:21:df:a3:ab:8a:21:18:8e:00:2b:5f:11:c9:32:7f:
         22:9d:b9:4b:3c:66:95:c3:57:6b:55:1a:cf:23:e2:2c:4e:fa:
         df:95:a5:e8:0e:a2:d6:b7:5c:02:40:d4:97:91:24:46:47:35:
         03:0c:5d:5f:f9:7a:df:bb:4d:34:03:fb:83:c6:ae:50:7a:ed:
         c9:c4:81:54:8e:a6:ab:dc:4b:70:74:a4:30:e7:33:97:34:58:
         c5:b8:74:83:48:57:5e:3c:9b:19:03:c3:1f:f8:cd:b9:05:48:
         1c:20:80:10:61:92:84:b1:2b:49:93:f4:b3:d2:52:1f:4f:b8:
         3c:32:e4:10
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUI8dSquTHlKsr6pjx0EiVM6vSLuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURDM0M5QjIwQkU2NzE0MTBBNDZFRTdCMTQ5MUQxRURG
Q0Y4RDNGRjAeFw0yNjAxMDYxOTM0MThaFw0yNzAxMDUxOTM5MThaMDMxMTAvBgNV
BAMTKDZDNjg5MkE4ODRDM0JGODk5NjFDMjM4MzI3MUFFM0ZERDk5RTAwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAv9gwtVlhxGysQ0CP/z3Oo0yP
yrSd/0HFWlRJVsW8Fj8u066ejhUreH9jQBFUvWaF4XSFhOFdK44RyuYI0XYqLD76
qcmmkyTso01rrJexrYgo49qKsMCZL8UZmoy8AIZER642KC1Z0aIXFV8tSxbsN8Gt
fhu9NR7ta5qxUzVPV8mlYfSmbUO5uCH0yaSNikjExbPF3NciikceQjk6LEb3y3Fy
pesLSlrNVnD2kXLcLpRxva+19tZQtArYCwkF3c/6kZUvYjoNpm3J+1+1RyCOwvGx
/oql0W6vPCAOQhymqVbsFtLNzDc8L+H71fd/D0sRoPko7uvkRf4A85VCtWKnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbGiSqITDv4mWHCODJxrj/dmeAMwwHwYDVR0j
BBgwFoAUncPJsgvmcUEKRu57FJHR7fz40/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRTI1NjY2RkIzQkQ2NzY4QTJEODg1MDhCOUJFMTdENjQz
NTAzRjBGQkRCRjc2NTMwNjY1QjIyMkIxNEMxNUY1LzAvOURDM0M5QjIwQkU2NzE0
MTBBNDZFRTdCMTQ5MUQxRURGQ0Y4RDNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REMzQzlCMjBCRTY3MTQxMEE0
NkVFN0IxNDkxRDFFREZDRjhEM0ZGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0UyNTY2NkZCM0JENjc2OEEyRDg4NTA4QjlCRTE3RDY0MzUwM0YwRkJE
QkY3NjUzMDY2NUIyMjJCMTRDMTVGNS8wLzM0MzUyZTMyMzMzMjJlMzEzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM3MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3oeDAN
BgkqhkiG9w0BAQsFAAOCAQEAn9gem5kWZQ3sD0gI+Pp4FFCYZeAYdjyp/BTYeWq0
gxcNkxU+6FT5JMkluJGujZRPvv30IdRDb/eFDriWm2rw/K4fkKsSfPGtQo+wngiC
MS//iQ9oN3XH6KObhHlktx2zNehBF5Nl0Q3ZiXjtWezukdDyAEze3I6Sf1PJSnoG
HlxfId+jq4ohGI4AK18RyTJ/Ip25SzxmlcNXa1UazyPiLE7635Wl6A6i1rdcAkDU
l5EkRkc1AwxdX/l637tNNAP7g8auUHrtycSBVI6mq9xLcHSkMOczlzRYxbh0g0hX
XjybGQPDH/jNuQVIHCCAEGGShLErSZP0s9JSH0+4PDLkEA==
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:06:34 2026 by rpki-client