This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
File:                     34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          RjYwFPygnV0CajzN68cgTzZl3h7UfXxe+Bz7fg/no0g=
Subject key identifier:   61:1B:CB:95:34:C3:7A:56:54:F4:E5:B4:6F:32:91:60:A3:BD:8E:CC
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       024EC04C6F3735D27839827CAD0513C49DC25034
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 22 Jan 2026 20:26:56 +0000
ROA not before:           Thu 22 Jan 2026 20:21:56 +0000
ROA not after:            Thu 21 Jan 2027 20:26:56 +0000
asID:                     265684
IP address blocks:        45.228.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4e:c0:4c:6f:37:35:d2:78:39:82:7c:ad:05:13:c4:9d:c2:50:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Jan 22 20:21:56 2026 GMT
            Not After : Jan 21 20:26:56 2027 GMT
        Subject: CN=611BCB9534C37A5654F4E5B46F329160A3BD8ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:6f:3d:34:8f:04:38:33:93:c3:be:18:b0:
                    dc:ac:ac:d9:0a:47:df:5f:0b:9c:c6:64:c1:4d:59:
                    86:52:c1:ba:25:78:2d:8f:e4:1b:eb:04:06:7b:9f:
                    4c:ac:c3:02:a9:7e:0e:07:84:aa:ff:a7:c4:e5:02:
                    23:22:7b:63:10:4c:84:1f:30:72:b6:54:ec:e5:33:
                    a6:e5:f7:55:71:12:74:af:b1:b1:84:d6:db:1b:63:
                    94:4b:a2:3f:00:3b:b5:1d:45:ba:bd:92:00:50:84:
                    d2:9e:4c:98:22:e7:4f:f9:0e:80:d1:58:ba:3f:46:
                    54:b6:c6:c7:af:6c:4c:aa:2c:03:29:6d:35:6f:a9:
                    c7:47:4c:2a:0a:0b:2f:a4:90:d8:38:1e:8e:43:4a:
                    45:ab:9e:37:7e:37:fa:56:5d:fb:70:48:4e:cd:8b:
                    07:eb:6e:35:26:01:f3:82:98:90:02:75:7a:91:61:
                    33:cb:55:99:dd:3c:06:02:1f:f8:55:45:ea:06:a7:
                    15:c9:55:54:ca:50:bc:83:19:7d:b1:c0:ae:3e:12:
                    87:23:db:f4:3a:8a:e3:56:cb:65:30:47:25:41:ec:
                    2e:72:74:d5:23:6e:c7:61:c5:13:79:56:c9:87:f2:
                    1e:3d:10:ba:4b:82:2a:46:9b:1c:c8:d2:23:20:08:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1B:CB:95:34:C3:7A:56:54:F4:E5:B4:6F:32:91:60:A3:BD:8E:CC
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:74:ef:69:27:df:92:3e:c3:f4:eb:7d:32:f2:65:6c:ba:
         18:4e:37:98:41:65:c2:94:ff:2d:74:9d:e2:16:d6:16:26:5c:
         75:e0:28:25:ca:af:9a:ae:4e:1b:d5:88:0e:29:8e:de:d2:5c:
         f8:bf:7b:38:76:e7:b3:46:21:37:8e:39:9b:dc:fe:9f:05:89:
         bb:59:69:e4:75:b4:bf:5c:a3:28:c8:63:91:e2:d0:3c:20:7a:
         8e:fa:11:d3:6a:96:21:d5:94:3d:93:d9:32:c9:bc:f3:c0:48:
         4b:e3:af:ae:f9:15:ab:c1:97:8c:a1:16:60:4f:c6:cc:0a:9d:
         e3:47:50:e1:b9:4f:83:c8:4b:c8:9b:27:71:1b:5e:82:92:39:
         d3:97:69:81:c8:62:f3:e8:2f:a4:4b:90:a3:e5:b1:af:c3:c1:
         5c:ae:32:aa:ae:9b:88:c2:19:bb:4a:59:ae:85:f4:5b:dc:ab:
         3d:84:18:73:52:43:6f:2c:60:91:7b:a0:ec:51:19:34:d0:f1:
         bd:01:cd:f2:b8:f7:91:eb:92:38:ed:7c:b1:ff:d6:5f:54:42:
         ee:bf:56:2b:f1:4a:32:1e:34:9a:36:e1:85:14:a6:13:9d:e9:
         35:ed:9e:97:49:67:2d:18:ed:ea:8f:82:b6:ea:7f:fc:42:fb:
         b1:a3:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:37 2026 by rpki-client