This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/34352e3232352e3232352e302f32342d3234203d3e203237393531.roa
File:                     34352e3232352e3232352e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          603d426CFFL487jjyBNcMY1PTVBRfnSnU1UkCYaRJuk=
Subject key identifier:   D6:63:AB:8F:9D:C0:80:A1:EE:12:90:5E:EF:3F:2E:BF:DE:A4:BC:C9
Certificate issuer:       /CN=F341739AE08457A031B734E9D432A5F3E22893FE
Certificate serial:       24A2EEC31760F804DD43AF10202A2EA54384BB12
Authority key identifier: F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/34352e3232352e3232352e302f32342d3234203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 19:03:30 +0000
ROA not before:           Tue 06 Jan 2026 18:58:30 +0000
ROA not after:            Tue 05 Jan 2027 19:03:30 +0000
asID:                     27951
IP address blocks:        45.225.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a2:ee:c3:17:60:f8:04:dd:43:af:10:20:2a:2e:a5:43:84:bb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F341739AE08457A031B734E9D432A5F3E22893FE
        Validity
            Not Before: Jan  6 18:58:30 2026 GMT
            Not After : Jan  5 19:03:30 2027 GMT
        Subject: CN=D663AB8F9DC080A1EE12905EEF3F2EBFDEA4BCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:26:7b:88:95:96:14:cc:ec:1c:b9:95:6d:
                    04:90:01:90:62:fe:6e:56:e1:73:da:18:6c:bb:70:
                    ec:1b:6d:99:37:51:b9:54:80:fe:fc:15:ce:5b:af:
                    70:ba:80:99:12:20:74:d7:1c:7d:2e:08:f6:65:a1:
                    f6:65:7e:29:28:bd:67:dc:9d:7c:12:66:04:24:c4:
                    46:75:f3:5e:6e:89:27:59:68:06:f6:d7:71:a2:34:
                    ba:f1:f4:12:6a:b8:9d:d3:4b:02:9f:25:f4:4a:0e:
                    29:b9:4a:fb:67:02:e9:8e:fe:b9:05:dc:96:17:8b:
                    8f:85:a1:45:ed:be:55:a1:10:67:19:79:c6:a7:56:
                    df:a6:ff:8a:93:a7:99:fd:a7:ad:ce:3a:80:ae:1d:
                    90:0d:c6:dc:94:e4:8b:79:05:c7:c0:61:95:00:2c:
                    87:d0:fa:ff:7f:bc:b5:b9:fd:82:6d:28:ac:33:a7:
                    c4:45:8e:32:27:a2:f5:11:89:73:92:1b:80:0c:c7:
                    45:e2:2e:85:56:6a:3e:23:91:b5:9f:ca:b4:2b:9b:
                    64:e8:b4:27:7f:82:7a:d3:76:de:9e:5a:0c:aa:99:
                    fb:52:4e:9a:b5:41:48:7e:f5:13:15:53:26:3c:bd:
                    b3:f0:2d:db:87:02:08:6a:39:b0:f3:3a:8c:f9:34:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:63:AB:8F:9D:C0:80:A1:EE:12:90:5E:EF:3F:2E:BF:DE:A4:BC:C9
            X509v3 Authority Key Identifier:
                keyid:F3:41:73:9A:E0:84:57:A0:31:B7:34:E9:D4:32:A5:F3:E2:28:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/F341739AE08457A031B734E9D432A5F3E22893FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F341739AE08457A031B734E9D432A5F3E22893FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED84AD638AFA0E6AA91AA69FD49C6043E9010D59CA1477EC5E4222073D7642A/0/34352e3232352e3232352e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:5d:30:53:39:5c:9f:b2:8e:f9:13:8a:61:a0:02:3a:8d:
