This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa
File:                     34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          oxhbXGH7TV9Ve0bIiH8IXLrMl8QbG4rQrMwLbAdJ0DI=
Subject key identifier:   03:8D:51:01:47:DA:2E:A3:D7:C9:3B:7F:BD:C5:EC:D2:F4:80:DE:E1
Certificate issuer:       /CN=E72389DB363677115A40632E0F358D0066C2BC82
Certificate serial:       7A347CDDBB92A88D04939F41AEE6DBCFAEF7D612
Authority key identifier: E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 06 Jan 2026 19:32:58 +0000
ROA not before:           Tue 06 Jan 2026 19:27:58 +0000
ROA not after:            Tue 05 Jan 2027 19:32:58 +0000
asID:                     265523
IP address blocks:        45.235.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 03:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:34:7c:dd:bb:92:a8:8d:04:93:9f:41:ae:e6:db:cf:ae:f7:d6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72389DB363677115A40632E0F358D0066C2BC82
        Validity
            Not Before: Jan  6 19:27:58 2026 GMT
            Not After : Jan  5 19:32:58 2027 GMT
        Subject: CN=038D510147DA2EA3D7C93B7FBDC5ECD2F480DEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:25:3e:91:3a:df:83:50:01:fe:dd:f7:c3:
                    79:bc:d1:2d:b5:ae:0b:c0:0f:32:5c:1d:71:a6:8f:
                    b6:a8:e5:bf:cd:f1:59:69:14:09:d5:08:ef:6d:18:
                    3b:05:ea:a0:ee:ba:cc:d7:80:17:69:e8:17:e1:2a:
                    33:8e:8c:ea:cc:d9:7c:14:77:e2:50:49:b1:fb:4e:
                    25:86:bd:61:2c:43:fc:3d:fd:4f:6a:1e:cc:0f:41:
                    66:35:6b:6e:7d:f4:ae:cc:5c:50:51:0b:56:65:5a:
                    50:f5:2e:5b:88:a6:3d:dd:d1:28:59:f5:cc:1c:e9:
                    8f:9d:bb:3a:b1:7f:12:9b:1e:30:c7:73:d2:71:1c:
                    2f:04:57:d0:ba:98:2b:d0:e8:f0:3a:0e:4d:33:52:
                    0e:a9:b7:79:3e:eb:77:41:c2:4c:91:9e:f6:88:89:
                    69:7f:7b:1e:b8:e6:80:45:64:e3:a1:fc:a0:02:a1:
                    9d:1f:81:01:97:0d:43:8f:8d:78:de:8c:df:53:9d:
                    0c:8e:59:2b:3f:55:6c:a6:4b:b0:e8:c6:10:6d:c3:
                    b6:9e:89:b2:e6:dc:d3:1b:a3:67:95:e5:dc:74:4d:
                    0f:37:0a:58:01:00:13:a4:1f:e6:cb:a4:83:da:9c:
                    55:21:aa:11:8b:a8:86:fd:7f:bd:c7:e5:19:77:17:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:51:01:47:DA:2E:A3:D7:C9:3B:7F:BD:C5:EC:D2:F4:80:DE:E1
            X509v3 Authority Key Identifier:
                keyid:E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:00:6e:b5:65:e5:06:e0:d4:73:a4:3e:3a:b9:6e:ab:64:
         4e:06:3f:09:fa:a9:c3:cc:7f:80:60:64:1d:ab:09:98:53:51:
