This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/34352e37302e3138302e302f32322d3232203d3e20323635383134.roa
File:                     34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (raw, json)
Hash identifier:          wkHRl/gQ8N7VZbnZSc/yZu7X+RrDQJCd4MliWRWWgig=
Subject key identifier:   2F:98:4C:5B:3A:83:6F:F9:D7:56:86:20:7E:F6:F8:DA:BD:2A:26:59
Certificate issuer:       /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
Certificate serial:       42AD8D626AF6707A50A49675E5825C44D28B2974
Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/34352e37302e3138302e302f32322d3232203d3e20323635383134.roa
Signing time:             Tue 27 Jan 2026 23:27:57 +0000
ROA not before:           Tue 27 Jan 2026 23:22:57 +0000
ROA not after:            Tue 26 Jan 2027 23:27:57 +0000
asID:                     265814
IP address blocks:        45.70.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ad:8d:62:6a:f6:70:7a:50:a4:96:75:e5:82:5c:44:d2:8b:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C
        Validity
            Not Before: Jan 27 23:22:57 2026 GMT
            Not After : Jan 26 23:27:57 2027 GMT
        Subject: CN=2F984C5B3A836FF9D75686207EF6F8DABD2A2659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:38:6c:30:ff:fe:9d:a6:a6:18:8e:e3:b0:
                    9c:0e:b2:f9:28:ca:83:e7:e4:2b:39:e7:a5:83:f4:
                    7b:80:a1:cb:c8:18:11:96:cb:ee:8b:fd:eb:9f:ff:
                    de:31:9f:07:83:03:ff:53:cd:1f:cc:69:b4:52:2a:
                    a0:93:52:03:43:5a:0e:92:3b:c4:bb:db:12:6e:6a:
                    e1:5c:d1:66:5c:1f:c2:09:af:5f:4b:df:6c:36:d1:
                    0a:1e:9a:4d:92:d1:a9:fb:55:77:f7:0b:1d:53:49:
                    fa:d7:98:67:cb:e0:93:67:3d:47:c2:48:d6:06:4a:
                    41:0a:c2:85:16:3e:a3:bc:fa:4d:b0:57:7f:50:79:
                    be:41:9a:a6:d6:af:e1:bc:8e:36:8a:59:2d:46:78:
                    b8:45:7e:1a:87:aa:88:89:1d:76:13:39:e1:1d:4d:
                    ed:c5:ba:55:fb:89:8c:bd:9f:92:32:40:5e:4b:ab:
                    6d:5e:35:48:ab:21:25:02:c3:dc:5f:f1:cb:d5:da:
                    70:c2:16:6b:7d:c5:21:db:ea:ac:fb:38:ef:b9:58:
                    ae:85:33:d4:86:b4:a7:0c:79:c4:c8:c4:cd:2a:75:
                    30:3e:d0:34:85:86:46:9f:e9:d7:a2:9e:22:33:c8:
                    72:2d:a2:4e:1e:72:03:6c:c2:b7:4e:b1:59:45:51:
                    93:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:98:4C:5B:3A:83:6F:F9:D7:56:86:20:7E:F6:F8:DA:BD:2A:26:59
            X509v3 Authority Key Identifier:
                keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/34352e37302e3138302e302f32322d3232203d3e20323635383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:0b:82:6e:7b:32:60:cb:04:0e:60:01:98:9d:6b:55:e1:c4:
         90:f3:c5:40:15:dc:bd:a2:37:31:55:7c:20:bd:bf:d2:67:ab:
         72:89:2a:1d:ac:bc:3e:30:1f:83:f1:95:5a:f8:84:fb:95:f0:
         75:06:3b:04:37:08:eb:83:4a:f6:17:2d:52:78:5a:c0:57:93:
         79:ea:29:50:76:89:21:4b:45:f5:4e:2b:7a:76:8c:54:d1:11:
         cc:78:47:79:38:e2:73:d8:ef:e3:16:d1:09:6c:72:b7:69:a2:
         e4:51:22:45:bc:f5:6f:45:06:bb:c9:49:3a:39:2c:db:61:02:
         e4:b4:6f:b2:2c:27:8f:24:7a:c0:b8:7b:60:a4:02:74:bf:c7:
         f5:d2:6c:90:49:ed:8f:f2:54:ca:c9:4c:63:c0:20:dd:53:b9:
         ae:0a:72:6e:7f:42:10:68:ae:32:ae:ea:69:59:ae:fc:ab:3e:
         f4:85:98:ad:c8:b4:90:e8:93:e4:e1:0d:c0:29:da:ff:48:92:
         0f:e3:50:1e:3f:77:10:12:37:04:70:d7:36:11:d2:ef:b7:bb:
         a8:94:04:4a:14:8b:94:c0:34:8c:3a:85:05:24:31:a5:e6:d2:
         e3:5c:28:32:51:83:99:64:a1:04:ba:f6:2c:1c:aa:5b:69:a2:
         cb:8a:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:29:59 2026 by rpki-client