This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03F888EBA74869DBA1334916A08AC126039599947A03095A373950F414C20BEB/0/34352e3232342e32382e302f32322d3234203d3e20323635383335.roa
File:                     34352e3232342e32382e302f32322d3234203d3e20323635383335.roa (raw, json)
Hash identifier:          IUJgvx1jv+BdK1ETZCqwxav3Ci0MDaXc+GanRwJflNc=
Subject key identifier:   E7:26:0E:12:AB:02:51:D6:40:21:C6:3F:85:34:97:D1:1D:8D:6B:40
Certificate issuer:       /CN=9C2B9D6548DE9B20F9025DC759F9761A3D463E62
Certificate serial:       7882AA6E8BBEED654F7F32FBE52A9FBA545A682F
Authority key identifier: 9C:2B:9D:65:48:DE:9B:20:F9:02:5D:C7:59:F9:76:1A:3D:46:3E:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C2B9D6548DE9B20F9025DC759F9761A3D463E62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03F888EBA74869DBA1334916A08AC126039599947A03095A373950F414C20BEB/0/34352e3232342e32382e302f32322d3234203d3e20323635383335.roa
Signing time:             Tue 06 Jan 2026 19:00:45 +0000
ROA not before:           Tue 06 Jan 2026 18:55:45 +0000
ROA not after:            Tue 05 Jan 2027 19:00:45 +0000
asID:                     265835
IP address blocks:        45.224.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03F888EBA74869DBA1334916A08AC126039599947A03095A373950F414C20BEB/0/9C2B9D6548DE9B20F9025DC759F9761A3D463E62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03F888EBA74869DBA1334916A08AC126039599947A03095A373950F414C20BEB/0/9C2B9D6548DE9B20F9025DC759F9761A3D463E62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C2B9D6548DE9B20F9025DC759F9761A3D463E62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:82:aa:6e:8b:be:ed:65:4f:7f:32:fb:e5:2a:9f:ba:54:5a:68:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C2B9D6548DE9B20F9025DC759F9761A3D463E62
        Validity
            Not Before: Jan  6 18:55:45 2026 GMT
            Not After : Jan  5 19:00:45 2027 GMT
        Subject: CN=E7260E12AB0251D64021C63F853497D11D8D6B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:86:59:9e:4c:7a:94:09:aa:a6:1b:2d:7f:
                    b8:4b:1e:a9:c5:ce:07:19:8a:bf:bb:99:75:9c:68:
                    96:3a:41:97:fd:69:14:00:f3:a0:53:8e:e9:5f:d5:
                    b7:b3:84:a3:06:ce:91:e5:5e:2d:54:e0:b8:a3:9d:
                    e7:95:16:1d:af:01:79:04:f1:a1:11:0c:bb:44:7a:
                    e0:f0:20:54:f1:f4:5a:49:ec:cb:b3:f2:33:74:39:
                    14:cb:42:bf:62:dd:d4:ae:b6:4c:cf:12:81:b3:8b:
                    af:fb:1f:ed:10:a1:f5:8d:69:3b:7f:86:08:d6:1b:
                    23:97:40:a6:3a:4c:c0:45:45:bc:58:22:3a:da:de:
                    8c:d8:15:80:0a:03:38:ea:a3:bf:a1:34:2e:66:78:
                    86:ec:12:2d:7b:9a:97:a5:11:19:24:5a:54:87:ba:
                    24:9e:d1:47:26:6f:c4:02:d8:7a:8c:84:85:76:61:
                    e3:b4:d4:b4:ef:58:2e:df:64:0c:c9:d6:bb:33:94:
                    1b:d8:dd:42:b9:0b:72:00:1c:ff:fd:a6:11:80:3d:
                    65:9a:3c:ea:8d:1f:a2:20:52:03:ba:aa:95:96:46:
                    7c:05:af:74:13:cd:25:ab:91:4d:fc:3f:78:87:7d:
                    83:81:93:19:84:72:04:0c:32:7e:53:a0:c6:28:2d:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:26:0E:12:AB:02:51:D6:40:21:C6:3F:85:34:97:D1:1D:8D:6B:40
            X509v3 Authority Key Identifier:
