This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/34352e3233362e3132302e302f32342d3234203d3e20323637373031.roa
File:                     34352e3233362e3132302e302f32342d3234203d3e20323637373031.roa (raw, json)
Hash identifier:          3h8ZUrd2wZU+WZFDRWnTuvvQnXOvHtfrVvIFY/edplw=
Subject key identifier:   8F:97:57:A2:70:BF:47:67:58:31:23:52:4E:6C:B6:E5:70:9F:4D:33
Certificate issuer:       /CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B
Certificate serial:       3431DDA3EC295DF63ED095B7A2F767375CB4E17A
Authority key identifier: 62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/34352e3233362e3132302e302f32342d3234203d3e20323637373031.roa
Signing time:             Tue 06 Jan 2026 19:19:01 +0000
ROA not before:           Tue 06 Jan 2026 19:14:01 +0000
ROA not after:            Tue 05 Jan 2027 19:19:01 +0000
asID:                     267701
IP address blocks:        45.236.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 06:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:31:dd:a3:ec:29:5d:f6:3e:d0:95:b7:a2:f7:67:37:5c:b4:e1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B
        Validity
            Not Before: Jan  6 19:14:01 2026 GMT
            Not After : Jan  5 19:19:01 2027 GMT
        Subject: CN=8F9757A270BF4767583123524E6CB6E5709F4D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:c3:8a:b1:83:1f:75:73:f5:74:c7:c0:c9:
                    92:f2:f2:e9:64:4e:d4:2a:c1:84:f4:9d:e7:75:39:
                    f8:00:cd:8d:c1:a4:f5:9f:43:ed:0a:b1:82:2a:1f:
                    8c:03:23:b1:19:8b:e5:0c:b2:de:b1:80:12:c1:28:
                    a9:07:f9:7a:0f:8f:cd:f8:08:e0:45:d8:47:e7:3c:
                    c8:54:5a:76:b2:03:b1:bc:07:55:b9:17:b9:0c:61:
                    c4:dc:91:3a:52:fc:a5:a4:c2:56:e9:43:ce:96:82:
                    a1:7a:4a:24:a4:c0:9a:44:6f:51:74:0a:45:24:bd:
                    a9:e0:86:3d:9f:d3:62:bb:d7:fe:39:cf:23:a1:ef:
                    f3:ea:bd:58:bb:93:f2:e5:a6:6c:2c:2c:7f:ab:14:
                    29:3e:6d:f7:d8:29:74:7f:da:af:c3:63:91:00:ef:
                    39:e1:3f:33:48:96:f4:77:e0:23:5e:7c:d2:72:0b:
                    03:71:c6:cf:9a:ab:f4:29:e0:3d:bc:f3:04:5f:b6:
                    6e:9c:d8:fa:87:be:b1:6e:12:0b:af:de:5a:9b:f1:
                    44:3f:59:94:5b:06:b0:06:86:84:3c:7e:7f:8e:44:
                    be:89:00:54:e9:76:f0:90:0d:03:b5:4a:78:a5:e5:
                    35:6f:e8:cf:08:9e:fb:79:15:88:89:d3:56:4d:41:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:97:57:A2:70:BF:47:67:58:31:23:52:4E:6C:B6:E5:70:9F:4D:33
            X509v3 Authority Key Identifier:
                keyid:62:4B:0D:31:DA:0C:26:7F:D2:4F:E5:E0:55:AA:62:97:A7:C4:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/624B0D31DA0C267FD24FE5E055AA6297A7C4DF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1B4353477F39292665AA5EDA653729D45E1477FB2E6301976F4D06C72857D68/0/34352e3233362e3132302e302f32342d3234203d3e20323637373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:1d:e9:57:8c:68:ab:46:1c:98:d3:7f:8a:99:5f:58:0c:
         e9:c6:99:ed:ce:71:84:9f:65:13:5c:53:d7:54:ad:04:ec:fb:
         05:98:39:c1:8d:cf:da:1b:2e:8c:e3:23:ca:e6:98:a1:00:9c:
         30:ce:6b:2b:76:a4:c4:2d:41:61:ee:4e:f8:53:a1:40:b6:fc:
         39:03:fa:82:b3:67:f5:72:13:7d:59:85:cf:23:d7:40:f4:1f:
         90:ae:65:f4:94:1a:dd:9e:ba:fc:00:01:36:57:48:7f:4a:f1:
         c9:e0:2e:5b:92:92:f7:2b:c2:23:77:b8:61:22:8c:0a:09:ac:
         e4:24:bb:03:ba:af:5a:25:ee:68:db:87:3f:00:fd:85:b6:d3:
         6b:75:d4:95:09:62:99:25:2c:f3:85:50:de:62:bc:2c:61:00:
         ea:97:00:0c:97:fc:9e:0d:7f:1a:9b:e6:73:61:87:5b:2b:31:
         fe:68:c4:07:ec:bb:7d:c9:54:7a:0d:8c:cf:11:93:da:ed:20:
         c0:b7:f4:dc:3f:34:1b:44:e5:84:e7:29:a5:54:8b:52:a7:fe:
         75:bf:89:62:45:c6:c5:e1:47:56:0a:f7:07:d4:63:3a:07:dc:
         5e:5a:07:d1:18:8d:c5:72:f9:64:f4:e4:d7:18:93:cb:91:a8:
         4e:34:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:35:09 2026 by rpki-client