         4d:2c:49:c2:76:f8:fc:24:90:91:d5:93:da:93:a4:25:b7:70:
         ca:ac:77:c2:84:6b:a1:c2:3a:5a:0f:c1:96:cb:6e:d7:17:e5:
         a1:11:95:da:b9:0a:b0:df:1e:43:ca:96:a1:68:76:71:db:f8:
         2f:04:a1:f5:ba:63:92:09:0f:b3:a4:68:ae:18:86:df:cd:10:
         24:5e:18:0b:c3:67:a2:66:6d:35:10:67:05:2e:2b:dc:a1:69:
         a1:eb:18:1a:23:24:60:bd:04:60:ee:a7:c7:aa:9c:66:40:e0:
         8c:bf:dc:74:66:f4:60:b5:a8:22:30:d6:16:ae:ee:3e:13:55:
         24:f9:fa:62:67:ab:4b:e9:22:aa:b2:1e:62:f7:68:ee:dc:89:
         74:20:83:b4:60:e9:45:06:35:c9:c0:69:86:58:71:35:9e:c8:
         d5:74:f0:fb:b9:83:21:85:d8:0a:b1:ab:d7:4a:a2:50:69:b1:
         52:5e:90:9c:81:eb:b6:6b:2d:42:06:69:a3:8c:f5:7a:d4:b9:
         8a:a9:d8:3e:27:82:94:b8:d8:4f:8a:7f:b6:30:95:bc:34:7c:
         6c:6b:66:64
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUejR83buSqI0Ek59Brubbz6731hIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcyMzg5REIzNjM2NzcxMTVBNDA2MzJFMEYzNThEMDA2
NkMyQkM4MjAeFw0yNjAxMDYxOTI3NThaFw0yNzAxMDUxOTMyNThaMDMxMTAvBgNV
BAMTKDAzOEQ1MTAxNDdEQTJFQTNEN0M5M0I3RkJEQzVFQ0QyRjQ4MERFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLiU+kTrfg1AB/t33w3m80S21
rgvADzJcHXGmj7ao5b/N8VlpFAnVCO9tGDsF6qDuuszXgBdp6BfhKjOOjOrM2XwU
d+JQSbH7TiWGvWEsQ/w9/U9qHswPQWY1a2599K7MXFBRC1ZlWlD1LluIpj3d0ShZ
9cwc6Y+duzqxfxKbHjDHc9JxHC8EV9C6mCvQ6PA6Dk0zUg6pt3k+63dBwkyRnvaI
iWl/ex645oBFZOOh/KACoZ0fgQGXDUOPjXjejN9TnQyOWSs/VWymS7DoxhBtw7ae
ibLm3NMbo2eV5dx0TQ83ClgBABOkH+bLpIPanFUhqhGLqIb9f73H5Rl3F8kNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUA41RAUfaLqPXyTt/vcXs0vSA3uEwHwYDVR0j
BBgwFoAU5yOJ2zY2dxFaQGMuDzWNAGbCvIIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RTFERTNBMDNFMEQ1NEI1Mjg4N0MxNUQ5NzgwMEY0MkM1
RjBCMjVCNkQ4QTk1MDM1NDU0NDdDRkYxOTE1MzBFLzAvRTcyMzg5REIzNjM2Nzcx
MTVBNDA2MzJFMEYzNThEMDA2NkMyQkM4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzIzODlEQjM2MzY3NzExNUE0
MDYzMkUwRjM1OEQwMDY2QzJCQzgyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkUxREUzQTAzRTBENTRCNTI4ODdDMTVEOTc4MDBGNDJDNUYwQjI1QjZE
OEE5NTAzNTQ1NDQ3Q0ZGMTkxNTMwRS8wLzM0MzUyZTMyMzMzNTJlMzEzMjM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1MzUzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeuA
MA0GCSqGSIb3DQEBCwUAA4IBAQBywAButWXlBuDUc6Q+Orluq2ROBj8J+qnDzH+A
YGQdqwmYU1FNLEnCdvj8JJCR1ZPak6Qlt3DKrHfChGuhwjpaD8GWy27XF+WhEZXa
uQqw3x5DypahaHZx2/gvBKH1umOSCQ+zpGiuGIbfzRAkXhgLw2eiZm01EGcFLivc
oWmh6xgaIyRgvQRg7qfHqpxmQOCMv9x0ZvRgtagiMNYWru4+E1Uk+fpiZ6tL6SKq
sh5i92ju3Il0IIO0YOlFBjXJwGmGWHE1nsjVdPD7uYMhhdgKsavXSqJQabFSXpCc
geu2ay1CBmmjjPV61LmKqdg+J4KUuNhPin+2MJW8NHxsa2Zk
-----END CERTIFICATE-----
Generated at Wed Jan 7 16:24:16 2026 by rpki-client