This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
File:                     34352e3232382e35362e302f32322d3235203d3e20323632313936.roa (raw, json)
Hash identifier:          sXojk9ubDWRho2PgNuTbbnkW36yeyMxFvxD8MNEEKwA=
Subject key identifier:   E2:80:4D:E5:CE:C6:34:3D:60:D7:3D:14:CB:61:F2:7C:19:0F:15:BF
Certificate issuer:       /CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97
Certificate serial:       04C9E06B25D003790647855DBB00567E5A52020D
Authority key identifier: 47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
Signing time:             Tue 06 Jan 2026 19:10:03 +0000
ROA not before:           Tue 06 Jan 2026 19:05:03 +0000
ROA not after:            Tue 05 Jan 2027 19:10:03 +0000
asID:                     262196
IP address blocks:        45.228.56.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c9:e0:6b:25:d0:03:79:06:47:85:5d:bb:00:56:7e:5a:52:02:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97
        Validity
            Not Before: Jan  6 19:05:03 2026 GMT
            Not After : Jan  5 19:10:03 2027 GMT
        Subject: CN=E2804DE5CEC6343D60D73D14CB61F27C190F15BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:d1:f2:73:aa:03:e5:bb:5d:81:dc:21:b9:
                    fe:43:03:ff:a7:6f:2d:4a:87:c6:4c:d4:e8:53:8b:
                    88:df:b1:f6:56:81:45:ea:34:6a:96:05:97:b0:d5:
                    4c:ba:6d:47:27:43:ad:25:3e:d6:83:8d:b1:25:ba:
                    66:9b:96:40:86:87:30:5e:46:72:df:b7:d2:6d:20:
                    63:bd:72:e3:51:27:86:02:dd:58:7d:e9:08:4b:23:
                    a8:26:2f:f8:34:d5:a6:e1:b6:8a:de:9f:f8:eb:49:
                    eb:79:a7:b8:ae:7a:0b:16:78:67:ae:c1:8f:40:64:
                    23:6b:4b:b2:c2:db:10:02:c7:5a:a2:61:86:81:9d:
                    42:98:bf:c3:c9:13:26:2a:35:b1:b3:cd:69:68:56:
                    52:56:13:cc:19:af:46:3b:1c:88:4e:e5:06:b9:66:
                    ac:85:21:5c:29:10:7f:6d:a6:e0:37:1b:95:ae:96:
                    57:eb:c3:0a:84:ba:23:4d:9d:9b:48:c7:2d:29:d1:
                    0b:41:a3:75:80:30:99:12:5b:41:a2:83:30:50:d7:
                    4d:4f:84:31:68:f0:f4:c7:83:d5:6c:66:4d:5a:20:
                    33:5f:ea:ec:ab:d7:62:43:aa:ac:4f:39:25:2d:39:
                    11:d6:cd:40:01:de:e7:55:9c:a7:7f:95:5f:ed:fc:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:80:4D:E5:CE:C6:34:3D:60:D7:3D:14:CB:61:F2:7C:19:0F:15:BF
            X509v3 Authority Key Identifier:
                keyid:47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:17:2c:41:0a:36:b8:86:e8:0d:42:9e:29:20:3b:2b:05:
         2b:c4:08:aa:72:ab:52:47:3b:07:a3:96:ce:9d:b6:7c:46:a3:
