This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3234203d3e203631343638.roa
File:                     34352e3233352e3134302e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          6+mDNQ2ERW5vgh/VJKx8cbwoewSX5uRMyLevTXLhFzY=
Subject key identifier:   BC:F5:CF:87:24:DB:E5:1A:AC:AA:85:1C:14:EC:13:2A:69:83:70:C0
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       593B2F3583BF2F58F14702DE87A1E230CAE30681
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 06 Jan 2026 19:03:24 +0000
ROA not before:           Tue 06 Jan 2026 18:58:24 +0000
ROA not after:            Tue 05 Jan 2027 19:03:24 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Jan 2026 09:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3b:2f:35:83:bf:2f:58:f1:47:02:de:87:a1:e2:30:ca:e3:06:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Jan  6 18:58:24 2026 GMT
            Not After : Jan  5 19:03:24 2027 GMT
        Subject: CN=BCF5CF8724DBE51AACAA851C14EC132A698370C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:dd:7a:e1:2d:1e:28:f9:ec:02:68:68:31:
                    d1:8e:d0:74:a0:3e:96:8f:5f:00:77:4e:0d:74:ee:
                    c8:ac:da:03:89:b8:e3:d4:fc:e8:2e:cb:67:6a:9d:
                    8a:46:3c:99:d3:7b:9e:16:16:66:d8:e6:c5:ab:3d:
                    5d:4b:4d:c8:99:ad:80:05:28:c6:32:5f:22:50:de:
                    62:c3:d5:fe:e9:01:e4:bf:c3:42:95:1e:b8:ff:2a:
                    f7:ed:f9:f9:9e:01:7a:f6:a6:15:3f:a0:97:2c:4b:
                    e5:d9:25:e5:1b:25:75:10:05:9f:7c:ce:04:cc:62:
                    bc:73:7f:2f:ed:61:8c:ca:51:8a:5c:af:d9:1f:27:
                    36:0f:f2:a0:b3:4d:ef:98:fc:15:77:2d:47:51:08:
                    20:9f:64:72:f2:e6:f8:e0:d5:17:3a:79:98:1b:1b:
                    d5:fb:82:ed:49:91:6d:c7:2e:0f:b2:7c:de:93:27:
                    ad:91:92:ff:13:e8:1d:01:07:99:42:77:ce:75:94:
                    07:5a:09:65:87:b6:e6:75:b2:83:fa:03:a2:88:4a:
                    ef:c0:0a:46:fb:3a:d2:41:23:b2:f7:54:29:dc:d8:
                    84:51:fc:9d:77:93:86:ef:5a:22:e3:c0:e6:13:67:
                    b8:5f:4b:5c:78:2a:88:7c:c3:ba:de:9d:12:b6:b9:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:CF:87:24:DB:E5:1A:AC:AA:85:1C:14:EC:13:2A:69:83:70:C0
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:6e:8f:9d:d0:c5:e7:c7:44:3d:a4:e2:1b:71:a4:bb:a1:
         e7:fc:55:06:a0:58:71:a7:53:35:a8:54:a9:59:09:62:0a:ac:
         d1:a3:86:ee:e6:55:23:9e:6d:e6:29:a4:3d:df:02:c2:e7:3f:
