This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa
File:                     34352e3232372e3232362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          DxrDOzrNaT02JLENBtXuzpnB4S6b+V3KZF0tN1wvOVc=
Subject key identifier:   AA:EA:BD:5B:5D:12:4E:74:0C:A8:0C:AF:5C:66:03:C5:14:48:35:1C
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       086FBEFEE650C03B0CC8971EFA3458655913F549
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 06 Jan 2026 19:05:38 +0000
ROA not before:           Tue 06 Jan 2026 19:00:38 +0000
ROA not after:            Tue 05 Jan 2027 19:05:38 +0000
asID:                     52328
IP address blocks:        45.227.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6f:be:fe:e6:50:c0:3b:0c:c8:97:1e:fa:34:58:65:59:13:f5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Jan  6 19:00:38 2026 GMT
            Not After : Jan  5 19:05:38 2027 GMT
        Subject: CN=AAEABD5B5D124E740CA80CAF5C6603C51448351C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:86:9a:5a:1f:78:cc:b0:bb:7e:eb:53:e2:
                    93:d3:ff:76:fd:09:ae:88:dc:36:2d:fa:a0:28:33:
                    f6:fd:ce:01:15:7e:cc:4b:5b:f6:e9:e7:13:8f:4d:
                    28:69:c3:1b:6e:a1:3f:d1:90:b1:36:2f:9d:20:0f:
                    12:11:ed:e9:7c:ea:c0:ad:6c:28:82:3c:25:cf:3f:
                    82:0c:28:ce:2d:5b:bb:af:59:01:54:14:dd:e5:be:
                    2a:2a:9a:70:41:5a:49:e5:8d:41:64:92:1c:cc:e4:
                    08:6c:5c:e0:76:c6:cb:92:26:d6:a6:7a:1e:51:a0:
                    b3:38:00:6c:6e:cb:a5:db:de:03:98:60:c6:02:4f:
                    4d:ff:59:61:bb:cb:4f:35:26:bc:cf:39:d1:e7:ff:
                    aa:22:13:72:ba:c1:8c:4e:2e:48:75:6c:52:82:e9:
                    53:86:41:aa:e6:35:18:b1:d2:b6:09:42:d9:1b:78:
                    07:64:d7:da:a0:3c:02:82:2c:9d:b9:63:f0:c2:76:
                    97:6f:1d:8d:f9:ac:7a:da:25:5e:11:e3:0a:d0:97:
                    f5:42:d6:3f:34:e6:9f:71:97:48:5b:36:ec:d5:1f:
                    7a:43:e5:df:11:f3:22:ca:9f:44:af:51:54:6c:de:
                    be:26:ba:35:c7:30:c4:27:b6:db:23:a2:bc:db:74:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EA:BD:5B:5D:12:4E:74:0C:A8:0C:AF:5C:66:03:C5:14:48:35:1C
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:93:ef:5a:3e:17:52:cb:0d:c4:46:5d:5b:1a:ca:c1:f6:0e:
         58:74:f6:e2:c0:ea:f4:fa:60:0a:7e:fd:78:04:2c:ed:68:f2:
         a8:28:2d:44:b6:ca:f6:c6:d1:be:05:56:06:68:71:fa:1b:2c:
         6c:79:e6:a2:6f:86:e6:2d:a9:9f:e6:49:3d:6a:e8:42:58:c7:
         f5:27:15:81:bb:d5:f3:c8:5e:4d:02:be:57:06:55:b3:4c:41:
         4b:e3:bf:a7:b2:51:5e:5c:e9:e2:3b:ff:69:18:ad:c4:84:ef:
         f7:bd:80:e6:fc:83:a3:09:fe:d0:00:a0:68:fe:ba:2d:8e:9a:
         7c:44:3f:1d:31:3e:d2:42:68:94:da:e9:66:50:04:4f:5c:6f:
         8f:a5:c2:0c:20:72:60:7c:c0:ae:0f:b1:a5:b8:9c:fe:9b:59:
         50:6a:d4:f8:69:6b:f9:4f:f1:6c:70:48:d4:a2:68:cb:d6:00:
         95:cd:f5:cf:dc:ac:44:8e:11:fb:79:b6:ef:dd:69:3d:34:9b:
         bf:a6:2c:ef:1f:2f:69:51:d7:a4:bb:45:3a:1b:2f:6e:6e:90:
         a2:eb:36:5b:23:a8:4a:8b:ff:ec:da:23:84:a2:f0:2a:ac:5d:
         65:3d:b5:af:ca:cf:29:80:cd:10:53:f9:20:be:b5:68:63:97:
         d1:24:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:19 2026 by rpki-client