         f7:bc:45:b3:fe:55:e4:b2:03:eb:d0:00:fd:56:9a:48:3c:53:
         59:09:77:78:f0:c0:3a:94:60:6d:b1:a1:ac:5f:cd:7c:89:0a:
         f1:63:32:7f:2a:34:d2:1e:e1:0e:d8:02:78:13:7e:fc:5f:3b:
         75:bf:29:53:f9:cc:4b:88:33:e7:cb:80:55:fd:a2:0d:fb:fe:
         e4:b8:24:bb:81:cf:7e:53:08:28:53:47:63:62:11:8f:54:eb:
         30:6e:f1:6a:79:2f:fc:48:e5:77:2b:bc:8a:5e:a7:cc:92:6d:
         f6:f3:c6:19:78:a6:bc:43:09:63:af:c7:a1:5c:5f:53:1d:ee:
         62:3a:fb:ff:0d:59:89:15:c2:cf:9f:a1:e7:be:da:03:03:f8:
         c4:de:85:75:26:dd:7f:11:f5:15:98:0a:0d:a9:c2:de:d0:55:
         05:1d:80:68:99:3a:cc:c1:38:58:10:72:4e:f5:91:12:86:dd:
         f8:68:62:e3:72:ff:58:95:09:fa:9a:30:ed:0f:25:96:6f:9d:
         67:6f:d5:f7:f4:42:3b:b7:ac:c9:86:61:a5:a6:10:30:d7:97:
         04:4a:df:b9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBMngayXQA3kGR4VduwBWflpSAg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2RUI2MUYxN0I0OUNEODhBMERCNkFCRUQyRTk2NkE2
MUFBQUE5NzAeFw0yNjAxMDYxOTA1MDNaFw0yNzAxMDUxOTEwMDNaMDMxMTAvBgNV
BAMTKEUyODA0REU1Q0VDNjM0M0Q2MEQ3M0QxNENCNjFGMjdDMTkwRjE1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68dHyc6oD5btdgdwhuf5DA/+n
by1Kh8ZM1OhTi4jfsfZWgUXqNGqWBZew1Uy6bUcnQ60lPtaDjbElumablkCGhzBe
RnLft9JtIGO9cuNRJ4YC3Vh96QhLI6gmL/g01abhtoren/jrSet5p7iuegsWeGeu
wY9AZCNrS7LC2xACx1qiYYaBnUKYv8PJEyYqNbGzzWloVlJWE8wZr0Y7HIhO5Qa5
ZqyFIVwpEH9tpuA3G5WullfrwwqEuiNNnZtIxy0p0QtBo3WAMJkSW0GigzBQ101P
hDFo8PTHg9VsZk1aIDNf6uyr12JDqqxPOSUtORHWzUAB3udVnKd/lV/t/OG9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4oBN5c7GND1g1z0Uy2HyfBkPFb8wHwYDVR0j
BBgwFoAUR262Hxe0nNiKDbar7S6WamGqqpcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQUJFREZDQjJGMkVEMTIwRjA4NTFDRTJFODdCRDczNkVG
ODE5MEMxNzNBQkM4NURCNUExMDQ3RTU4MTg3MTM2LzAvNDc2RUI2MUYxN0I0OUNE
ODhBMERCNkFCRUQyRTk2NkE2MUFBQUE5Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZFQjYxRjE3QjQ5Q0Q4OEEw
REI2QUJFRDJFOTY2QTYxQUFBQTk3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0FCRURGQ0IyRjJFRDEyMEYwODUxQ0UyRTg3QkQ3MzZFRjgxOTBDMTcz
QUJDODVEQjVBMTA0N0U1ODE4NzEzNi8wLzM0MzUyZTMyMzIzODJlMzUzNjJlMzAy
ZjMyMzIyZDMyMzUyMDNkM2UyMDMyMzYzMjMxMzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3kODAN
BgkqhkiG9w0BAQsFAAOCAQEAPrEXLEEKNriG6A1CnikgOysFK8QIqnKrUkc7B6OW
zp22fEaj97xFs/5V5LID69AA/VaaSDxTWQl3ePDAOpRgbbGhrF/NfIkK8WMyfyo0
0h7hDtgCeBN+/F87db8pU/nMS4gz58uAVf2iDfv+5Lgku4HPflMIKFNHY2IRj1Tr
MG7xankv/Ejldyu8il6nzJJt9vPGGXimvEMJY6/HoVxfUx3uYjr7/w1ZiRXCz5+h
577aAwP4xN6FdSbdfxH1FZgKDanC3tBVBR2AaJk6zME4WBByTvWREobd+Ghi43L/
WJUJ+pow7Q8llm+dZ2/V9/RCO7esyYZhpaYQMNeXBErfuQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:17 2026 by rpki-client