This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/34352e3233382e35322e302f32322d3234203d3e20323636383239.roa
File:                     34352e3233382e35322e302f32322d3234203d3e20323636383239.roa (raw, json)
Hash identifier:          xfTdgAq5bfqKcaVu41wXfv7/sMMcN5XSou/M0sn/2ac=
Subject key identifier:   59:27:FB:F3:D4:19:A4:08:19:B6:5C:BB:CA:AE:86:08:43:2C:F1:7D
Certificate issuer:       /CN=7240E3F32D08F233B6A11CDF0B1A245738B622B1
Certificate serial:       5ABD187A22C02A5D712932862A2299709266D1BE
Authority key identifier: 72:40:E3:F3:2D:08:F2:33:B6:A1:1C:DF:0B:1A:24:57:38:B6:22:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/34352e3233382e35322e302f32322d3234203d3e20323636383239.roa
Signing time:             Tue 06 Jan 2026 19:29:05 +0000
ROA not before:           Tue 06 Jan 2026 19:24:05 +0000
ROA not after:            Tue 05 Jan 2027 19:29:05 +0000
asID:                     266829
IP address blocks:        45.238.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 04:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bd:18:7a:22:c0:2a:5d:71:29:32:86:2a:22:99:70:92:66:d1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7240E3F32D08F233B6A11CDF0B1A245738B622B1
        Validity
            Not Before: Jan  6 19:24:05 2026 GMT
            Not After : Jan  5 19:29:05 2027 GMT
        Subject: CN=5927FBF3D419A40819B65CBBCAAE8608432CF17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:f6:92:72:60:3f:d9:16:7e:de:0f:4f:f5:
                    7e:f2:dc:94:54:76:b9:1f:9c:09:d4:76:19:a0:ec:
                    54:10:60:5e:ff:72:6c:cb:d7:ca:27:7e:f7:a2:22:
                    b2:cb:e1:31:bb:41:e2:af:95:33:70:bd:78:9d:f6:
                    3a:82:c4:3b:95:1e:91:1b:01:e2:1f:01:1f:5c:d4:
                    fc:38:22:80:cc:15:1d:06:c9:d0:f7:39:b0:ea:5d:
                    1e:91:75:79:5f:46:4c:ad:6a:1a:74:43:63:97:cb:
                    cb:64:6e:34:3b:1c:e8:8a:16:6c:bb:15:f2:aa:a9:
                    bd:ed:37:8c:6d:84:1f:80:7e:19:26:76:47:97:b9:
                    99:a8:a3:b8:33:6e:b1:b9:eb:33:25:90:59:41:17:
                    7b:bc:cf:7a:a1:7a:36:de:c4:b1:8a:cc:08:fe:81:
                    f1:0b:d7:4b:4b:c4:fb:42:f9:75:b2:40:1e:3d:01:
                    eb:47:df:4e:b8:04:15:1a:d1:81:8f:6c:af:76:f6:
                    69:40:96:70:97:59:5a:9a:8f:d2:0d:70:a4:9e:45:
                    50:cf:21:cc:43:e7:76:5a:a5:29:fc:c4:03:40:3b:
                    4b:ac:99:1b:a5:47:47:af:62:dd:6e:75:e9:3c:a2:
                    4e:66:ae:f6:c7:05:0d:94:dd:43:c6:02:8d:f0:5b:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:27:FB:F3:D4:19:A4:08:19:B6:5C:BB:CA:AE:86:08:43:2C:F1:7D
            X509v3 Authority Key Identifier:
                keyid:72:40:E3:F3:2D:08:F2:33:B6:A1:1C:DF:0B:1A:24:57:38:B6:22:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/34352e3233382e35322e302f32322d3234203d3e20323636383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:63:b6:0b:a6:ac:b7:45:9a:b8:96:a9:91:a5:04:ab:7d:1d:
         2f:01:0e:44:69:dd:5d:fe:8c:e8:37:92:2e:82:91:d9:47:46:
         9a:4e:81:03:bb:55:0b:9e:b3:0d:93:23:24:b2:2c:7f:c7:4e:
         72:6b:37:e8:e5:20:1c:99:8d:c7:c4:3a:63:68:5f:2b:09:e9:
         60:45:48:57:32:db:fe:f1:41:4b:5c:67:5c:99:37:fb:2e:de:
         75:c6:28:31:4e:13:6a:76:ad:dc:7e:a2:1e:be:3d:38:57:6b:
         0f:74:94:19:f7:d7:75:56:ae:bf:b0:5e:91:59:ab:82:a8:5f:
         e3:1b:7a:33:96:05:40:c8:2d:4e:ba:fd:5a:60:1c:40:de:5c:
         a0:ea:cc:51:4a:94:6b:30:20:f9:5f:45:4a:8d:9e:2e:49:1b:
         f4:b2:f0:67:95:17:b2:b9:27:d9:29:c1:5b:60:33:87:cb:60:
         15:3d:51:ee:88:6b:a9:c2:9f:49:c8:58:9f:65:2f:be:23:97:
         1b:e6:25:10:85:1a:57:dc:2a:64:40:be:52:56:2a:e5:b2:cc:
         c9:c7:75:bc:60:ac:54:f2:ea:e8:1d:9e:ea:84:a9:fe:4c:ba:
         2b:c2:3b:1f:53:e4:92:8b:d5:bb:ba:62:a0:3a:16:aa:ed:54:
         92:84:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 05:07:58 2026 by rpki-client