This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
File:                     34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa (raw, json)
Hash identifier:          O38fpUfJ1Zm4IakfNxUXZwj4f3j3dEC5LQ7sPDGhFxw=
Subject key identifier:   BF:3A:92:F2:3F:FB:91:4B:D8:38:25:8D:AB:5E:4A:32:33:8D:D7:D3
Certificate issuer:       /CN=9AB130A96BF3302DC0486818E0523507034D3DA9
Certificate serial:       61469D3D7354A0A1BD4064F5294FA225751DD3F3
Authority key identifier: 9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
Signing time:             Tue 06 Jan 2026 19:15:58 +0000
ROA not before:           Tue 06 Jan 2026 19:10:58 +0000
ROA not after:            Tue 05 Jan 2027 19:15:58 +0000
asID:                     265843
IP address blocks:        45.224.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Jan 2026 00:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:9d:3d:73:54:a0:a1:bd:40:64:f5:29:4f:a2:25:75:1d:d3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB130A96BF3302DC0486818E0523507034D3DA9
        Validity
            Not Before: Jan  6 19:10:58 2026 GMT
            Not After : Jan  5 19:15:58 2027 GMT
        Subject: CN=BF3A92F23FFB914BD838258DAB5E4A32338DD7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:7f:54:fc:b1:9f:96:a3:bb:4a:89:8a:a7:
                    f2:0e:05:11:f3:e5:bc:59:cb:ba:3b:6a:d1:83:d7:
                    99:ce:3e:98:b8:01:2b:dc:0c:ee:8e:ba:03:8f:1b:
                    dc:9e:61:49:5f:dc:7b:0f:26:19:1f:8f:84:5a:fa:
                    e9:48:04:26:bc:e5:1c:86:fb:c0:da:44:38:0a:3f:
                    8a:a4:95:df:e7:94:be:f7:57:99:00:65:7d:da:04:
                    6a:d7:2b:25:6d:8d:07:45:33:75:26:f8:e6:88:d4:
                    e3:3d:ff:ed:6a:3c:99:90:cc:bb:da:98:03:30:34:
                    ac:cb:c0:9f:95:5e:12:87:1e:09:ff:28:8c:48:9c:
                    ab:c0:69:05:99:80:99:13:57:bc:ce:e1:22:57:6a:
                    4d:df:e6:ec:c1:a7:44:81:17:52:1c:01:39:45:6c:
                    58:7e:0f:e1:ee:c3:f1:36:6d:ce:4a:ed:aa:5a:fb:
                    d9:8a:8d:f7:98:9c:13:df:55:eb:e2:da:2a:7a:e7:
                    87:12:a2:43:87:15:7e:b7:c2:c5:a9:6d:4a:54:2d:
                    5a:ff:4e:38:04:77:20:01:55:b5:ca:87:08:f7:fd:
                    12:b4:fb:db:82:61:fd:8b:49:c5:74:8d:8a:de:1b:
                    f7:24:11:fa:51:b5:d5:dc:f6:f0:12:bc:93:75:6e:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3A:92:F2:3F:FB:91:4B:D8:38:25:8D:AB:5E:4A:32:33:8D:D7:D3
            X509v3 Authority Key Identifier:
                keyid:9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:a7:e4:31:30:69:8b:ad:25:99:16:4f:b9:8f:9e:b1:96:
