This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36352e302f32342d3234203d3e20323636373535.roa
File:                     34352e3233332e36352e302f32342d3234203d3e20323636373535.roa (raw, json)
Hash identifier:          hCq4CLrgEbGw8JXNZZ36RVivZCUY6MW0/Im018bhLrQ=
Subject key identifier:   91:66:83:68:8E:7A:68:B2:E1:FD:8A:7C:D7:81:B7:A9:9E:47:BE:F2
Certificate issuer:       /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial:       487160ADFFC7BA6561DC9169C3A46109D2ADBBC2
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36352e302f32342d3234203d3e20323636373535.roa
Signing time:             Tue 06 Jan 2026 19:44:54 +0000
ROA not before:           Tue 06 Jan 2026 19:39:54 +0000
ROA not after:            Tue 05 Jan 2027 19:44:54 +0000
asID:                     266755
IP address blocks:        45.233.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:71:60:ad:ff:c7:ba:65:61:dc:91:69:c3:a4:61:09:d2:ad:bb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
        Validity
            Not Before: Jan  6 19:39:54 2026 GMT
            Not After : Jan  5 19:44:54 2027 GMT
        Subject: CN=916683688E7A68B2E1FD8A7CD781B7A99E47BEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:84:e0:b4:20:f7:62:25:50:76:06:f6:ed:
                    28:e9:ca:b9:94:13:12:86:a4:7f:37:0e:49:d8:75:
                    49:45:02:c3:45:2b:72:22:cf:e4:08:68:29:4d:d8:
                    d8:18:df:37:fa:51:23:cb:4d:70:3c:19:92:db:0f:
                    f0:f2:77:81:79:e8:f8:ae:bc:77:c5:49:a4:54:51:
                    12:e6:e3:d2:27:09:89:95:f3:f4:8f:cc:49:97:9e:
                    63:6a:2c:2f:07:2f:1f:57:c3:47:7e:cb:84:fb:e2:
                    e4:5c:ed:8a:b3:08:bb:d1:b4:3b:e5:c9:d5:a7:6b:
                    b2:83:f4:5f:f5:16:f5:91:6b:25:76:98:4f:b6:d9:
                    f1:2e:5b:99:b1:e3:f0:7a:37:2b:a5:5d:18:31:a9:
                    a4:96:a4:b8:07:e5:31:ed:4c:57:ce:c0:18:e9:4e:
                    65:c1:1d:a8:54:82:e5:8e:f0:45:2f:10:9e:fe:4f:
                    2b:e5:94:8d:e4:62:d7:d9:bb:38:28:c7:73:6f:ef:
                    16:35:3a:94:65:89:ce:49:e1:47:22:6e:e5:7a:22:
                    ea:0e:23:95:95:1d:07:e6:8d:7e:96:bf:7c:9e:98:
                    3e:c4:ca:3d:c0:59:76:d0:e1:00:89:29:3f:1f:c4:
                    7f:10:5a:fc:6a:32:ed:9e:81:58:c6:4d:90:ca:91:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:83:68:8E:7A:68:B2:E1:FD:8A:7C:D7:81:B7:A9:9E:47:BE:F2
            X509v3 Authority Key Identifier:
                keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36352e302f32342d3234203d3e20323636373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:66:9e:7a:7a:23:10:92:96:4a:7b:25:c3:a5:1f:4b:08:
         ad:77:28:93:8f:a2:91:2a:ba:ad:af:70:47:1f:92:03:12:6c:
         e7:6f:48:21:ee:30:8f:0b:e6:4f:35:dc:f0:c9:fc:47:86:5c:
         6a:06:4f:e9:f1:5f:ff:6d:93:c6:b8:4a:55:cf:83:97:f9:12:
         07:2c:a8:68:be:87:c5:87:4d:0d:6a:dd:d7:41:37:be:d8:e8:
         8f:30:2c:aa:69:a8:19:57:29:b2:70:c5:dc:0f:fe:a9:f7:96:
         14:b7:10:89:02:47:a4:06:18:5e:5b:dd:a9:46:6e:71:43:bf:
         6e:94:4c:1b:0d:27:97:4d:73:c6:79:3c:62:14:db:28:07:11:
         da:27:55:43:ad:ab:43:70:df:c8:85:5f:de:e0:ef:73:89:e9:
         f4:65:b3:d6:b8:ff:4b:8c:fd:5b:95:e2:7a:36:16:ea:05:95:
         a8:1e:91:10:49:45:08:ef:e1:a6:de:40:13:22:20:11:d0:25:
         cf:ec:cc:36:3b:df:73:31:15:7c:3f:d6:1c:eb:a8:da:7d:2b:
         e6:97:c1:62:f2:e6:21:ac:a7:8a:1f:5c:9d:9f:51:71:0c:4d:
         c6:e2:bd:6c:e0:26:d0:3c:6d:7f:9a:8c:97:37:65:d4:c5:14:
         af:4f:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:59:37 2026 by rpki-client