This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/34352e3233302e33362e302f32332d3234203d3e20323636373133.roa
File:                     34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (raw, json)
Hash identifier:          p/fd0bO3C6dKBQF96iFdV/ryYR3J1O+fDQiaAwO91W8=
Subject key identifier:   60:D7:EA:BC:96:F9:03:9A:81:10:A6:BA:78:26:5B:73:D1:F0:72:9C
Certificate issuer:       /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
Certificate serial:       508FAA93173900ADCAE1F941EC5201D3D0BECBAA
Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/34352e3233302e33362e302f32332d3234203d3e20323636373133.roa
Signing time:             Tue 06 Jan 2026 19:13:19 +0000
ROA not before:           Tue 06 Jan 2026 19:08:19 +0000
ROA not after:            Tue 05 Jan 2027 19:13:19 +0000
asID:                     266713
IP address blocks:        45.230.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 10:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8f:aa:93:17:39:00:ad:ca:e1:f9:41:ec:52:01:d3:d0:be:cb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E
        Validity
            Not Before: Jan  6 19:08:19 2026 GMT
            Not After : Jan  5 19:13:19 2027 GMT
        Subject: CN=60D7EABC96F9039A8110A6BA78265B73D1F0729C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:d9:42:aa:cb:44:eb:ff:2a:a0:e5:cf:80:
                    e9:2e:23:b6:4d:63:0e:4b:65:75:7e:29:6d:98:df:
                    28:b6:3e:bf:34:94:d5:a2:6c:0c:73:0b:2d:29:6d:
                    9f:83:2e:48:61:19:22:7f:02:23:b6:29:0e:5f:5e:
                    76:56:43:a4:f4:f7:2e:37:02:a4:08:d7:05:08:ee:
                    40:82:02:cc:b4:23:44:bb:b8:06:5b:ed:63:38:95:
                    80:38:4a:eb:e4:8a:6f:1e:9f:26:fb:a2:4c:87:80:
                    a6:b0:3a:d7:55:68:9f:34:aa:a8:46:d9:51:53:26:
                    6a:93:a0:5d:ca:a6:be:fc:55:c2:12:f8:0a:8e:2a:
                    e9:e1:81:7c:36:6d:4e:59:6c:e6:f1:57:0d:5d:c4:
                    eb:9e:1f:46:81:38:9b:10:9f:e3:25:d9:f6:23:f9:
                    81:06:31:80:05:bc:7d:a2:6a:a5:78:c2:96:6e:03:
                    84:d8:a0:2e:6b:7b:b7:f6:68:d2:28:23:b1:c5:30:
                    30:72:27:ea:d2:47:9b:51:f3:09:34:0b:c0:4c:20:
                    bc:61:b0:25:01:bd:2e:19:f5:b0:0e:23:23:ab:cc:
                    ee:71:ef:a3:cc:98:da:9a:f1:17:6a:15:53:22:01:
                    23:4c:2b:ee:4b:d6:34:02:35:32:c3:70:75:58:72:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:EA:BC:96:F9:03:9A:81:10:A6:BA:78:26:5B:73:D1:F0:72:9C
            X509v3 Authority Key Identifier:
                keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/34352e3233302e33362e302f32332d3234203d3e20323636373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:04:e9:f4:72:58:ad:e8:f2:8c:e8:4a:68:75:3e:97:db:
         c3:2c:c0:e9:19:bd:c5:2d:62:fe:f9:51:81:a9:b3:82:7f:59:
         c2:5f:7c:ce:af:0d:26:70:e5:a1:7c:9b:44:69:e9:9a:d9:2b:
         27:8d:10:9f:e5:05:0f:6e:70:52:bb:bd:15:7d:8c:10:cf:a9:
         1a:da:c6:ce:0c:5d:01:a6:62:54:73:96:60:1d:f0:da:7e:72:
         db:b9:cf:1d:92:37:fa:ce:02:61:15:d9:fd:fe:9d:fe:13:73:
         d5:22:6f:b6:0f:76:ce:2f:2d:ee:e1:b4:74:70:65:62:fe:86:
         41:fe:fb:80:b3:28:18:8b:e4:83:ea:1a:6c:9a:2f:85:8f:a0:
         67:2d:b1:df:f3:e6:27:f3:71:9d:7c:11:c7:61:b2:cc:46:2e:
         73:92:19:10:65:37:b9:e1:ab:c7:8f:12:b0:d8:4a:15:33:13:
         3c:56:05:6a:f1:b3:37:06:75:f3:f1:72:1e:bb:ac:57:09:49:
         44:d4:9f:28:a7:8f:3a:3e:9f:7a:3f:e6:d2:7b:8e:ee:ec:19:
         44:d0:6a:e9:eb:26:77:71:a1:de:a7:85:da:26:8d:d5:cc:a7:
         13:72:88:af:06:72:45:79:31:64:5b:99:ea:13:19:3d:36:24:
         e6:5d:ff:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUI+qkxc5AK3K4flB7FIB09C+y6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy
QTBGODY5RTAeFw0yNjAxMDYxOTA4MTlaFw0yNzAxMDUxOTEzMTlaMDMxMTAvBgNV
BAMTKDYwRDdFQUJDOTZGOTAzOUE4MTEwQTZCQTc4MjY1QjczRDFGMDcyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKNlCqstE6/8qoOXPgOkuI7ZN
Yw5LZXV+KW2Y3yi2Pr80lNWibAxzCy0pbZ+DLkhhGSJ/AiO2KQ5fXnZWQ6T09y43
AqQI1wUI7kCCAsy0I0S7uAZb7WM4lYA4Suvkim8enyb7okyHgKawOtdVaJ80qqhG
2VFTJmqToF3Kpr78VcIS+AqOKunhgXw2bU5ZbObxVw1dxOueH0aBOJsQn+Ml2fYj
+YEGMYAFvH2iaqV4wpZuA4TYoC5re7f2aNIoI7HFMDByJ+rSR5tR8wk0C8BMILxh
sCUBvS4Z9bAOIyOrzO5x76PMmNqa8RdqFVMiASNMK+5L1jQCNTLDcHVYcignAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYNfqvJb5A5qBEKa6eCZbc9HwcpwwHwYDVR0j
BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5
MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF
QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz
MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG
NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzM0MzUyZTMyMzMzMDJlMzMzNjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3mJDAN
BgkqhkiG9w0BAQsFAAOCAQEAXG8E6fRyWK3o8ozoSmh1PpfbwyzA6Rm9xS1i/vlR
gamzgn9Zwl98zq8NJnDloXybRGnpmtkrJ40Qn+UFD25wUru9FX2MEM+pGtrGzgxd
AaZiVHOWYB3w2n5y27nPHZI3+s4CYRXZ/f6d/hNz1SJvtg92zi8t7uG0dHBlYv6G
Qf77gLMoGIvkg+oabJovhY+gZy2x3/PmJ/NxnXwRx2GyzEYuc5IZEGU3ueGrx48S
sNhKFTMTPFYFavGzNwZ18/FyHrusVwlJRNSfKKePOj6fej/m0nuO7uwZRNBq6esm
d3Gh3qeF2iaN1cynE3KIrwZyRXkxZFuZ6hMZPTYk5l3/4Q==
-----END CERTIFICATE-----
Generated at Thu Jan 29 05:03:51 2026 by rpki-client