         24:8a:d4:f3:b1:ba:88:46:36:fa:d7:54:f0:dd:03:fd:38:5b:
         87:44:4c:c2:6b:19:64:f3:80:2d:fb:87:6d:04:37:7a:15:c6:
         eb:7f:a1:0b:ae:88:fc:cb:7c:94:5a:5b:9e:75:e4:0e:cc:7d:
         fe:f0:47:a5:c2:d8:51:4c:79:5d:25:75:b6:cb:28:05:cd:54:
         47:65:de:a4:a4:a5:af:34:1c:65:94:90:65:b9:e6:5b:a2:81:
         1d:ec:59:0e:67:4d:ea:0e:ac:bd:aa:bf:8f:68:dd:a8:76:13:
         c6:34:a5:fe:5b:23:df:5d:e7:f4:52:b1:ed:10:61:a3:18:37:
         b2:3b:dd:1c:50:b5:89:ad:81:42:ab:0f:1d:9d:9a:c2:36:b9:
         99:e2:b6:f5:04:c7:1a:59:3e:f9:21:0b:b5:c6:f4:2a:9b:57:
         9b:03:d3:eb:e5:ef:03:62:49:15:db:77:04:5b:ed:0a:70:66:
         a9:46:6c:13:23:68:62:a2:d7:94:a9:79:77:c4:2f:88:71:4a:
         73:c8:8c:20:a2:34:08:d5:9e:83:ea:8a:87:f5:55:5f:ac:19:
         78:1b:1b:96:85:42:2d:fc:72:96:db:66:23:12:2e:52:bf:58:
         47:55:c0:bd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJKLuwxdg+ATdQ68QICoupUOEuxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0MTczOUFFMDg0NTdBMDMxQjczNEU5RDQzMkE1RjNF
MjI4OTNGRTAeFw0yNjAxMDYxODU4MzBaFw0yNzAxMDUxOTAzMzBaMDMxMTAvBgNV
BAMTKEQ2NjNBQjhGOURDMDgwQTFFRTEyOTA1RUVGM0YyRUJGREVBNEJDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2iZ7iJWWFMzsHLmVbQSQAZBi
/m5W4XPaGGy7cOwbbZk3UblUgP78Fc5br3C6gJkSIHTXHH0uCPZlofZlfikovWfc
nXwSZgQkxEZ1815uiSdZaAb213GiNLrx9BJquJ3TSwKfJfRKDim5SvtnAumO/rkF
3JYXi4+FoUXtvlWhEGcZecanVt+m/4qTp5n9p63OOoCuHZANxtyU5It5BcfAYZUA
LIfQ+v9/vLW5/YJtKKwzp8RFjjInovURiXOSG4AMx0XiLoVWaj4jkbWfyrQrm2To
tCd/gnrTdt6eWgyqmftSTpq1QUh+9RMVUyY8vbPwLduHAghqObDzOoz5NE/jAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1mOrj53AgKHuEpBe7z8uv96kvMkwHwYDVR0j
BBgwFoAU80FzmuCEV6AxtzTp1DKl8+Iok/4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUQ4NEFENjM4QUZBMEU2QUE5MUFBNjlGRDQ5QzYwNDNF
OTAxMEQ1OUNBMTQ3N0VDNUU0MjIyMDczRDc2NDJBLzAvRjM0MTczOUFFMDg0NTdB
MDMxQjczNEU5RDQzMkE1RjNFMjI4OTNGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMzQxNzM5QUUwODQ1N0EwMzFC
NzM0RTlENDMyQTVGM0UyMjg5M0ZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVEODRBRDYzOEFGQTBFNkFBOTFBQTY5RkQ0OUM2MDQzRTkwMTBENTlD
QTE0NzdFQzVFNDIyMjA3M0Q3NjQyQS8wLzM0MzUyZTMyMzIzNTJlMzIzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3h4TAN
BgkqhkiG9w0BAQsFAAOCAQEAOh5dMFM5XJ+yjvkTimGgAjqNJIrU87G6iEY2+tdU
8N0D/Thbh0RMwmsZZPOALfuHbQQ3ehXG63+hC66I/Mt8lFpbnnXkDsx9/vBHpcLY
UUx5XSV1tssoBc1UR2XepKSlrzQcZZSQZbnmW6KBHexZDmdN6g6svaq/j2jdqHYT
xjSl/lsj313n9FKx7RBhoxg3sjvdHFC1ia2BQqsPHZ2awja5meK29QTHGlk++SEL
tcb0KptXmwPT6+XvA2JJFdt3BFvtCnBmqUZsEyNoYqLXlKl5d8QviHFKc8iMIKI0
CNWeg+qKh/VVX6wZeBsbloVCLfxylttmIxIuUr9YR1XAvQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:49 2026 by rpki-client