This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232362e302f32332d3233203d3e20323636373235.roa
File:                     34352e36352e3232362e302f32332d3233203d3e20323636373235.roa (raw, json)
Hash identifier:          RcuhIEwUsiA5o2E0KTsx6fjG1zDeZp5+ylAFS9WWz5c=
Subject key identifier:   3A:62:1B:40:73:29:C8:12:0F:04:C2:48:AD:14:3F:13:2F:FF:D2:C6
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       7A6BFFA27C5AEDBF3A3011310E5F0656D9071222
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232362e302f32332d3233203d3e20323636373235.roa
Signing time:             Tue 06 Jan 2026 19:23:14 +0000
ROA not before:           Tue 06 Jan 2026 19:18:14 +0000
ROA not after:            Tue 05 Jan 2027 19:23:14 +0000
asID:                     266725
IP address blocks:        45.65.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6b:ff:a2:7c:5a:ed:bf:3a:30:11:31:0e:5f:06:56:d9:07:12:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Jan  6 19:18:14 2026 GMT
            Not After : Jan  5 19:23:14 2027 GMT
        Subject: CN=3A621B407329C8120F04C248AD143F132FFFD2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:a8:d1:f8:0d:57:5f:e0:e3:35:5f:37:18:
                    75:a1:2f:a8:a1:b3:b9:a0:92:9a:8b:2c:04:e1:2a:
                    a2:5a:c4:70:96:67:20:97:d0:76:d6:9d:0c:06:1d:
                    b6:e6:1d:83:35:db:a6:00:35:92:0a:11:28:ba:e7:
                    09:31:5a:d2:2f:db:37:d8:8f:2c:ca:06:06:7e:c3:
                    89:79:8c:ad:b4:95:64:4a:1b:da:73:cf:e0:70:c7:
                    29:05:80:cb:99:d6:49:0b:5f:19:0e:07:f0:be:36:
                    e4:83:97:83:02:87:7c:b0:df:9b:0b:4c:35:32:5d:
                    a8:13:23:e6:2e:b8:4b:49:90:0c:40:c3:83:3b:aa:
                    31:7e:e6:43:fe:9d:a0:4d:14:3d:97:78:b1:cd:37:
                    37:3f:bd:9f:d5:b5:13:db:13:76:69:e2:73:57:3d:
                    ae:05:ad:2f:3a:9b:12:1c:2c:82:b0:e7:1c:f2:9e:
                    1c:69:8b:b1:36:21:70:ed:bd:d0:0f:ee:46:f9:d3:
                    14:16:76:24:83:5a:3d:c7:b1:e3:5c:02:46:28:c8:
                    84:ce:89:eb:fc:b7:ff:fd:e3:9a:f7:e1:08:e5:c6:
                    dc:77:d4:4f:1c:5e:75:6d:72:3f:fe:df:6f:b8:d9:
                    38:eb:be:4b:78:78:d1:c2:2a:55:1d:f8:b8:5f:8b:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:1B:40:73:29:C8:12:0F:04:C2:48:AD:14:3F:13:2F:FF:D2:C6
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232362e302f32332d3233203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:93:38:d6:18:86:00:db:9e:d7:a3:a2:77:f3:82:fe:fd:f2:
         7c:81:a9:1a:55:0b:fe:77:06:d2:24:1f:98:e2:6d:1c:e8:3a:
         70:f2:26:07:c0:d6:2e:c8:1b:fa:d6:5b:f6:33:7e:5a:39:49:
         2a:b3:e8:86:a5:d7:36:b9:89:32:4e:e8:6b:ea:da:ad:06:9a:
         94:39:a3:f8:dc:73:09:86:37:1b:14:f8:17:6b:1c:30:64:e2:
         2e:cc:7f:c9:8d:70:bc:3c:54:3c:4e:35:85:0d:ed:91:d0:65:
         6e:d1:96:60:4b:8f:e6:32:d2:50:76:c8:f0:75:40:9f:27:e8:
         3a:7c:35:89:31:d7:39:ee:0e:08:e3:fc:53:4a:b7:61:c2:b2:
         11:bd:c1:22:9e:3a:9f:2c:c8:c0:37:32:95:32:88:3d:62:1a:
         32:12:95:8f:cf:7d:e9:d8:cc:90:ad:03:68:8d:0b:59:4e:f3:
         1c:de:f3:52:b8:29:08:74:ca:2e:fd:7a:f7:24:a8:a2:e2:99:
         5c:d1:56:11:d1:59:f1:fb:b3:ba:cd:8e:e2:04:19:21:66:2a:
         bf:b7:ff:3c:f6:38:f6:53:8d:62:90:bc:05:ae:05:d9:6a:7d:
         e1:89:fc:12:98:65:bf:eb:8f:be:93:25:27:39:f5:02:24:76:
         bc:fa:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:09:41 2026 by rpki-client