This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa
File:                     34352e3233352e3134302e302f32322d3233203d3e203631343638.roa (raw, json)
Hash identifier:          JJbnoBAyyCPXX+TppN79Y4XX1Fs/fh0O/xZ8HQxYGmo=
Subject key identifier:   7A:3E:1A:8E:FA:B4:27:34:5E:D8:75:AA:3F:78:C6:06:EC:47:48:F6
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       607685BA05D88708AF27FD0305E21E15C07131F7
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:03:24 +0000
ROA not before:           Tue 06 Jan 2026 18:58:24 +0000
ROA not after:            Tue 05 Jan 2027 19:03:24 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:76:85:ba:05:d8:87:08:af:27:fd:03:05:e2:1e:15:c0:71:31:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Jan  6 18:58:24 2026 GMT
            Not After : Jan  5 19:03:24 2027 GMT
        Subject: CN=7A3E1A8EFAB427345ED875AA3F78C606EC4748F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:ee:09:b3:1f:a2:ca:4e:49:34:48:70:f7:
                    b6:2e:a2:b8:e4:69:8b:89:f7:64:74:0c:54:d3:9b:
                    d0:85:e5:de:20:56:e8:c4:28:02:11:0e:37:9d:8a:
                    dc:f8:1f:f1:f3:59:1c:f4:92:75:7b:e6:e4:62:8e:
                    f4:d7:43:ca:43:4a:60:49:2d:9c:8d:b0:5f:15:c1:
                    53:34:60:43:b7:5f:a1:6a:a3:f1:01:f1:84:0f:87:
                    7f:85:f8:c5:de:99:d5:0d:72:c4:33:99:b4:d6:1a:
                    49:6c:21:67:cc:8f:83:e8:93:53:d6:5a:e6:08:d3:
                    c2:60:72:a6:3c:f5:06:16:f1:ba:9d:36:73:7b:0b:
                    06:8a:cb:05:b8:54:08:80:df:3d:ec:bc:04:91:b3:
                    cf:18:c3:66:40:fd:11:68:6b:6a:52:2d:24:90:33:
                    13:5f:fa:4c:18:45:e4:43:4b:dc:b0:c5:b8:ee:c0:
                    9e:7d:9f:3f:8a:0b:2a:13:05:c0:06:1d:c6:e7:32:
                    4b:42:48:87:5a:3e:b8:3e:41:99:e2:ed:93:f0:78:
                    4d:2b:73:de:5a:cd:04:ee:29:14:91:05:35:46:d5:
                    3f:0a:4b:4c:d0:db:18:79:f8:8e:fe:21:19:76:14:
                    74:1a:68:55:b0:63:b6:13:61:0a:3b:c7:8b:8e:df:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:1A:8E:FA:B4:27:34:5E:D8:75:AA:3F:78:C6:06:EC:47:48:F6
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:ca:91:0a:e1:9c:f0:65:2c:ab:09:60:c3:13:44:1f:96:
         46:67:95:d3:0f:48:be:7d:32:77:e9:5d:59:0a:6e:41:93:34:
         ac:c4:0e:8d:06:15:d1:ce:e8:32:25:a3:c1:6c:d8:f1:48:c4:
         25:9e:1f:6f:5f:2b:92:45:d0:e4:a0:63:e7:4e:97:7e:0c:8e:
         42:2f:f7:bc:9e:e4:9a:3c:3e:98:68:ec:c8:b7:e7:0f:f2:53:
