This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/839DFCB2C41E5CEB4D6451F7AAA3CCB7E433C5FAA0FE0B95B953139F7FA2C5C1/0/34352e3232342e3232382e302f32322d3232203d3e20323635383439.roa
File:                     34352e3232342e3232382e302f32322d3232203d3e20323635383439.roa (raw, json)
Hash identifier:          uCS3U4zk5PgE0Y+6TCaIV1PpbKvFpsq6VH8OtJvG8vE=
Subject key identifier:   D3:71:C2:08:52:E0:7A:F1:AB:E1:13:57:82:4D:F5:30:4A:21:50:B6
Certificate issuer:       /CN=FC6ED6A0AB4832209F1D12BB47787225007C51D7
Certificate serial:       0C2B022E0C319FB430B82AC5B55E79E13650F79A
Authority key identifier: FC:6E:D6:A0:AB:48:32:20:9F:1D:12:BB:47:78:72:25:00:7C:51:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6ED6A0AB4832209F1D12BB47787225007C51D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/839DFCB2C41E5CEB4D6451F7AAA3CCB7E433C5FAA0FE0B95B953139F7FA2C5C1/0/34352e3232342e3232382e302f32322d3232203d3e20323635383439.roa
Signing time:             Tue 06 Jan 2026 19:45:21 +0000
ROA not before:           Tue 06 Jan 2026 19:40:21 +0000
ROA not after:            Tue 05 Jan 2027 19:45:21 +0000
asID:                     265849
IP address blocks:        45.224.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/839DFCB2C41E5CEB4D6451F7AAA3CCB7E433C5FAA0FE0B95B953139F7FA2C5C1/0/FC6ED6A0AB4832209F1D12BB47787225007C51D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/839DFCB2C41E5CEB4D6451F7AAA3CCB7E433C5FAA0FE0B95B953139F7FA2C5C1/0/FC6ED6A0AB4832209F1D12BB47787225007C51D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6ED6A0AB4832209F1D12BB47787225007C51D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2b:02:2e:0c:31:9f:b4:30:b8:2a:c5:b5:5e:79:e1:36:50:f7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6ED6A0AB4832209F1D12BB47787225007C51D7
        Validity
            Not Before: Jan  6 19:40:21 2026 GMT
            Not After : Jan  5 19:45:21 2027 GMT
        Subject: CN=D371C20852E07AF1ABE11357824DF5304A2150B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:69:89:36:20:7a:d7:15:0e:16:56:82:fe:
                    53:48:e2:6c:da:20:5d:da:77:98:99:1b:be:96:90:
                    62:17:42:51:2a:68:fa:9b:b2:0a:10:ca:23:50:0a:
                    97:fa:4e:41:b7:f4:42:58:16:69:f0:7a:a7:11:9a:
                    47:a7:1c:65:a1:3a:4a:1a:79:b3:34:35:28:e0:60:
                    83:ad:04:fd:16:96:00:5b:4f:fb:41:99:9e:8e:c5:
                    30:f5:19:f3:15:79:00:e1:83:c7:c2:3f:bb:33:7a:
                    24:30:bf:05:8c:c6:d6:2e:4b:f7:6a:c8:63:9a:af:
                    05:0d:9b:bb:50:3e:21:49:0a:04:5f:aa:70:39:d8:
                    38:a7:78:5c:4e:1f:d4:b5:11:0c:b1:6b:c9:45:0f:
                    32:7d:b2:3e:c3:3a:1b:3b:74:41:1a:5d:9c:4b:e1:
                    0b:f2:cd:a3:eb:4f:fd:f2:83:d7:7c:fb:a7:fd:2b:
                    23:81:78:2f:e6:c5:fe:19:f1:7e:58:0b:3a:8e:d9:
                    72:ac:2f:a7:fa:c6:e9:13:2e:4a:a8:21:22:06:ae:
                    c0:a0:30:1f:04:aa:2d:db:ad:4f:2b:c1:90:24:1d:
                    c2:26:c4:42:57:ea:b7:9c:b7:bc:cd:8b:5d:ce:61:
                    a5:61:c4:49:5b:00:f1:cb:16:e7:34:4d:2e:50:12:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:71:C2:08:52:E0:7A:F1:AB:E1:13:57:82:4D:F5:30:4A:21:50:B6
            X509v3 Authority Key Identifier:
                keyid:FC:6E:D6:A0:AB:48:32:20:9F:1D:12:BB:47:78:72:25:00:7C:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/839DFCB2C41E5CEB4D6451F7AAA3CCB7E433C5FAA0FE0B95B953139F7FA2C5C1/0/FC6ED6A0AB4832209F1D12BB47787225007C51D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6ED6A0AB4832209F1D12BB47787225007C51D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/839DFCB2C41E5CEB4D6451F7AAA3CCB7E433C5FAA0FE0B95B953139F7FA2C5C1/0/34352e3232342e3232382e302f32322d3232203d3e20323635383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e5:9a:a4:f3:1e:03:72:26:bb:bc:3d:54:0a:dc:29:fb:3d:
         87:9b:23:03:cb:3f:97:77:86:67:8f:19:94:f7:ee:fa:f8:b0:
         8c:3e:d7:4a:5e:c7:4a:8d:ca:0b:05:63:74:48:26:0e:f8:c6:
         a9:b7:14:95:6c:f5:f1:08:b1:18:63:11:e9:8f:ce:c0:16:ba:
         de:0f:68:03:c1:f1:4a:82:e3:f2:a0:3a:ac:c4:70:7b:6d:7c:
         1d:12:22:19:4c:54:b8:17:c6:f4:9b:60:fc:30:03:ed:f8:e5:
         38:9b:8f:f2:33:22:46:99:2e:46:cc:82:b9:14:79:f1:7e:3f:
         eb:67:70:e2:b6:05:be:a6:a0:a2:cf:5c:cc:e3:8a:16:4f:fe:
         9e:87:20:13:5d:94:ac:cd:9f:90:a7:bc:42:9e:63:54:80:d5:
         10:af:a1:f6:6a:fb:b5:76:cb:0a:43:12:7d:40:f5:8c:f5:2d:
         a5:ac:4b:09:9f:17:8a:00:f2:15:c7:fa:25:fd:f3:c4:eb:8e:
         b1:b0:f4:b7:fe:1c:c9:dc:ed:93:9b:96:40:54:bc:1d:78:4c:
         1e:89:6c:d5:21:14:09:ed:c9:79:62:d1:5d:f6:05:da:77:1c:
         36:86:11:18:c3:5a:04:80:72:cc:80:5f:eb:4e:9d:6e:bc:e2:
         c2:fa:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:25:15 2026 by rpki-client