This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa
File:                     34352e3233302e36302e302f32322d3234203d3e203532353037.roa (raw, json)
Hash identifier:          JXlRghzfOdxdlftR7FJBLMT7k78tsSdxxa0S87I6fc4=
Subject key identifier:   6D:B7:0D:A6:23:C5:0E:04:1F:58:56:58:D5:99:67:E1:0C:8A:26:9C
Certificate issuer:       /CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
Certificate serial:       3F882FB7718B39CBC5FAA361689374778A8FEF90
Authority key identifier: 13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa
Signing time:             Tue 06 Jan 2026 19:07:21 +0000
ROA not before:           Tue 06 Jan 2026 19:02:21 +0000
ROA not after:            Tue 05 Jan 2027 19:07:21 +0000
asID:                     52507
IP address blocks:        45.230.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 15:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:88:2f:b7:71:8b:39:cb:c5:fa:a3:61:68:93:74:77:8a:8f:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
        Validity
            Not Before: Jan  6 19:02:21 2026 GMT
            Not After : Jan  5 19:07:21 2027 GMT
        Subject: CN=6DB70DA623C50E041F585658D59967E10C8A269C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:5f:ee:a0:03:58:d3:d0:a6:37:d7:57:93:
                    d2:72:b8:f6:c1:a4:c7:38:a5:97:41:ab:44:aa:b1:
                    1c:6c:4f:ae:f8:26:41:c4:a2:01:0b:01:b8:c6:27:
                    36:c6:0b:5d:cd:79:19:4e:f3:29:81:80:3c:79:f8:
                    27:a5:a1:b4:13:fc:69:c4:5f:cc:1f:4f:d5:3c:82:
                    fb:f1:77:b6:ee:95:ae:7e:3d:0c:8f:c4:60:3f:4a:
                    f5:aa:29:02:be:b4:17:c8:96:90:bc:ff:91:a8:a3:
                    14:22:97:20:25:75:db:3b:06:82:29:b7:3c:83:56:
                    25:d3:85:03:61:47:ab:83:dd:3b:5d:f8:6e:64:7b:
                    f7:4e:de:25:c2:3d:c6:fe:e1:1f:c4:3f:59:48:02:
                    3c:2a:37:f9:f8:76:7e:d1:8a:5a:a5:b9:bf:03:57:
                    1a:62:3f:ae:9c:32:76:8e:c7:0e:24:7b:fa:a5:b9:
                    01:46:e3:18:ef:86:0c:9e:83:79:4b:f2:ec:7f:a5:
                    e8:2c:4f:b2:f7:66:35:8e:a5:4e:06:51:81:ca:bb:
                    dd:d6:ba:06:9e:7c:47:ab:2b:d0:00:cf:d9:22:eb:
                    4d:cd:ab:45:6f:26:bd:05:47:8c:a9:92:c1:40:7c:
                    11:fc:47:6b:b7:de:8e:0e:a4:e7:34:a8:b7:3e:ba:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:0D:A6:23:C5:0E:04:1F:58:56:58:D5:99:67:E1:0C:8A:26:9C
            X509v3 Authority Key Identifier:
                keyid:13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:20:34:b6:48:09:6d:3c:48:80:c4:2f:29:17:34:0a:35:
         65:ef:1d:b8:ca:0d:aa:62:45:8d:9f:d2:1c:b2:19:d7:ad:b6:
