This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa
File:                     34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          tYk06GgteR5SugwhRvwv9vR0qglbWM05RBi/ox8+c8A=
Subject key identifier:   1C:7E:12:BE:CE:BA:26:3A:11:EF:38:3F:99:F0:9D:4D:B5:E2:BB:18
Certificate issuer:       /CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
Certificate serial:       67664057C73D1784D1D5C0F1473BE1623C2115BE
Authority key identifier: AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 06 Jan 2026 19:09:31 +0000
ROA not before:           Tue 06 Jan 2026 19:04:31 +0000
ROA not after:            Tue 05 Jan 2027 19:09:31 +0000
asID:                     263238
IP address blocks:        45.236.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:40:57:c7:3d:17:84:d1:d5:c0:f1:47:3b:e1:62:3c:21:15:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
        Validity
            Not Before: Jan  6 19:04:31 2026 GMT
            Not After : Jan  5 19:09:31 2027 GMT
        Subject: CN=1C7E12BECEBA263A11EF383F99F09D4DB5E2BB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:54:b4:73:06:8f:ce:e9:11:34:d2:bd:69:
                    1b:2e:91:c8:8b:fb:8f:d6:87:ff:19:85:81:26:45:
                    b0:45:13:f4:c6:30:03:aa:b0:0f:0c:10:d2:4e:fb:
                    c3:ca:92:ed:3f:98:3a:84:bf:b0:06:a4:24:f8:e3:
                    1d:8e:98:94:2a:16:05:0d:ac:97:1e:b4:9a:ac:a1:
                    d9:e9:0b:20:f5:99:d7:b3:46:e0:ce:5e:eb:60:e6:
                    ab:0c:81:9e:32:e2:82:d0:0f:27:a7:44:97:5b:7e:
                    c2:ee:e0:6b:37:81:95:1d:f0:4d:98:48:78:94:df:
                    bd:97:64:cf:76:54:80:4e:87:c4:52:c9:76:34:c8:
                    e6:df:94:a9:2b:f8:70:fa:a0:5e:65:75:54:c2:e3:
                    44:48:ba:99:d5:de:6e:fc:a5:4a:e9:b7:3d:75:42:
                    d4:45:ae:e8:e0:76:0a:10:40:a2:c5:ab:b2:13:0c:
                    ae:a9:0f:5f:8f:79:0a:2a:10:53:77:46:b3:1b:cc:
                    44:a7:48:da:dc:8e:ac:a5:39:0a:26:73:bf:2f:ae:
                    6a:7c:52:fd:0a:b0:d1:f0:b9:c1:38:87:2f:2b:35:
                    19:92:5e:42:65:eb:cd:47:af:2a:13:8b:b0:37:0f:
                    df:a6:7d:a2:87:a8:41:27:d5:7f:80:bb:60:fd:07:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:12:BE:CE:BA:26:3A:11:EF:38:3F:99:F0:9D:4D:B5:E2:BB:18
            X509v3 Authority Key Identifier:
                keyid:AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:3c:e5:d2:1e:5d:eb:07:67:0f:86:d1:26:7b:35:8f:13:
         18:91:45:ee:66:f1:4a:19:08:3d:81:74:93:a6:04:3e:b1:c5:
         06:33:c0:79:e5:1e:10:e5:4f:89:96:ea:fe:09:fc:34:2a:53:
         57:f6:a4:96:ce:5d:18:75:52:ec:6d:f0:74:55:c4:63:90:bd:
         a3:3b:60:6c:56:c4:71:c4:6c:a2:c3:37:d7:44:ca:73:37:b4:
         8d:e4:7c:7d:7c:d7:c4:26:7b:28:ab:4a:09:38:3e:90:0d:b2:
         60:50:bd:51:5c:2c:1e:15:1f:a5:a8:22:e3:e9:c0:c2:7f:2a:
         24:da:cc:ab:6d:ab:1b:78:04:0b:e7:58:70:36:42:54:cd:42:
         cd:9a:6c:49:09:93:2d:be:b9:a7:ee:2c:d7:97:0e:80:89:46:
         0d:46:b1:01:fb:54:d6:7d:2b:f1:32:49:17:63:93:cb:6e:6c:
         32:f6:e1:28:3e:29:ff:6b:a4:54:a0:83:d5:d2:c0:43:52:b3:
         ad:96:9b:95:1d:53:59:30:0a:69:fa:a0:0b:4a:71:09:6d:d5:
         70:fb:df:7a:c9:8f:40:3b:0c:06:87:1a:4f:96:90:27:1f:05:
         34:cf:74:48:34:14:33:4b:07:e2:21:7d:42:6b:7c:18:09:62:
         d9:bd:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:17:09 2026 by rpki-client