This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32342d3234203d3e203532333238.roa
File:                     34352e3232362e3137342e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          U6w4cP2VXxWstXgvzYFub8RBozDe0/8+UCDvJ6vrxdI=
Subject key identifier:   D1:38:17:8D:B8:D7:26:BC:F5:EE:0F:5D:FB:E9:39:9B:57:37:E6:01
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       21C8D01751B32AFBD9CB07148142F55C2350839D
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:12:48 +0000
ROA not before:           Tue 06 Jan 2026 19:07:48 +0000
ROA not after:            Tue 05 Jan 2027 19:12:48 +0000
asID:                     52328
IP address blocks:        45.226.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c8:d0:17:51:b3:2a:fb:d9:cb:07:14:81:42:f5:5c:23:50:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Jan  6 19:07:48 2026 GMT
            Not After : Jan  5 19:12:48 2027 GMT
        Subject: CN=D138178DB8D726BCF5EE0F5DFBE9399B5737E601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:fc:71:12:08:9e:76:4e:fa:df:94:cc:8d:
                    9f:7b:67:51:1e:a2:1f:76:00:5f:46:9a:23:57:0a:
                    9b:b4:de:49:6e:80:4c:23:98:9e:7d:f3:bc:c4:43:
                    a4:35:71:59:db:28:ec:a6:78:8c:55:1f:ba:8b:1b:
                    ce:2c:36:4d:c6:83:a0:4e:5f:f8:a3:04:7d:0a:aa:
                    c7:ca:96:01:84:84:8e:1c:6d:4b:0f:72:91:29:94:
                    1a:2a:f0:f2:1f:2a:9f:dc:9b:31:36:1c:3a:5c:fe:
                    f5:3f:72:c3:e4:7f:52:05:f7:86:ca:3b:7b:ca:07:
                    8b:9d:33:43:ad:b7:5a:92:65:2c:88:7b:51:d3:ca:
                    59:c0:c8:2e:37:2c:b1:90:f8:87:a9:12:4f:43:67:
                    e8:ee:52:20:ef:a0:af:9f:21:f8:ec:a1:43:d4:47:
                    dc:a7:e8:d9:ed:bb:b7:50:2a:8b:c4:21:f3:34:a9:
                    4e:81:4e:1a:0a:98:c0:91:09:1d:99:2a:37:9b:80:
                    95:03:b7:49:73:48:63:71:a6:04:50:12:21:3a:b9:
                    81:6c:e4:4d:c5:5f:36:9f:c8:17:78:bd:7d:58:e8:
                    ae:7e:80:dd:15:e3:3b:03:4c:36:e0:ac:7c:8a:52:
                    70:fe:08:b7:02:60:b2:f9:55:65:70:d5:cd:37:1e:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:38:17:8D:B8:D7:26:BC:F5:EE:0F:5D:FB:E9:39:9B:57:37:E6:01
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8c:80:50:bd:b3:27:6b:94:4f:92:8f:bb:3e:7e:d9:cb:5c:
         1a:37:6b:0a:9d:62:40:ed:a1:8e:a6:73:7e:99:64:2c:45:e4:
         c4:a0:19:d9:60:73:16:f5:36:4b:b1:6a:fc:e3:ae:04:9b:a0:
         2a:cf:65:9b:48:47:60:69:44:94:35:83:74:00:29:b1:41:ee:
         96:48:e0:2f:94:2e:6e:4c:9f:d8:9e:e1:e6:75:5e:45:d8:3d:
         fb:e9:5c:fa:6c:0d:2d:fa:8b:e6:fe:76:9c:d5:75:33:bc:74:
         d5:f7:e3:c8:03:ef:ff:ad:05:33:09:a8:f4:32:12:33:2b:ee:
         b7:0a:44:3e:67:77:b9:a3:87:f2:1c:66:9d:9e:21:f6:ea:e7:
         ea:3a:30:56:97:7a:ae:07:03:69:d3:e3:1d:d4:2b:00:95:29:
         21:08:0f:8b:0a:5a:93:56:b0:7e:b4:d7:fc:2c:08:62:d3:cc:
         be:d5:f5:60:b2:5d:84:db:da:3a:83:b9:fd:fc:2b:f6:16:5f:
         40:5a:5c:26:8d:b4:e2:19:22:10:34:04:a1:a3:93:d0:78:6d:
         e5:8b:36:83:61:3a:4e:2c:c9:bd:68:c6:36:81:9c:6c:24:21:
         9f:27:24:bd:7f:67:1a:0b:e3:c8:91:3d:80:46:5a:b0:46:83:
         df:1a:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:34:15 2026 by rpki-client