This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/34352e37302e3131362e302f32322d3234203d3e20323635383234.roa
File:                     34352e37302e3131362e302f32322d3234203d3e20323635383234.roa (raw, json)
Hash identifier:          z37y742rcvNXVPL7isLeFKLk+2I/kzB6ztXBDYDe4yk=
Subject key identifier:   F8:8C:03:AA:E3:E4:5F:D1:45:C1:6E:82:96:2B:D0:F8:8C:F7:8A:4D
Certificate issuer:       /CN=E206D248C817DF6A626A543E755E101728608BAB
Certificate serial:       16BB288B5AF4135E14618797187BA4FA720B01AB
Authority key identifier: E2:06:D2:48:C8:17:DF:6A:62:6A:54:3E:75:5E:10:17:28:60:8B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E206D248C817DF6A626A543E755E101728608BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/34352e37302e3131362e302f32322d3234203d3e20323635383234.roa
Signing time:             Tue 06 Jan 2026 19:33:00 +0000
ROA not before:           Tue 06 Jan 2026 19:28:00 +0000
ROA not after:            Tue 05 Jan 2027 19:33:00 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/E206D248C817DF6A626A543E755E101728608BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/E206D248C817DF6A626A543E755E101728608BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E206D248C817DF6A626A543E755E101728608BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:28:8b:5a:f4:13:5e:14:61:87:97:18:7b:a4:fa:72:0b:01:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E206D248C817DF6A626A543E755E101728608BAB
        Validity
            Not Before: Jan  6 19:28:00 2026 GMT
            Not After : Jan  5 19:33:00 2027 GMT
        Subject: CN=F88C03AAE3E45FD145C16E82962BD0F88CF78A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:b5:9e:93:4b:4e:70:c5:83:35:4e:dc:1a:
                    94:d1:8c:ea:9d:eb:ed:61:2a:3d:8b:7e:2a:2b:17:
                    f7:92:89:ee:19:38:41:40:76:46:46:83:4c:b5:69:
                    6f:80:16:1c:d6:33:4f:87:86:ec:9a:a9:b2:2f:45:
                    4e:32:6b:35:e0:2b:da:c0:33:38:2a:d3:7d:2a:83:
                    ca:2f:c9:8b:de:8c:73:60:eb:f7:f1:67:3b:bb:e1:
                    d9:ee:31:d6:7c:cc:72:d3:17:b6:df:99:e7:9e:b7:
                    a7:12:36:4b:34:9e:a5:b9:c4:63:8d:30:c8:de:aa:
                    a8:26:a2:d4:6a:29:3b:fe:04:62:49:f7:96:53:60:
                    16:60:bf:4f:f1:ea:31:db:e5:30:37:a0:33:83:5c:
                    72:5f:3c:d0:11:b6:ed:5f:43:25:30:d3:af:4a:19:
                    6f:79:2e:5a:8d:ba:45:50:69:6d:ec:30:1c:a0:7d:
                    75:b7:4f:96:ef:67:2e:46:4f:ff:b2:15:1e:30:a2:
                    50:4a:f8:6e:e4:ef:46:74:58:c1:84:70:62:9c:52:
                    f8:ca:23:e9:22:8d:8d:90:54:e1:57:74:2c:ce:e6:
                    77:50:f2:9f:fc:28:48:91:72:94:55:40:55:b8:61:
                    b7:c3:b1:38:b8:73:12:47:46:be:c1:63:60:a8:26:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8C:03:AA:E3:E4:5F:D1:45:C1:6E:82:96:2B:D0:F8:8C:F7:8A:4D
            X509v3 Authority Key Identifier:
                keyid:E2:06:D2:48:C8:17:DF:6A:62:6A:54:3E:75:5E:10:17:28:60:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/E206D248C817DF6A626A543E755E101728608BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E206D248C817DF6A626A543E755E101728608BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/34352e37302e3131362e302f32322d3234203d3e20323635383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:9c:c2:21:98:42:91:ed:11:1a:90:06:a7:6e:e0:32:dd:
         ce:f0:60:a6:f2:82:83:a1:19:2c:7e:e1:e2:af:6d:63:cb:ce:
         51:32:92:cb:e7:ac:f2:2a:1e:9b:e8:72:23:78:35:ad:29:13:
         3c:91:18:68:fa:2f:04:fd:5b:b3:c0:a4:6c:95:9c:36:ae:1a:
         ac:b4:66:54:e0:52:1e:c9:4c:ca:df:e6:a8:eb:aa:2e:d2:58:
         05:e4:06:fe:25:28:99:bd:3e:23:c0:f0:9b:ae:eb:ef:17:12:
         7e:5f:c6:2a:d9:75:17:73:29:ec:64:7c:6e:ee:5e:d6:c5:d5:
         b2:f3:b0:16:88:24:b2:f6:81:77:5a:7d:2b:54:e7:60:98:94:
         01:49:11:37:9f:42:8b:87:1c:35:e8:75:52:ad:0a:75:a8:f1:
         04:3b:e9:52:f5:d0:d7:5b:8e:0b:c3:f5:b3:53:ea:c6:1a:28:
         14:7e:bb:6b:dc:4b:7b:4f:cc:08:de:fb:db:fc:6e:02:75:e8:
         f3:11:c7:73:83:a8:70:51:44:f9:aa:a6:88:fa:74:32:49:e8:
         41:bb:d3:ed:6f:a6:7f:97:11:96:9f:7a:51:69:e8:19:19:89:
         1f:be:d1:79:85:7e:d0:61:48:da:95:50:4f:ea:ad:2a:68:d2:
         1a:ac:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:57 2026 by rpki-client