This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/34352e3233312e3130342e302f32322d3234203d3e20323633363839.roa
File:                     34352e3233312e3130342e302f32322d3234203d3e20323633363839.roa (raw, json)
Hash identifier:          cDM3Mihx8N5eLp8qn7evjx0r2pHsgfCUsKc49FCTWeU=
Subject key identifier:   AA:04:3D:00:DE:82:73:F9:E9:4A:B7:58:E3:A3:90:4E:C4:9E:25:46
Certificate issuer:       /CN=701A710C7B4945AFB1D3F487ADF5526472D4B798
Certificate serial:       5420794F9FE400FDFA73BCBDFA3EA2B133B1F531
Authority key identifier: 70:1A:71:0C:7B:49:45:AF:B1:D3:F4:87:AD:F5:52:64:72:D4:B7:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/34352e3233312e3130342e302f32322d3234203d3e20323633363839.roa
Signing time:             Tue 06 Jan 2026 20:50:35 +0000
ROA not before:           Tue 06 Jan 2026 20:45:35 +0000
ROA not after:            Tue 05 Jan 2027 20:50:35 +0000
asID:                     263689
IP address blocks:        45.231.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 21:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:20:79:4f:9f:e4:00:fd:fa:73:bc:bd:fa:3e:a2:b1:33:b1:f5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701A710C7B4945AFB1D3F487ADF5526472D4B798
        Validity
            Not Before: Jan  6 20:45:35 2026 GMT
            Not After : Jan  5 20:50:35 2027 GMT
        Subject: CN=AA043D00DE8273F9E94AB758E3A3904EC49E2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:3a:fb:89:36:56:8a:63:5a:81:b5:8d:05:
                    02:29:ef:48:93:ca:f5:a6:47:fc:59:7a:f5:9b:f9:
                    f2:58:57:23:10:6a:10:8b:94:a9:99:cb:ab:07:75:
                    11:88:53:29:37:47:69:96:04:d4:e7:d1:3a:5d:51:
                    78:02:97:7e:04:93:a2:5c:68:cd:61:df:b8:68:a5:
                    cf:91:7b:39:29:2d:f8:c3:cb:41:61:f8:a4:18:df:
                    eb:64:a0:77:d1:7f:6c:ef:f4:a2:40:8d:2f:c1:95:
                    38:98:dd:77:8d:0b:7c:55:a0:ff:fd:d9:b3:50:3f:
                    95:da:28:0d:ca:7e:0f:ac:d7:1b:b9:db:6d:68:33:
                    33:54:a7:95:57:d7:48:ce:5b:62:78:3e:f0:f3:83:
                    1b:db:2b:40:5d:68:8c:ba:ad:c5:68:4b:8a:41:16:
                    16:cf:f3:72:17:dd:ac:a8:c9:d5:b2:53:41:1e:d9:
                    a9:c9:e5:6a:a1:2a:5a:10:b1:9b:90:6a:a2:34:37:
                    0d:cd:eb:6d:8e:cd:98:fa:3a:4f:5d:e4:23:ee:64:
                    c3:92:20:1b:d5:b9:c0:1f:4c:ed:c1:74:5d:c4:09:
                    b8:52:d4:51:00:ef:41:43:a7:86:91:52:c7:8d:5a:
                    41:b6:6b:76:f4:e0:24:86:7d:39:25:10:32:4d:50:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:3D:00:DE:82:73:F9:E9:4A:B7:58:E3:A3:90:4E:C4:9E:25:46
            X509v3 Authority Key Identifier:
                keyid:70:1A:71:0C:7B:49:45:AF:B1:D3:F4:87:AD:F5:52:64:72:D4:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/34352e3233312e3130342e302f32322d3234203d3e20323633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:71:bb:40:7e:fa:ee:89:3f:01:16:3d:f9:78:7d:63:32:
         0b:28:45:64:42:48:35:e3:23:cd:f9:ae:40:87:67:33:ca:1b:
         6d:e5:5f:dc:9c:9c:5e:4f:2d:15:f4:ef:26:1a:03:2a:72:fa:
         8f:31:21:8e:67:e2:ff:c3:98:e4:14:e4:e3:87:30:40:40:20:
         b0:60:5c:88:6a:95:4c:93:41:3f:0a:2f:43:08:30:81:bb:14:
         e7:19:7a:6f:39:0b:b8:87:69:1e:86:fe:ee:08:09:aa:88:d3:
         1a:93:ab:63:bd:db:4f:f4:ae:45:de:21:b1:37:11:0d:34:6c:
         e2:84:8a:ff:1f:cb:5b:0e:5a:48:3d:8c:d1:d8:f6:20:6b:63:
         ea:d0:f2:37:40:88:2a:0e:27:e5:6b:8f:c8:de:e9:22:5b:bc:
         33:f6:fa:d1:7b:6b:47:be:1d:b4:db:65:e8:18:01:fa:bb:f2:
         87:4e:8d:57:41:1e:85:ec:71:6e:dc:a5:61:87:96:d1:e9:4c:
         e6:61:32:b2:05:06:33:f4:91:65:8e:e3:8d:f6:62:e4:14:f1:
         42:03:8c:25:fc:81:6f:35:da:6e:9d:84:ba:bf:20:e3:7c:66:
         d3:3c:96:26:ea:f1:f9:87:0c:7b:63:da:d8:97:54:18:99:7d:
         74:08:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:12:24 2026 by rpki-client