This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/34352e3233302e3234382e302f32322d3234203d3e20323637393034.roa
File:                     34352e3233302e3234382e302f32322d3234203d3e20323637393034.roa (raw, json)
Hash identifier:          l0zAe6LpkpdiVCLzwxBbeptBttokB+tNZzianYyExns=
Subject key identifier:   97:52:4C:E2:71:7E:4B:30:10:8B:B8:EE:E3:10:E6:91:60:6D:B7:EB
Certificate issuer:       /CN=F65B01B638AFD77A8B5A796B7F900633983B48D6
Certificate serial:       34A1E4EDF1520DE81323FB11299DBEB62760797D
Authority key identifier: F6:5B:01:B6:38:AF:D7:7A:8B:5A:79:6B:7F:90:06:33:98:3B:48:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/34352e3233302e3234382e302f32322d3234203d3e20323637393034.roa
Signing time:             Tue 06 Jan 2026 19:37:21 +0000
ROA not before:           Tue 06 Jan 2026 19:32:21 +0000
ROA not after:            Tue 05 Jan 2027 19:37:21 +0000
asID:                     267904
IP address blocks:        45.230.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a1:e4:ed:f1:52:0d:e8:13:23:fb:11:29:9d:be:b6:27:60:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F65B01B638AFD77A8B5A796B7F900633983B48D6
        Validity
            Not Before: Jan  6 19:32:21 2026 GMT
            Not After : Jan  5 19:37:21 2027 GMT
        Subject: CN=97524CE2717E4B30108BB8EEE310E691606DB7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:aa:72:10:96:8f:dc:2f:a9:a1:d5:7d:ee:
                    30:47:b7:4d:bb:22:d1:92:79:8d:7f:88:2b:d2:d0:
                    8c:74:d8:ba:50:f6:d3:f0:86:bd:5b:39:70:e9:63:
                    e6:24:27:1e:92:c6:d2:4e:f3:9b:f0:d8:4c:97:6f:
                    88:cf:32:38:29:22:2f:85:db:b0:7a:5d:58:5a:82:
                    2e:87:2c:5c:9e:7d:7b:a2:4a:3b:1c:88:15:02:f0:
                    e3:b6:77:7b:26:df:43:eb:c3:c1:18:3c:d2:1a:2f:
                    6b:19:8e:d9:5c:dc:bd:c3:fa:f3:59:57:80:e9:40:
                    c7:bf:71:5e:d9:9a:01:00:43:c8:79:f0:d9:0d:7b:
                    b6:16:2c:9c:d4:97:59:6e:46:4c:d9:90:f7:13:79:
                    74:f5:85:d3:bc:77:66:53:70:5e:53:1f:32:fc:1f:
                    a9:2c:2f:e2:8e:07:09:e6:c5:d4:3a:22:a6:63:7a:
                    65:39:1a:94:b3:f0:f1:4e:52:3b:de:14:47:5f:74:
                    6b:7e:57:e5:1a:cf:94:e0:ea:a4:20:a9:a2:f8:bc:
                    58:50:26:df:ba:55:cb:04:09:1e:fe:ad:55:a6:ef:
                    51:1b:c5:de:09:23:d7:ea:81:39:a6:63:3c:93:22:
                    66:b1:d1:8c:56:bc:6a:38:68:68:c2:3c:1f:e7:a4:
                    b7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:4C:E2:71:7E:4B:30:10:8B:B8:EE:E3:10:E6:91:60:6D:B7:EB
            X509v3 Authority Key Identifier:
                keyid:F6:5B:01:B6:38:AF:D7:7A:8B:5A:79:6B:7F:90:06:33:98:3B:48:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F65B01B638AFD77A8B5A796B7F900633983B48D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C99BB27200444D9319E263E7ABF4EF180127B095ED6BEC06DB468CF1AFB21D1F/0/34352e3233302e3234382e302f32322d3234203d3e20323637393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:f6:45:97:42:11:1e:7e:99:e4:e8:f0:7d:77:4e:db:1b:56:
