This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20323633383132.roa
File:                     34352e3232382e36372e302f32342d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          9mxrcl6w/xGUT487leCvbVaGadUXSXuY588jebKbYLk=
Subject key identifier:   0C:D9:B5:F6:07:3E:74:6F:B7:B7:0C:83:A0:3E:A9:CA:A2:AB:93:E7
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       46A44FA6A0A944A907FB79E907126905A93492AF
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20323633383132.roa
Signing time:             Tue 06 Jan 2026 19:44:53 +0000
ROA not before:           Tue 06 Jan 2026 19:39:53 +0000
ROA not after:            Tue 05 Jan 2027 19:44:53 +0000
asID:                     263812
IP address blocks:        45.228.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 11:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:4f:a6:a0:a9:44:a9:07:fb:79:e9:07:12:69:05:a9:34:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:53 2026 GMT
            Not After : Jan  5 19:44:53 2027 GMT
        Subject: CN=0CD9B5F6073E746FB7B70C83A03EA9CAA2AB93E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:27:55:09:46:d9:83:55:9a:85:1d:52:cd:fa:
                    9a:b5:70:db:0d:4f:e5:cb:d4:66:07:7d:b8:5f:13:
                    33:31:3a:44:0f:68:dd:a6:25:8b:01:e8:67:1e:e0:
                    93:ad:7c:75:36:ac:ff:98:98:00:2a:26:af:a7:b3:
                    c1:bc:89:27:35:8e:8e:79:e0:e6:99:11:5b:55:6e:
                    19:55:27:5a:57:f9:a6:61:09:05:d2:89:c6:dd:cb:
                    3f:5d:8a:74:cb:1f:35:62:b8:33:0c:4f:1f:d8:02:
                    25:6f:4c:2d:3b:d0:b5:a5:aa:9a:87:ce:bb:b0:00:
                    d5:30:d1:3e:2b:bf:bb:46:b8:7b:22:6f:d4:8e:99:
                    2f:09:a1:32:cd:d3:cf:42:90:75:8e:f7:f7:e3:88:
                    6f:ce:c5:ea:8a:60:bb:5a:04:2a:5d:1d:97:0c:79:
                    52:ca:cf:91:38:af:b0:b1:8a:c8:be:39:49:31:21:
                    2e:91:c5:ce:fc:b9:79:52:ad:a9:06:53:36:c2:5b:
                    81:25:de:c8:93:f6:f4:9d:59:4f:f2:85:c6:ad:c8:
                    30:64:7b:cf:a9:26:20:56:8c:e6:75:84:05:f9:3f:
                    9b:1e:0f:eb:be:ab:3b:72:68:d3:d5:a3:37:21:02:
                    f2:fa:59:47:bf:8e:48:82:36:39:bd:8c:ff:68:f3:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D9:B5:F6:07:3E:74:6F:B7:B7:0C:83:A0:3E:A9:CA:A2:AB:93:E7
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:23:84:f3:7d:5d:d4:d3:48:36:a8:10:3c:24:da:8c:b5:
         08:c0:19:9e:93:9b:da:f0:c5:1c:1c:c9:d7:6f:dc:c2:49:4f:
         69:68:ce:70:ef:e1:5f:f0:f7:b9:14:bd:a9:34:00:61:ba:75:
         51:21:b9:84:e1:c7:8a:74:36:f9:1e:46:25:0c:dd:88:5b:cb:
         c8:cc:9a:54:bf:86:1d:ad:12:a6:55:39:0e:fc:7f:64:6b:6a:
         f4:a2:45:c0:b8:82:65:29:78:49:23:27:7c:b8:17:86:c7:ba:
         33:22:87:fa:27:df:63:53:7c:61:14:10:36:46:db:1a:f6:df:
         d9:c1:e4:e2:95:7f:3c:db:bc:8b:80:cb:c4:94:5b:8e:93:b3:
         3b:b5:fd:4f:f9:1a:3c:b4:ed:79:07:10:51:ef:84:15:30:6e:
         be:77:2f:bf:b5:a8:31:c5:84:20:c4:e7:ee:e9:7a:cd:ef:c4:
         07:a4:bb:0b:62:6f:cd:e5:3b:eb:c4:7a:06:04:f0:01:a6:c7:
         a6:63:2b:bc:27:a5:3a:ed:8f:f9:9d:ac:31:b7:ea:27:09:8f:
         2f:9a:bf:c2:a7:55:7d:b3:b6:90:96:7b:f2:3a:cf:70:16:1c:
         7e:6c:86:f9:2d:3a:78:01:fd:b9:53:45:b5:bb:8a:44:e8:eb:
         ef:78:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:22:36 2026 by rpki-client