         45:54:a1:ca:11:bb:ba:1a:4e:da:5c:6d:b3:b7:cb:d2:74:90:
         1b:99:71:c8:b2:34:e6:d6:7a:6c:3d:7b:42:5e:92:8d:8a:bf:
         ce:51:6b:0f:1b:41:fa:92:34:90:32:34:7f:e2:42:20:66:a4:
         39:17:24:4c:a1:e1:bf:f9:f5:5d:bb:46:fc:84:75:5e:17:08:
         fc:ea:72:a1:75:bf:e5:db:47:63:85:7a:e1:28:a9:85:5a:97:
         5f:9b:1a:1e:11:64:f2:74:7e:e8:b8:c6:da:38:10:eb:f8:e9:
         ba:12:a3:5b:d5:cd:fa:28:00:9c:26:62:67:f2:b5:46:f1:30:
         40:06:46:fb:9e:80:e1:77:81:6a:f8:74:8e:fa:51:3b:2f:2b:
         79:98:65:c8:f3:3a:5c:76:ea:b6:d2:0a:72:eb:7f:e4:0c:04:
         dd:a4:f3:79:51:f3:e6:e5:b6:40:b0:40:b6:99:21:3d:71:e7:
         81:99:a8:bf:25:a9:84:77:1b:0f:a4:b3:be:37:68:f3:9c:a4:
         de:dd:28:93
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWTsvNYO/L1jxRwLeh6HiMMrjBoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxRDAwNkJCREY3MDJBQzkxNEZENzlGMjA1NUExMUU5
Njk5Nzc1RDAeFw0yNjAxMDYxODU4MjRaFw0yNzAxMDUxOTAzMjRaMDMxMTAvBgNV
BAMTKEJDRjVDRjg3MjREQkU1MUFBQ0FBODUxQzE0RUMxMzJBNjk4MzcwQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCil9164S0eKPnsAmhoMdGO0HSg
PpaPXwB3Tg107sis2gOJuOPU/Oguy2dqnYpGPJnTe54WFmbY5sWrPV1LTciZrYAF
KMYyXyJQ3mLD1f7pAeS/w0KVHrj/Kvft+fmeAXr2phU/oJcsS+XZJeUbJXUQBZ98
zgTMYrxzfy/tYYzKUYpcr9kfJzYP8qCzTe+Y/BV3LUdRCCCfZHLy5vjg1Rc6eZgb
G9X7gu1JkW3HLg+yfN6TJ62Rkv8T6B0BB5lCd851lAdaCWWHtuZ1soP6A6KISu/A
Ckb7OtJBI7L3VCnc2IRR/J13k4bvWiLjwOYTZ7hfS1x4Koh8w7renRK2uZA3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvPXPhyTb5RqsqoUcFOwTKmmDcMAwHwYDVR0j
BBgwFoAUhR0Aa733AqyRT9efIFWhHpaZd10wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjQyQzBBNTk0NEUyNDU2RjEyQUJCNThFMkZFMEFDMUU1
REQ0MUQzMzA2MjA1RTQ5NzRFREZFOEVFRjdENjlFLzAvODUxRDAwNkJCREY3MDJB
QzkxNEZENzlGMjA1NUExMUU5Njk5Nzc1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTFEMDA2QkJERjcwMkFDOTE0
RkQ3OUYyMDU1QTExRTk2OTk3NzVELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI0MkMwQTU5NDRFMjQ1NkYxMkFCQjU4RTJGRTBBQzFFNURENDFEMzMw
NjIwNUU0OTc0RURGRThFRUY3RDY5RS8wLzM0MzUyZTMyMzMzNTJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3rjDAN
BgkqhkiG9w0BAQsFAAOCAQEAD3Vuj53QxefHRD2k4htxpLuh5/xVBqBYcadTNahU
qVkJYgqs0aOG7uZVI55t5imkPd8Cwuc/RVShyhG7uhpO2lxts7fL0nSQG5lxyLI0
5tZ6bD17Ql6SjYq/zlFrDxtB+pI0kDI0f+JCIGakORckTKHhv/n1XbtG/IR1XhcI
/OpyoXW/5dtHY4V64SiphVqXX5saHhFk8nR+6LjG2jgQ6/jpuhKjW9XN+igAnCZi
Z/K1RvEwQAZG+56A4XeBavh0jvpROy8reZhlyPM6XHbqttIKcut/5AwE3aTzeVHz
5uW2QLBAtpkhPXHngZmovyWphHcbD6Szvjdo85yk3t0okw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:25:47 2026 by rpki-client