         3a:b1:dd:62:48:54:28:fc:ec:e5:de:3e:f0:f5:e0:29:60:4e:
         c2:8d:a4:49:c4:4c:83:cb:de:fe:4e:7d:c5:72:9e:f9:4c:08:
         2d:7f:f1:c2:9b:26:86:5e:e2:71:81:d0:0a:d0:5d:7c:dc:64:
         ab:b1:c9:c9:4c:c1:c3:43:2e:21:76:03:51:da:7b:8e:f8:46:
         38:e2:02:76:33:fa:ea:f5:9b:99:85:39:f2:b5:2a:f7:44:18:
         cf:59:83:fe:f7:fa:76:65:fe:5f:a0:6d:50:1d:be:fe:08:cd:
         a0:85:fd:49:61:51:16:0c:3b:54:55:cc:fd:b7:af:14:d9:a9:
         13:e6:05:38:e0:46:3a:d2:c2:25:4d:0f:21:ab:4f:44:7f:54:
         45:d9:51:7f:b8:09:00:ab:7a:57:66:7d:d5:dd:76:88:0c:ce:
         5e:98:87:db:c3:89:26:a2:ef:61:3d:b3:53:ef:d1:0a:b2:68:
         64:00:9f:f0:2e:96:b6:17:a6:97:23:57:3e:16:09:52:84:fd:
         65:6e:48:db:0a:bd:68:2d:45:91:b2:63:71:a0:91:cc:ab:b6:
         29:de:c9:82
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUP4gvt3GLOcvF+qNhaJN0d4qP75AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNENjA3OTkzMkZDODBCMjdDN0E1QUYzRTIzNUM2MDU2
Njc1NEJENTAeFw0yNjAxMDYxOTAyMjFaFw0yNzAxMDUxOTA3MjFaMDMxMTAvBgNV
BAMTKDZEQjcwREE2MjNDNTBFMDQxRjU4NTY1OEQ1OTk2N0UxMEM4QTI2OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRV/uoANY09CmN9dXk9JyuPbB
pMc4pZdBq0SqsRxsT674JkHEogELAbjGJzbGC13NeRlO8ymBgDx5+CelobQT/GnE
X8wfT9U8gvvxd7bula5+PQyPxGA/SvWqKQK+tBfIlpC8/5GooxQilyAldds7BoIp
tzyDViXThQNhR6uD3Ttd+G5ke/dO3iXCPcb+4R/EP1lIAjwqN/n4dn7Rilqlub8D
VxpiP66cMnaOxw4ke/qluQFG4xjvhgyeg3lL8ux/pegsT7L3ZjWOpU4GUYHKu93W
ugaefEerK9AAz9ki603Nq0VvJr0FR4ypksFAfBH8R2u33o4OpOc0qLc+uoBHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUbbcNpiPFDgQfWFZY1Zln4QyKJpwwHwYDVR0j
BBgwFoAUE9YHmTL8gLJ8elrz4jXGBWZ1S9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NUNEQTlFMzcyMzU2ODFFQTQ1MEQwNTdDMDg4MjkwOTNE
OUVCMzAxNUQwMkMwNzk0RTVFMjQ2QkIzRDBBNjY0LzAvMTNENjA3OTkzMkZDODBC
MjdDN0E1QUYzRTIzNUM2MDU2Njc1NEJENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xM0Q2MDc5OTMyRkM4MEIyN0M3
QTVBRjNFMjM1QzYwNTY2NzU0QkQ1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzVDREE5RTM3MjM1NjgxRUE0NTBEMDU3QzA4ODI5MDkzRDlFQjMwMTVE
MDJDMDc5NEU1RTI0NkJCM0QwQTY2NC8wLzM0MzUyZTMyMzMzMDJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzNTMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt5jwwDQYJ
KoZIhvcNAQELBQADggEBAJjKIDS2SAltPEiAxC8pFzQKNWXvHbjKDapiRY2f0hyy
Gdettjqx3WJIVCj87OXePvD14ClgTsKNpEnETIPL3v5OfcVynvlMCC1/8cKbJoZe
4nGB0ArQXXzcZKuxyclMwcNDLiF2A1Hae474RjjiAnYz+ur1m5mFOfK1KvdEGM9Z
g/73+nZl/l+gbVAdvv4IzaCF/UlhURYMO1RVzP23rxTZqRPmBTjgRjrSwiVNDyGr
T0R/VEXZUX+4CQCreldmfdXddogMzl6Yh9vDiSai72E9s1Pv0QqyaGQAn/AulrYX
ppcjVz4WCVKE/WVuSNsKvWgtRZGyY3GgkcyrtineyYI=
-----END CERTIFICATE-----
Generated at Tue Jan 13 09:26:16 2026 by rpki-client