This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa
File:                     34352e3232392e32382e302f32322d3234203d3e20323730303839.roa (raw, json)
Hash identifier:          6LV9NyM8ipnui8CYjOtUmZYxEuMOmP5oOfHZXmleg3k=
Subject key identifier:   0B:39:9E:AE:7C:03:34:24:8B:B8:11:64:7A:E1:B6:8B:A6:7B:8C:88
Certificate issuer:       /CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
Certificate serial:       28F4FC387C86194483A55C55E1524ACE58EB2BE0
Authority key identifier: A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa
Signing time:             Thu 20 Nov 2025 17:05:00 +0000
ROA not before:           Thu 20 Nov 2025 17:00:00 +0000
ROA not after:            Thu 19 Nov 2026 17:05:00 +0000
asID:                     270089
IP address blocks:        45.229.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f4:fc:38:7c:86:19:44:83:a5:5c:55:e1:52:4a:ce:58:eb:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
        Validity
            Not Before: Nov 20 17:00:00 2025 GMT
            Not After : Nov 19 17:05:00 2026 GMT
        Subject: CN=0B399EAE7C0334248BB811647AE1B68BA67B8C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:da:10:45:d1:1f:b7:0d:b9:23:18:e0:e9:
                    f6:d8:e0:1e:f0:81:50:09:e3:07:23:1c:b7:b7:2a:
                    2c:8c:37:c9:77:63:11:e9:6c:ac:32:52:d4:75:d5:
                    19:0f:33:cf:77:5c:db:e3:74:c4:17:62:08:83:09:
                    a1:0d:5f:b1:44:85:a2:65:c0:de:59:10:58:fb:48:
                    b8:cb:29:98:20:5a:8d:8f:94:aa:86:ea:96:a5:e3:
                    aa:82:9c:6a:ae:60:4c:f7:c8:d7:82:25:cc:31:77:
                    1d:63:bc:9f:c3:ed:c1:44:08:5e:b3:15:7c:32:a9:
                    eb:bd:dd:17:bb:27:c2:88:94:56:d8:ad:5f:dc:15:
                    5d:d6:fb:90:b9:a1:ec:87:62:d1:3f:04:82:fd:7e:
                    64:9e:93:9d:b5:99:b6:48:e7:f5:dc:45:e3:a3:c8:
                    51:73:5d:3d:3d:91:5e:37:04:a6:00:d4:ac:f4:db:
                    2d:cc:66:b7:49:68:9e:ec:36:b1:35:ec:da:34:b9:
                    81:3b:f9:0c:c0:1f:23:27:cf:fd:39:6e:42:3e:0b:
                    5b:73:14:05:c8:ba:57:0e:0b:ae:11:a7:cd:59:41:
                    0c:fb:55:35:11:f3:03:77:12:9c:29:25:e5:07:2d:
                    9b:dc:2e:53:51:5d:aa:c3:8c:a1:77:a1:3e:56:86:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:39:9E:AE:7C:03:34:24:8B:B8:11:64:7A:E1:B6:8B:A6:7B:8C:88
            X509v3 Authority Key Identifier:
                keyid:A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:a8:15:2e:50:b5:47:59:9b:24:e6:64:72:dc:d9:f6:eb:
         4a:3a:17:c0:6e:4f:78:28:42:76:6a:56:97:38:b9:c7:f7:53:
         94:7d:f2:04:cd:95:b2:ff:9d:8c:68:40:86:1c:e3:d8:ca:eb:
         03:a2:f3:76:82:84:94:14:8d:07:a8:75:e4:00:b0:19:a0:54:
         9a:64:2c:6a:30:35:cc:5c:f0:23:37:86:d7:54:10:18:ba:02:
         f1:be:a3:8a:b7:dd:af:dc:61:4e:cf:b2:23:fa:e4:83:32:9a:
         10:09:29:2a:0f:83:f3:72:83:06:e4:94:01:e6:02:f3:47:85:
         12:7b:44:f0:23:d3:eb:a4:7e:28:de:56:dc:3f:71:ba:8e:2f:
         dd:9b:e8:e1:66:5b:96:32:f2:28:f8:bf:11:79:ba:df:47:46:
         06:70:ae:e9:65:06:62:19:93:e7:43:68:ac:09:9a:32:64:7a:
         16:49:c9:8a:b7:16:bd:ae:26:d4:50:a4:64:7c:12:cf:c6:25:
         87:f5:d1:4f:57:17:cd:4d:63:1b:3f:4d:54:e2:63:ec:39:12:
         80:d0:6f:b6:15:62:cf:46:09:c1:ad:64:9b:fa:09:ba:a9:80:
         f3:0d:76:ee:d1:94:87:fd:c8:bd:2f:30:48:cf:6c:27:d7:b2:
         b7:b7:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:10:07 2025 by rpki-client