         61:d1:49:29:01:ab:54:51:48:d3:13:85:66:d7:08:5c:4e:e2:
         33:55:63:a7:ed:6b:8b:53:44:96:1c:1e:88:66:56:5e:41:9d:
         cd:e6:f9:d8:eb:d4:90:41:ac:2e:be:d2:84:34:f0:e6:44:a0:
         f4:6c:91:59:f5:e5:9c:55:c9:88:46:da:50:3a:59:4c:92:03:
         14:8a:d8:3b:74:9b:5a:58:20:97:40:1c:75:38:e7:31:84:1a:
         b0:f7:11:49:69:7b:21:e8:b6:11:ed:40:c4:ba:8f:e2:62:a5:
         6a:9f:f8:07:e4:98:2c:9a:0b:c1:c4:34:14:5d:7d:b1:0d:b9:
         61:b8:36:2a:96:07:f0:10:3f:46:3a:48:78:f8:ce:e1:22:e1:
         ff:f1:2a:4d:1d:3f:17:38:44:5d:a8:54:4d:61:a5:b2:c5:c6:
         1d:7e:3f:e0:1d:b9:ea:3c:12:61:7c:11:db:4b:49:11:09:0b:
         8c:46:43:03:c6:55:28:75:8d:d5:93:35:b1:b1:ce:8e:6e:bf:
         c2:d0:5d:c3:c0:07:3e:d4:e6:f0:47:35:4a:69:78:dd:79:d9:
         a1:7a:fb:ec:de:90:a9:c0:98:5d:a0:51:11:c7:17:95:92:d4:
         e5:48:52:bf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNKHk7fFSDegTI/sRKZ2+tidgeX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY1QjAxQjYzOEFGRDc3QThCNUE3OTZCN0Y5MDA2MzM5
ODNCNDhENjAeFw0yNjAxMDYxOTMyMjFaFw0yNzAxMDUxOTM3MjFaMDMxMTAvBgNV
BAMTKDk3NTI0Q0UyNzE3RTRCMzAxMDhCQjhFRUUzMTBFNjkxNjA2REI3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKlqpyEJaP3C+podV97jBHt027
ItGSeY1/iCvS0Ix02LpQ9tPwhr1bOXDpY+YkJx6SxtJO85vw2EyXb4jPMjgpIi+F
27B6XVhagi6HLFyefXuiSjsciBUC8OO2d3sm30Prw8EYPNIaL2sZjtlc3L3D+vNZ
V4DpQMe/cV7ZmgEAQ8h58NkNe7YWLJzUl1luRkzZkPcTeXT1hdO8d2ZTcF5THzL8
H6ksL+KOBwnmxdQ6IqZjemU5GpSz8PFOUjveFEdfdGt+V+Uaz5Tg6qQgqaL4vFhQ
Jt+6VcsECR7+rVWm71Ebxd4JI9fqgTmmYzyTImax0YxWvGo4aGjCPB/npLcXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUl1JM4nF+SzAQi7ju4xDmkWBtt+swHwYDVR0j
BBgwFoAU9lsBtjiv13qLWnlrf5AGM5g7SNYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DOTlCQjI3MjAwNDQ0RDkzMTlFMjYzRTdBQkY0RUYxODAx
MjdCMDk1RUQ2QkVDMDZEQjQ2OENGMUFGQjIxRDFGLzAvRjY1QjAxQjYzOEFGRDc3
QThCNUE3OTZCN0Y5MDA2MzM5ODNCNDhENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjVCMDFCNjM4QUZENzdBOEI1
QTc5NkI3RjkwMDYzMzk4M0I0OEQ2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzk5QkIyNzIwMDQ0NEQ5MzE5RTI2M0U3QUJGNEVGMTgwMTI3QjA5NUVE
NkJFQzA2REI0NjhDRjFBRkIyMUQxRi8wLzM0MzUyZTMyMzMzMDJlMzIzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzkzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeb4
MA0GCSqGSIb3DQEBCwUAA4IBAQC09kWXQhEefpnk6PB9d07bG1Zh0UkpAatUUUjT
E4Vm1whcTuIzVWOn7WuLU0SWHB6IZlZeQZ3N5vnY69SQQawuvtKENPDmRKD0bJFZ
9eWcVcmIRtpQOllMkgMUitg7dJtaWCCXQBx1OOcxhBqw9xFJaXsh6LYR7UDEuo/i
YqVqn/gH5JgsmgvBxDQUXX2xDblhuDYqlgfwED9GOkh4+M7hIuH/8SpNHT8XOERd
qFRNYaWyxcYdfj/gHbnqPBJhfBHbS0kRCQuMRkMDxlUodY3VkzWxsc6Obr/C0F3D
wAc+1ObwRzVKaXjdedmhevvs3pCpwJhdoFERxxeVktTlSFK/
-----END CERTIFICATE-----
Generated at Fri Jan 9 12:17:56 2026 by rpki-client