         be:0b:14:f2:d0:09:84:53:af:f3:da:60:20:c6:3f:f6:01:18:
         ed:b3:08:6c:f9:8e:89:86:7a:a7:88:84:94:3d:4d:03:ff:3c:
         0c:3c:85:4e:c2:39:8a:4a:58:1e:44:44:a7:2a:1a:67:61:2f:
         17:32:7a:65:9b:1b:d9:ad:88:b0:b1:fe:a5:08:3d:94:68:46:
         87:9b:22:08:5b:17:12:f4:fd:70:9a:22:f5:ac:a3:7a:c3:02:
         16:a5:5f:5f:9d:e3:b9:39:c7:47:a1:42:16:30:c3:ed:02:c5:
         4e:8a:9c:6e:fe:5c:5c:24:e7:ab:36:95:a0:d3:9a:f8:8b:d5:
         1f:a0:87:86:58:73:d1:f6:89:9f:16:db:2e:97:23:bd:ac:99:
         1e:b2:db:da:dd:f1:a8:fb:46:a6:02:0b:0f:a2:c6:23:29:1f:
         06:5c:61:9e:aa:91:d6:c6:ea:1c:a7:ae:33:ab:66:45:f1:5d:
         8c:86:8b:ba:ef:8a:40:ab:47:f4:89:cd:cf:35:d8:f7:d6:71:
         e7:cd:e9:09:b7:91:90:4d:28:3c:2e:aa:e1:51:c4:f3:cc:52:
         5e:93:58:a8:de:94:95:71:ff:a8:de:57:c4:2d:3f:8d:e3:c2:
         58:bd:5a:9c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYUadPXNUoKG9QGT1KU+iJXUd0/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFCMTMwQTk2QkYzMzAyREMwNDg2ODE4RTA1MjM1MDcw
MzREM0RBOTAeFw0yNjAxMDYxOTEwNThaFw0yNzAxMDUxOTE1NThaMDMxMTAvBgNV
BAMTKEJGM0E5MkYyM0ZGQjkxNEJEODM4MjU4REFCNUU0QTMyMzM4REQ3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bH9U/LGflqO7SomKp/IOBRHz
5bxZy7o7atGD15nOPpi4ASvcDO6OugOPG9yeYUlf3HsPJhkfj4Ra+ulIBCa85RyG
+8DaRDgKP4qkld/nlL73V5kAZX3aBGrXKyVtjQdFM3Um+OaI1OM9/+1qPJmQzLva
mAMwNKzLwJ+VXhKHHgn/KIxInKvAaQWZgJkTV7zO4SJXak3f5uzBp0SBF1IcATlF
bFh+D+Huw/E2bc5K7apa+9mKjfeYnBPfVevi2ip654cSokOHFX63wsWpbUpULVr/
TjgEdyABVbXKhwj3/RK0+9uCYf2LScV0jYreG/ckEfpRtdXc9vASvJN1boRPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvzqS8j/7kUvYOCWNq15KMjON19MwHwYDVR0j
BBgwFoAUmrEwqWvzMC3ASGgY4FI1BwNNPakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82N0M4MDQzMzJEMkM4OENERDU4Mjc0QjdBQTVGMERGRjVC
MEFEMjE1NkE0QzM5OUI1NzJFRjY5NDI1Nzk0NDhFLzAvOUFCMTMwQTk2QkYzMzAy
REMwNDg2ODE4RTA1MjM1MDcwMzREM0RBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QUIxMzBBOTZCRjMzMDJEQzA0
ODY4MThFMDUyMzUwNzAzNEQzREE5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjdDODA0MzMyRDJDODhDREQ1ODI3NEI3QUE1RjBERkY1QjBBRDIxNTZB
NEMzOTlCNTcyRUY2OTQyNTc5NDQ4RS8wLzM0MzUyZTMyMzIzNDJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeCP
MA0GCSqGSIb3DQEBCwUAA4IBAQAa1qfkMTBpi60lmRZPuY+esZa+CxTy0AmEU6/z
2mAgxj/2ARjtswhs+Y6JhnqniISUPU0D/zwMPIVOwjmKSlgeRESnKhpnYS8XMnpl
mxvZrYiwsf6lCD2UaEaHmyIIWxcS9P1wmiL1rKN6wwIWpV9fneO5OcdHoUIWMMPt
AsVOipxu/lxcJOerNpWg05r4i9UfoIeGWHPR9omfFtsulyO9rJkestva3fGo+0am
AgsPosYjKR8GXGGeqpHWxuocp64zq2ZF8V2Mhou674pAq0f0ic3PNdj31nHnzekJ
t5GQTSg8LqrhUcTzzFJek1io3pSVcf+o3lfELT+N48JYvVqc
-----END CERTIFICATE-----
Generated at Tue Jan 13 13:30:23 2026 by rpki-client