This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32342d3234203d3e203634313339.roa
File:                     34352e3233382e3137362e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          SuowT3vFOswMjXDf/li7981mD01B0XXYuFqK+SG9UTU=
Subject key identifier:   94:88:7C:C3:E3:A0:87:FE:50:CA:81:58:22:07:75:DC:91:22:CE:12
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       48FF24AE8F7A0A271A719F204D217BB1A19648A8
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 06 Jan 2026 19:46:16 +0000
ROA not before:           Tue 06 Jan 2026 19:41:16 +0000
ROA not after:            Tue 05 Jan 2027 19:46:16 +0000
asID:                     64139
IP address blocks:        45.238.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 15:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ff:24:ae:8f:7a:0a:27:1a:71:9f:20:4d:21:7b:b1:a1:96:48:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Jan  6 19:41:16 2026 GMT
            Not After : Jan  5 19:46:16 2027 GMT
        Subject: CN=94887CC3E3A087FE50CA8158220775DC9122CE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dc:a9:d4:b4:bb:5f:92:a8:52:ce:6c:86:b0:
                    c6:db:4c:30:00:3c:ff:1b:87:61:9c:b9:31:bf:04:
                    7a:12:6f:11:f1:05:d2:05:8c:90:fc:9d:4b:32:2c:
                    b3:97:82:7c:60:bd:cc:a0:bc:66:f4:0b:b5:f2:94:
                    9d:02:1e:cf:61:4a:00:49:ca:a2:ca:c9:79:2e:5c:
                    2d:ec:b2:17:4b:b4:30:cc:3b:14:17:34:7c:32:6a:
                    be:ab:03:7e:bd:ce:30:08:c4:eb:c6:ea:01:b1:43:
                    fb:4e:be:6e:f2:5b:e9:d4:17:5e:d2:10:b0:a9:40:
                    af:d7:6d:b5:f8:22:12:09:7a:39:3a:09:74:80:1b:
                    a9:55:f4:d5:3d:39:88:f0:81:c5:78:42:f6:64:79:
                    b7:9f:44:61:c0:f0:9f:6d:4d:48:2d:52:87:04:0c:
                    42:7b:46:49:79:8c:84:4f:a2:5c:13:c6:95:d4:68:
                    60:38:cb:bc:37:1d:63:18:23:cf:d3:3c:98:05:28:
                    07:cd:7d:ab:54:e1:65:a8:8e:64:e0:a0:01:3a:00:
                    79:36:b4:c2:d6:ac:ed:d8:37:54:8f:18:8a:79:1a:
                    35:62:f1:da:59:d1:76:f4:e8:81:4f:3b:e0:3a:e7:
                    34:59:4c:d8:c3:5e:04:89:87:7b:c9:43:0b:9a:c5:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:88:7C:C3:E3:A0:87:FE:50:CA:81:58:22:07:75:DC:91:22:CE:12
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:cd:4d:40:34:c0:ee:77:0c:ae:a8:2a:ad:e7:cd:33:c8:
         8d:40:50:fe:e8:c0:af:1d:b3:2b:00:c6:8a:d7:b8:dc:78:54:
         14:3b:63:ba:dd:6a:4c:45:3a:6d:b6:f1:aa:d1:43:2b:df:7c:
         6f:e8:52:d2:02:8f:a8:c4:88:e5:a9:4f:84:c7:f9:8d:1b:30:
         65:b1:51:3d:cb:c1:8a:b9:f8:07:de:f2:31:d5:76:53:f0:5b:
         7a:1f:70:37:a4:12:0b:ff:7d:08:33:b0:40:97:b3:0a:59:b4:
         92:ed:9e:dc:ef:5c:7a:3c:ba:53:1e:77:97:88:43:70:63:db:
         e0:61:13:22:65:e9:9f:5b:13:d5:22:ca:4d:ff:d7:b1:68:6f:
         93:58:83:fc:c5:47:94:2c:8e:32:ad:e6:8e:b2:8b:b5:d7:c3:
         a1:0d:a3:e7:ab:1e:30:d0:fb:2b:20:64:11:82:24:15:2b:69:
         f0:ad:c7:59:3c:da:ef:b6:64:c9:31:b6:9c:ae:97:6d:1d:ed:
         cb:84:c3:04:e7:0e:fb:76:b7:83:aa:36:ba:5b:35:38:e0:b5:
         2d:c7:43:1a:2f:e1:9e:8d:9e:87:c1:f4:c3:73:66:6b:30:2a:
         26:db:2e:35:ef:35:48:82:be:c7:f5:3e:5c:54:d5:3b:af:73:
         4e:ec:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 08:02:41 2026 by rpki-client