This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3232362e37302e302f32332d3234203d3e203237383433.roa
File:                     34352e3232362e37302e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier:          FJQbFlYYu2ks0K0KGHy0LAQb1YnWzaeuTkAy8mnh1/4=
Subject key identifier:   3D:FE:2E:41:1D:33:0E:1C:F9:F8:87:01:54:14:09:EA:A4:15:2A:6E
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       6909B87A6812950383322746FC612A6F7E626E1F
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3232362e37302e302f32332d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:47 +0000
ROA not before:           Tue 06 Jan 2026 18:58:47 +0000
ROA not after:            Tue 05 Jan 2027 19:03:47 +0000
asID:                     27843
IP address blocks:        45.226.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:09:b8:7a:68:12:95:03:83:32:27:46:fc:61:2a:6f:7e:62:6e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:47 2026 GMT
            Not After : Jan  5 19:03:47 2027 GMT
        Subject: CN=3DFE2E411D330E1CF9F88701541409EAA4152A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:e2:41:d5:de:0c:ff:f6:5b:f0:24:28:42:
                    06:50:97:a8:bf:79:b3:d9:24:22:6a:4e:05:3e:56:
                    53:a8:28:fc:79:d7:7d:9a:2a:62:cf:90:26:88:c9:
                    d2:bd:9e:a4:cf:be:6f:93:ea:64:23:42:5e:7c:f4:
                    22:43:44:af:34:56:f2:28:fc:cf:dd:a1:71:1c:3d:
                    a8:0c:21:57:b1:e1:03:32:e9:d5:22:06:c4:02:d7:
                    bd:b6:7a:44:97:b9:20:7e:25:cb:20:b3:89:26:72:
                    e2:97:dc:15:4a:82:97:99:28:f2:a6:73:59:7a:ed:
                    fa:60:09:7d:23:5a:b9:61:40:3b:6a:38:01:3a:20:
                    68:ab:c0:29:8b:6f:b7:0c:f3:1d:04:c0:8a:18:7b:
                    3e:3f:d2:cf:ce:e7:01:8e:9c:ee:d2:a5:8b:6e:dd:
                    c6:43:93:e8:db:e6:a3:01:47:2f:6d:88:0c:c7:e8:
                    4e:b6:73:58:e2:98:9d:2a:4c:88:51:72:ca:44:b8:
                    2d:06:30:50:5e:56:b1:47:8a:94:33:2e:89:22:71:
                    df:03:91:64:8f:e1:ec:b9:7c:4c:eb:5f:15:26:d9:
                    d7:4b:3d:9a:a5:29:1a:c9:77:60:c5:91:1f:f9:35:
                    0b:30:37:91:e7:f1:dd:fe:6e:bc:8f:b9:1f:91:38:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FE:2E:41:1D:33:0E:1C:F9:F8:87:01:54:14:09:EA:A4:15:2A:6E
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3232362e37302e302f32332d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:e1:dc:ca:01:0b:2e:b8:34:8a:1f:7e:df:7b:22:a7:a1:26:
         cc:78:35:15:39:ff:87:14:a2:ed:13:a5:29:69:ed:ab:fd:d6:
         88:b3:db:85:11:b6:56:c6:c7:25:74:1f:e2:bb:04:67:27:fc:
         03:3b:13:e8:e8:22:3c:9b:b7:68:f9:2a:e2:44:4a:db:05:0b:
         fc:42:ca:3a:e5:23:1a:56:13:c1:aa:b7:1c:b0:50:ed:6e:f5:
         5b:55:5f:0b:87:f6:bd:a0:1b:9d:4d:a3:ab:7e:74:4f:bb:79:
         ae:11:7c:01:55:4e:4d:7d:cb:9e:b3:58:f8:0a:d9:b8:be:f7:
         ec:a6:c6:0c:b6:50:fb:a7:c4:e4:c9:e8:63:4d:00:0c:f2:bb:
         34:fc:9a:ba:b8:b4:27:d1:d8:2e:f4:65:e4:00:04:30:21:d1:
         1b:bd:d0:4c:4c:83:7d:a4:4e:03:0f:bc:eb:84:23:95:f0:a1:
         92:d6:fb:e0:7e:78:79:b6:70:c6:09:3f:43:d7:66:07:36:70:
         3c:89:4b:35:b0:ce:25:4c:e1:71:2d:cb:0a:b6:50:42:83:72:
         97:29:fd:31:e4:31:ed:ac:5c:b7:24:1d:68:52:e9:5c:52:b2:
         35:a2:c9:f8:9e:5a:5e:2c:76:24:75:fb:12:50:ab:a6:c1:3d:
         22:73:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:02:09 2026 by rpki-client