         b6:7e:98:5f:05:76:d8:1e:04:96:e9:61:0d:65:bf:d2:a7:41:
         76:d4:f0:e7:a1:5b:f7:15:3c:fe:8b:32:5f:52:d0:f1:6c:ec:
         e7:63:ae:12:b5:33:4e:5c:21:83:18:4a:9f:44:81:2f:59:e1:
         e1:dc:a3:a4:8a:88:a6:2b:47:ea:7b:86:43:ca:b1:63:cb:4a:
         13:ef:41:b0:c6:41:f7:ed:a7:d7:5c:81:e1:76:27:e5:ba:c9:
         d9:24:2d:b4:87:6c:51:bf:88:7f:bb:6f:a8:79:84:c6:15:48:
         63:74:3d:96:f1:a3:20:fa:6c:8d:5a:6f:b6:f6:d3:6e:ac:e3:
         b9:7a:97:53:be:83:7c:79:64:8d:b0:8e:40:b4:04:4a:6a:29:
         9e:64:00:8f:48:e2:c4:10:4a:9e:7d:6f:8b:c1:ae:8b:9c:a8:
         3a:04:cd:dd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYHaFugXYhwivJ/0DBeIeFcBxMfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxRDAwNkJCREY3MDJBQzkxNEZENzlGMjA1NUExMUU5
Njk5Nzc1RDAeFw0yNjAxMDYxODU4MjRaFw0yNzAxMDUxOTAzMjRaMDMxMTAvBgNV
BAMTKDdBM0UxQThFRkFCNDI3MzQ1RUQ4NzVBQTNGNzhDNjA2RUM0NzQ4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXO+4Jsx+iyk5JNEhw97Yuorjk
aYuJ92R0DFTTm9CF5d4gVujEKAIRDjeditz4H/HzWRz0knV75uRijvTXQ8pDSmBJ
LZyNsF8VwVM0YEO3X6Fqo/EB8YQPh3+F+MXemdUNcsQzmbTWGklsIWfMj4Pok1PW
WuYI08JgcqY89QYW8bqdNnN7CwaKywW4VAiA3z3svASRs88Yw2ZA/RFoa2pSLSSQ
MxNf+kwYReRDS9ywxbjuwJ59nz+KCyoTBcAGHcbnMktCSIdaPrg+QZni7ZPweE0r
c95azQTuKRSRBTVG1T8KS0zQ2xh5+I7+IRl2FHQaaFWwY7YTYQo7x4uO37HZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUej4ajvq0JzRe2HWqP3jGBuxHSPYwHwYDVR0j
BBgwFoAUhR0Aa733AqyRT9efIFWhHpaZd10wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjQyQzBBNTk0NEUyNDU2RjEyQUJCNThFMkZFMEFDMUU1
REQ0MUQzMzA2MjA1RTQ5NzRFREZFOEVFRjdENjlFLzAvODUxRDAwNkJCREY3MDJB
QzkxNEZENzlGMjA1NUExMUU5Njk5Nzc1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTFEMDA2QkJERjcwMkFDOTE0
RkQ3OUYyMDU1QTExRTk2OTk3NzVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI0MkMwQTU5NDRFMjQ1NkYxMkFCQjU4RTJGRTBBQzFFNURENDFEMzMw
NjIwNUU0OTc0RURGRThFRUY3RDY5RS8wLzM0MzUyZTMyMzMzNTJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzMzIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3rjDAN
BgkqhkiG9w0BAQsFAAOCAQEAa+bKkQrhnPBlLKsJYMMTRB+WRmeV0w9Ivn0yd+ld
WQpuQZM0rMQOjQYV0c7oMiWjwWzY8UjEJZ4fb18rkkXQ5KBj506XfgyOQi/3vJ7k
mjw+mGjsyLfnD/JTtn6YXwV22B4ElulhDWW/0qdBdtTw56Fb9xU8/osyX1LQ8Wzs
52OuErUzTlwhgxhKn0SBL1nh4dyjpIqIpitH6nuGQ8qxY8tKE+9BsMZB9+2n11yB
4XYn5brJ2SQttIdsUb+If7tvqHmExhVIY3Q9lvGjIPpsjVpvtvbTbqzjuXqXU76D
fHlkjbCOQLQESmopnmQAj0jixBBKnn1vi8Gui5yoOgTN3Q==
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:25:41 2026 by rpki-client