                keyid:9C:2B:9D:65:48:DE:9B:20:F9:02:5D:C7:59:F9:76:1A:3D:46:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03F888EBA74869DBA1334916A08AC126039599947A03095A373950F414C20BEB/0/9C2B9D6548DE9B20F9025DC759F9761A3D463E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C2B9D6548DE9B20F9025DC759F9761A3D463E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03F888EBA74869DBA1334916A08AC126039599947A03095A373950F414C20BEB/0/34352e3232342e32382e302f32322d3234203d3e20323635383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:02:10:e7:5c:8f:4e:90:eb:9c:09:65:ee:69:0f:c2:76:57:
         ad:a8:28:3f:14:c5:a6:88:96:2f:42:f3:70:f0:fe:91:2b:83:
         e0:85:15:11:6a:05:0d:58:cc:12:bb:00:f9:ce:9c:a1:00:a9:
         5f:f3:c0:6b:ec:81:e9:44:ea:64:0f:b5:58:e3:65:1e:d3:52:
         f9:b6:90:f6:61:69:86:6b:4d:0e:87:b4:9b:f3:94:c9:7f:d6:
         2c:a3:9c:82:c8:b8:57:06:61:6f:4b:30:ee:cb:d2:04:07:5e:
         6b:b6:10:62:1f:e4:ba:c2:09:13:1f:c7:7e:80:0a:79:ed:5e:
         d2:98:c6:45:25:79:7c:7b:cc:89:6d:ed:45:d1:83:9f:52:10:
         03:60:b3:9c:24:ac:38:06:8a:6b:10:52:21:9d:74:55:e1:20:
         64:96:97:31:eb:7b:86:1b:f5:33:55:19:05:2d:e8:ac:6a:50:
         09:28:4c:d8:41:d9:bd:ec:4a:90:8e:8a:11:ed:bc:5f:70:d1:
         f7:84:f4:ac:ee:de:3f:b1:f2:a2:fb:42:44:9a:24:71:e4:80:
         55:80:4e:1f:33:a4:ed:33:8c:9d:7c:4d:9d:79:a0:41:f6:ae:
         10:ee:66:b1:2c:f8:ff:9d:15:80:c6:92:f2:c2:0c:1c:5e:5d:
         11:80:1f:8d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeIKqbou+7WVPfzL75SqfulRaaC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMyQjlENjU0OERFOUIyMEY5MDI1REM3NTlGOTc2MUEz
RDQ2M0U2MjAeFw0yNjAxMDYxODU1NDVaFw0yNzAxMDUxOTAwNDVaMDMxMTAvBgNV
BAMTKEU3MjYwRTEyQUIwMjUxRDY0MDIxQzYzRjg1MzQ5N0QxMUQ4RDZCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVIZZnkx6lAmqphstf7hLHqnF
zgcZir+7mXWcaJY6QZf9aRQA86BTjulf1bezhKMGzpHlXi1U4LijneeVFh2vAXkE
8aERDLtEeuDwIFTx9FpJ7Muz8jN0ORTLQr9i3dSutkzPEoGzi6/7H+0QofWNaTt/
hgjWGyOXQKY6TMBFRbxYIjra3ozYFYAKAzjqo7+hNC5meIbsEi17mpelERkkWlSH
uiSe0Ucmb8QC2HqMhIV2YeO01LTvWC7fZAzJ1rszlBvY3UK5C3IAHP/9phGAPWWa
POqNH6IgUgO6qpWWRnwFr3QTzSWrkU38P3iHfYOBkxmEcgQMMn5ToMYoLZVTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5yYOEqsCUdZAIcY/hTSX0R2Na0AwHwYDVR0j
BBgwFoAUnCudZUjemyD5Al3HWfl2Gj1GPmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wM0Y4ODhFQkE3NDg2OURCQTEzMzQ5MTZBMDhBQzEyNjAz
OTU5OTk0N0EwMzA5NUEzNzM5NTBGNDE0QzIwQkVCLzAvOUMyQjlENjU0OERFOUIy
MEY5MDI1REM3NTlGOTc2MUEzRDQ2M0U2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzJCOUQ2NTQ4REU5QjIwRjkw
MjVEQzc1OUY5NzYxQTNENDYzRTYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDNGODg4RUJBNzQ4NjlEQkExMzM0OTE2QTA4QUMxMjYwMzk1OTk5NDdB
MDMwOTVBMzczOTUwRjQxNEMyMEJFQi8wLzM0MzUyZTMyMzIzNDJlMzIzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3gHDAN
BgkqhkiG9w0BAQsFAAOCAQEAEgIQ51yPTpDrnAll7mkPwnZXragoPxTFpoiWL0Lz
cPD+kSuD4IUVEWoFDVjMErsA+c6coQCpX/PAa+yB6UTqZA+1WONlHtNS+baQ9mFp
hmtNDoe0m/OUyX/WLKOcgsi4VwZhb0sw7svSBAdea7YQYh/kusIJEx/HfoAKee1e
0pjGRSV5fHvMiW3tRdGDn1IQA2CznCSsOAaKaxBSIZ10VeEgZJaXMet7hhv1M1UZ
BS3orGpQCShM2EHZvexKkI6KEe28X3DR94T0rO7eP7HyovtCRJokceSAVYBOHzOk
7TOMnXxNnXmgQfauEO5msSz4/50VgMaS8sIMHF5dEYAfjQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:13 2026 by rpki-client