This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
File:                     34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier:          pcNhdQZ+cA/f6YyEZyq8ITJWoKYBOS9ZkHqtegKIo7Q=
Subject key identifier:   9B:67:91:81:F1:40:1B:6D:2C:8B:40:01:65:EF:86:6A:46:F7:71:9D
Certificate issuer:       /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
Certificate serial:       5172CB30BD31ADA6D70B00D6674A1F280B642921
Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
Signing time:             Tue 06 Jan 2026 20:56:20 +0000
ROA not before:           Tue 06 Jan 2026 20:51:20 +0000
ROA not after:            Tue 05 Jan 2027 20:56:20 +0000
asID:                     265534
IP address blocks:        45.174.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:72:cb:30:bd:31:ad:a6:d7:0b:00:d6:67:4a:1f:28:0b:64:29:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
        Validity
            Not Before: Jan  6 20:51:20 2026 GMT
            Not After : Jan  5 20:56:20 2027 GMT
        Subject: CN=9B679181F1401B6D2C8B400165EF866A46F7719D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:7e:f2:00:84:85:c1:55:73:29:c8:2a:03:
                    8d:f9:41:49:e6:d0:71:99:00:d6:9d:d2:f4:4d:2c:
                    e1:ad:c0:09:88:2e:13:a8:f8:06:22:3e:b4:b8:16:
                    e3:bd:62:45:f6:03:f1:99:b8:2e:86:8e:4e:8b:21:
                    cb:13:be:2f:31:2d:23:ce:b9:58:28:3e:3a:af:df:
                    9a:36:1a:be:03:22:7d:a1:da:e8:ff:f5:11:e5:97:
                    a0:da:f9:e9:76:a7:db:a8:82:6c:56:33:3b:3b:1f:
                    de:a7:57:57:80:55:83:99:a8:81:a5:10:35:5c:6d:
                    48:4b:15:33:07:6b:ae:4f:14:62:24:b8:0a:c8:27:
                    65:be:00:05:bd:98:cf:da:4b:b2:1b:86:03:d6:cc:
                    79:92:61:b7:b1:d5:89:5a:1d:29:c5:c9:5d:87:ef:
                    d4:28:f2:f8:8f:02:7b:df:74:d2:06:f9:ee:f6:c4:
                    cb:62:5a:8e:8f:66:37:8c:b7:b6:22:cf:5d:54:cd:
                    eb:11:15:89:f7:c9:af:b0:86:b5:4f:3d:81:32:9f:
                    44:c5:b0:86:61:39:d5:9e:d8:c6:d1:79:05:12:68:
                    71:ca:6f:a5:2b:d2:8f:b9:e6:23:e0:32:60:09:ce:
                    68:a0:9a:dd:3e:36:1a:e2:c2:f2:cc:5d:43:05:8d:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:91:81:F1:40:1B:6D:2C:8B:40:01:65:EF:86:6A:46:F7:71:9D
            X509v3 Authority Key Identifier:
                keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ea:27:24:fe:67:d6:6e:df:1a:dd:17:18:87:e3:50:14:9d:75:
         cb:e7:b5:f0:1a:fa:b1:44:fd:79:0e:05:be:6a:86:79:e4:43:
         8c:5d:1f:59:2a:94:73:bd:f4:aa:99:a8:99:a7:15:8f:5c:b2:
         98:60:b4:15:97:81:51:be:e4:e4:3c:85:6f:cc:dd:0b:76:b2:
         97:c7:9d:74:6a:27:e6:45:9f:9d:40:2a:82:2c:2e:d9:43:50:
         d4:09:8a:11:7f:df:b1:f0:49:39:af:b5:93:ea:56:21:4a:b1:
         f1:de:f0:d8:92:f7:fa:5f:ff:41:94:41:3c:40:41:32:94:e8:
         bd:aa:b1:4f:83:93:ad:75:66:b6:9b:c6:32:f6:dd:05:a6:08:
         06:20:63:fd:76:ba:7b:05:32:33:4f:cb:21:3c:93:b5:2f:de:
         65:07:5c:12:1c:c4:f2:21:20:06:ce:95:28:c3:d5:d7:46:29:
         d5:34:82:e5:e0:fb:bc:5a:f3:2b:36:7c:4f:ba:91:85:44:cc:
         2d:b5:a2:0f:ab:9d:c5:a0:4e:cc:03:fd:e0:a8:39:14:bd:cc:
         dd:38:13:b4:5e:0d:e1:db:48:c7:5e:bb:72:7f:0f:31:ce:6d:
         41:df:fa:47:ce:53:38:b3:75:8e:ea:b4:f2:0e:26:b3:5f:70:
         e7:81:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:29:43 2026 by rpki-client