This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/34352e36352e3133392e302f32342d3234203d3e20323733303031.roa
File:                     34352e36352e3133392e302f32342d3234203d3e20323733303031.roa (raw, json)
Hash identifier:          AMc0arfOU3Duw8q1PejkypNYAzOUUdA4NClxSsICPwY=
Subject key identifier:   F2:ED:6F:AC:5F:B2:ED:0A:FA:6C:4A:25:5A:55:95:97:1E:6C:47:4B
Certificate issuer:       /CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
Certificate serial:       12260D48879112F7308075BC6FD14E29CFC440A5
Authority key identifier: 2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/34352e36352e3133392e302f32342d3234203d3e20323733303031.roa
Signing time:             Tue 06 Jan 2026 18:57:32 +0000
ROA not before:           Tue 06 Jan 2026 18:52:32 +0000
ROA not after:            Tue 05 Jan 2027 18:57:32 +0000
asID:                     273001
IP address blocks:        45.65.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:26:0d:48:87:91:12:f7:30:80:75:bc:6f:d1:4e:29:cf:c4:40:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F03E5143F966EB03984AA596151B47F0A7C38E2
        Validity
            Not Before: Jan  6 18:52:32 2026 GMT
            Not After : Jan  5 18:57:32 2027 GMT
        Subject: CN=F2ED6FAC5FB2ED0AFA6C4A255A5595971E6C474B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:63:76:e2:e7:ec:a4:77:60:aa:30:d3:cd:
                    89:2c:f0:b4:86:24:2f:52:26:2b:6b:1f:cd:1b:c4:
                    c8:4e:f1:34:36:71:16:1d:cc:a0:73:d8:fc:cd:6a:
                    ba:2d:84:02:a4:5a:b2:69:d8:e9:69:74:35:ac:a6:
                    4f:f3:03:fe:bb:17:09:07:68:e5:8a:17:bd:19:07:
                    d2:87:c6:87:5a:fe:9a:8a:71:19:d1:d2:e5:fe:fe:
                    14:ef:5e:c4:91:d1:7b:e9:d4:58:a1:69:bd:ac:80:
                    bb:82:0e:56:4f:9e:8e:fa:2e:40:aa:24:88:66:33:
                    34:93:98:5c:03:68:6d:c7:da:95:14:20:6a:93:e5:
                    eb:b7:22:e0:de:89:ae:85:99:02:54:48:84:53:69:
                    a6:c9:9a:f2:ef:08:06:e5:d4:d1:c6:3a:9f:a1:a1:
                    a9:fe:76:17:bf:f1:98:50:ba:9d:27:74:c2:ff:92:
                    bc:c9:96:83:c0:b7:d5:4f:88:45:20:00:b0:4f:54:
                    c1:d5:2d:1d:3a:26:b0:d6:db:e0:c3:06:26:ef:f8:
                    ba:1c:70:cd:ee:c6:be:fd:2d:ae:49:d9:bc:4e:06:
                    79:6d:ed:99:8e:0d:4f:41:3c:85:f7:12:8d:0d:47:
                    c3:f7:e3:40:c3:27:3b:16:79:2c:c7:3f:3a:4d:66:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:6F:AC:5F:B2:ED:0A:FA:6C:4A:25:5A:55:95:97:1E:6C:47:4B
            X509v3 Authority Key Identifier:
                keyid:2F:03:E5:14:3F:96:6E:B0:39:84:AA:59:61:51:B4:7F:0A:7C:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F03E5143F966EB03984AA596151B47F0A7C38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F383C52DD577D2D1AF1BAFB4267EED76B9B5540FFD452F7C66C0129A8204519/0/34352e36352e3133392e302f32342d3234203d3e20323733303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:f4:3c:36:9b:a5:4b:ce:cc:13:38:05:62:60:75:00:ed:
         92:d0:c9:40:d0:28:89:e4:de:f4:a7:60:85:ac:8e:a5:f9:dc:
         33:86:b9:85:bd:64:43:01:88:bf:10:38:02:63:88:e3:f2:f2:
         e4:68:78:bc:ba:58:cb:90:76:60:4e:dc:dc:df:e7:80:47:c2:
         56:49:ba:69:10:8b:f7:8a:4a:25:f8:1b:dd:b9:74:20:ed:5b:
         53:0e:f8:d7:da:44:97:57:7c:4a:80:33:d8:d3:22:0d:c9:cb:
         0e:87:97:93:a2:ad:13:8c:bb:6c:6d:b4:e3:02:0e:09:5e:b6:
         e2:6b:be:c3:5c:ea:27:36:e6:ad:28:09:9b:d9:97:24:e3:91:
         b0:b1:73:66:6c:d1:5f:80:3c:ae:89:86:36:ad:9e:db:d1:72:
         3b:f5:6d:2d:1c:e2:55:6d:88:63:cb:7d:85:0e:33:3a:c7:70:
         3f:c5:1b:b5:e8:dd:ba:f8:0c:da:d7:ce:6a:68:80:a9:4e:04:
         87:7f:7e:69:ba:26:8d:51:2d:5c:0a:69:f8:e6:95:f5:81:02:
         9f:44:3f:c4:9d:3f:db:3c:e0:06:9d:56:e3:8b:10:b0:98:59:
         33:3f:21:ff:aa:bf:be:70:b7:7e:83:79:00:13:3e:58:de:46:
         83:b2:80:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:25:06 2026 by rpki-client