This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e203634313530.roa
File:                     34352e36382e33342e302f32332d3234203d3e203634313530.roa (raw, json)
Hash identifier:          qi0LatazdnLLy1wVA8tyfebEkCrv4T6thvxW8l3+5sA=
Subject key identifier:   29:88:BF:3D:38:7C:4B:14:AF:54:C5:11:2D:D9:7B:87:AB:2E:95:8D
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       6C2875AE538A9931A99E48F44C6827DBD8670744
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e203634313530.roa
Signing time:             Tue 06 Jan 2026 19:07:02 +0000
ROA not before:           Tue 06 Jan 2026 19:02:02 +0000
ROA not after:            Tue 05 Jan 2027 19:07:02 +0000
asID:                     64150
IP address blocks:        45.68.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:28:75:ae:53:8a:99:31:a9:9e:48:f4:4c:68:27:db:d8:67:07:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: Jan  6 19:02:02 2026 GMT
            Not After : Jan  5 19:07:02 2027 GMT
        Subject: CN=2988BF3D387C4B14AF54C5112DD97B87AB2E958D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:9c:a9:e1:9f:b9:70:d9:e4:b5:ad:d6:67:
                    e0:cb:91:31:cf:71:84:d1:89:5d:7d:ad:9c:5d:58:
                    d1:82:08:8a:f5:08:52:ae:58:2e:d2:0a:c2:9b:f2:
                    51:00:db:2e:e9:6c:a2:4f:b2:ca:1d:7e:eb:37:4c:
                    06:b7:7e:e5:6f:65:9d:22:a9:42:63:dd:a5:d2:44:
                    b1:75:0e:8f:85:37:9a:c4:a7:20:4c:3a:75:2f:d9:
                    e9:2d:d9:9d:c1:43:4a:ec:06:17:56:ec:08:24:2d:
                    db:ac:f7:15:05:2a:61:f2:a6:6a:12:41:4c:eb:bc:
                    47:b6:f5:1a:cf:c3:d6:14:e7:bc:c6:6a:39:2d:9e:
                    00:3d:02:be:aa:13:30:ad:67:97:b1:a7:bb:34:eb:
                    70:27:40:b3:51:5c:a6:4b:0e:08:3e:00:48:06:e8:
                    92:c5:b7:a9:0e:95:eb:d6:b4:5e:17:51:38:02:18:
                    6a:5d:ea:19:de:36:a7:bf:5c:be:6e:48:5e:2f:3c:
                    72:ac:0e:c1:59:f5:d8:4a:e6:31:6d:71:c9:4d:d5:
                    d8:d1:d7:aa:05:03:e0:8d:c6:85:0c:3f:22:68:4c:
                    92:b3:a3:38:1b:03:1d:72:05:d7:4f:d6:48:e2:56:
                    07:ac:22:57:25:f2:41:70:08:cf:6b:04:c4:6c:71:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:BF:3D:38:7C:4B:14:AF:54:C5:11:2D:D9:7B:87:AB:2E:95:8D
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33342e302f32332d3234203d3e203634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:90:12:7c:b3:5c:a6:93:08:98:34:26:83:95:a5:3b:a2:
         b5:a2:3d:44:50:19:6e:2b:cd:08:ae:66:78:69:25:ca:50:0c:
         67:56:68:e1:bd:7f:60:0d:f0:e5:8e:8f:e2:b1:a0:bc:5a:f2:
         e9:16:8d:82:ac:5f:05:c9:ef:20:86:87:b8:91:fe:ed:f7:ad:
         87:a9:ae:01:13:0c:aa:c9:57:48:b7:20:45:c5:14:f8:5f:c3:
         0b:97:a6:06:d1:c3:a7:94:41:f2:a8:4c:e8:6f:e7:20:65:35:
         02:55:b0:8c:66:a1:b9:1e:f5:81:e0:f5:5e:b4:f9:6d:fd:51:
         d2:78:be:75:93:e7:45:34:4e:e2:2b:ee:06:08:02:1b:c6:3a:
         0b:94:47:e0:cb:a0:f9:d3:81:32:54:84:a4:e7:cf:d5:e1:5b:
         61:23:40:ce:10:f5:3e:19:e4:0f:7e:41:5a:9e:d7:67:8d:a3:
         f7:a8:8a:27:ca:de:80:d2:03:21:f5:26:f0:d8:3d:39:c1:d6:
         83:2a:c3:89:95:7d:ae:d9:c2:be:84:c9:12:49:60:e1:d6:fd:
         d1:86:51:7c:00:55:d2:16:4c:ae:22:72:47:c9:93:fd:c0:99:
         dc:8a:db:e0:c8:9e:0e:49:f7:ab:81:7c:94:6e:c4:49:8c:08:
         74:05:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:23:23 2026 by rpki-client