This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa
File:                     34352e3233322e3130362e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier:          HkVI8R28IqxEy5yV5PAVtqjmoRKcyzdahmZ3Q6n63Lk=
Subject key identifier:   27:10:B3:F7:F3:D6:3C:94:29:3D:C3:7A:92:6B:C2:22:4F:B8:FC:72
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       2EA563B8994F02703A6FD3AFDB6A0C6AA339835C
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa
Signing time:             Tue 06 Jan 2026 19:03:51 +0000
ROA not before:           Tue 06 Jan 2026 18:58:51 +0000
ROA not after:            Tue 05 Jan 2027 19:03:51 +0000
asID:                     27843
IP address blocks:        45.232.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 12:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:63:b8:99:4f:02:70:3a:6f:d3:af:db:6a:0c:6a:a3:39:83:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Jan  6 18:58:51 2026 GMT
            Not After : Jan  5 19:03:51 2027 GMT
        Subject: CN=2710B3F7F3D63C94293DC37A926BC2224FB8FC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:f5:a3:23:49:da:76:0b:13:e0:20:31:8f:
                    09:c2:25:06:8b:0c:86:fb:cb:15:bb:08:b7:a7:11:
                    51:87:80:32:61:d2:cd:8e:da:1c:0b:cd:b7:54:ba:
                    41:b2:97:03:28:d4:03:55:6e:f1:80:45:c8:6a:f0:
                    29:50:2d:f3:8e:76:7d:25:bb:5b:4e:d6:65:73:58:
                    68:4e:2d:95:0e:f4:90:f6:84:b1:14:57:69:c0:15:
                    df:fc:88:d2:31:ff:86:b0:45:5a:11:18:2c:50:9e:
                    99:9e:19:4f:13:5c:14:57:87:fa:ad:6c:dd:b6:c9:
                    d8:41:b7:17:4b:13:6c:9b:69:da:60:e3:4c:ea:74:
                    a8:0a:1f:17:8a:33:68:f3:ef:fc:32:78:0d:81:43:
                    4d:a6:97:6f:82:0f:17:06:88:72:d5:ea:5f:6e:ad:
                    cb:54:b3:27:c7:1c:b2:3f:a0:70:59:9b:c0:8c:1f:
                    0a:aa:33:05:57:1e:4d:43:ca:62:2f:04:ab:6d:5d:
                    76:e2:ea:be:ae:dc:10:05:86:1a:6c:6e:0e:6b:da:
                    01:54:8c:1c:d7:18:ef:68:58:39:37:eb:2a:7e:be:
                    68:e4:ee:d5:c5:19:69:36:20:3b:cc:a4:3f:19:7d:
                    9f:64:d9:eb:9a:08:c2:0d:58:9b:55:4e:5d:90:32:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:10:B3:F7:F3:D6:3C:94:29:3D:C3:7A:92:6B:C2:22:4F:B8:FC:72
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:99:28:c1:9f:87:db:c5:e9:6d:3f:2b:30:e2:8c:fb:ac:
         3f:da:bd:54:1d:e1:69:0b:6d:9c:57:40:2e:45:24:fe:81:7b:
         65:5f:66:0b:17:42:25:19:21:b9:51:a2:62:8e:54:00:00:6a:
         c6:13:3b:09:18:6b:3c:07:1b:41:7b:fc:71:b1:0f:d0:d1:61:
         89:40:a1:56:84:a0:e1:d6:af:c7:61:c6:e6:6e:3d:f5:a9:79:
         d7:3b:ca:49:6e:85:10:d9:75:ac:11:e7:dd:58:1b:bb:b0:67:
         d4:82:c3:29:1f:ae:e6:5f:6a:4a:ec:f4:84:91:b5:00:59:79:
         d8:c2:cc:1f:cf:8e:4e:a0:db:55:62:f7:aa:7e:70:01:d4:63:
         09:03:13:5b:34:81:49:70:10:2b:7c:65:82:0f:df:55:0f:96:
         66:86:ce:48:22:f9:84:5d:43:3c:32:ba:eb:72:9d:58:8f:93:
         2a:67:fa:f9:2c:0f:1e:46:85:97:89:89:2e:a6:7c:f5:d2:e0:
         c3:a7:3e:bf:13:6d:63:db:ae:77:59:5d:17:fd:3f:ba:88:2e:
         5d:fe:31:e0:d4:ec:07:57:cf:e8:82:3f:ac:c2:77:e5:24:7a:
         29:89:93:1d:d3:8a:b3:02:ef:48:7e:b6:8e:4c:1a:43:1e:71:
         df:ac:76:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:22:01 2026 by rpki-client