This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39302e302f32342d3234203d3e20323732393134.roa
File:                     34352e3232352e39302e302f32342d3234203d3e20323732393134.roa (raw, json)
Hash identifier:          02fPL6MgIcTat74Tzjvl/pBXwtZrcWCba6WQXV/mbsg=
Subject key identifier:   D9:EC:A9:E9:10:D6:53:C7:98:99:FC:C7:FE:46:19:6D:18:E1:C9:55
Certificate issuer:       /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial:       38D89AF84501E3C5DCE4F7E87E82ACC96B012D84
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39302e302f32342d3234203d3e20323732393134.roa
Signing time:             Tue 06 Jan 2026 19:46:05 +0000
ROA not before:           Tue 06 Jan 2026 19:41:05 +0000
ROA not after:            Tue 05 Jan 2027 19:46:05 +0000
asID:                     272914
IP address blocks:        45.225.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d8:9a:f8:45:01:e3:c5:dc:e4:f7:e8:7e:82:ac:c9:6b:01:2d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
        Validity
            Not Before: Jan  6 19:41:05 2026 GMT
            Not After : Jan  5 19:46:05 2027 GMT
        Subject: CN=D9ECA9E910D653C79899FCC7FE46196D18E1C955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:77:62:ca:86:bb:2e:2c:43:21:54:0d:59:88:
                    0d:f7:f6:e7:fe:76:49:47:fa:b2:fb:62:d2:9e:ed:
                    cd:ef:7e:6c:cd:05:14:c5:1b:d3:06:ee:9f:0b:e3:
                    d2:c4:bd:d9:be:ee:3e:09:47:eb:ac:bd:9e:ff:c5:
                    5e:22:1c:55:1b:35:c0:47:97:30:5a:f0:ed:0c:c3:
                    a3:ef:17:91:87:62:f3:a0:35:56:b4:4f:4f:65:b6:
                    06:39:63:ee:6b:40:07:4b:f5:61:0a:24:3a:d3:00:
                    c5:9d:9b:c5:b9:d4:45:a9:0c:2e:58:96:08:a6:4a:
                    40:34:69:ef:97:30:0f:fa:76:e7:7a:43:9e:ba:00:
                    f7:80:76:65:ae:c4:b4:89:04:a1:24:9e:31:a7:9e:
                    7e:04:24:65:05:d8:af:90:62:3d:38:22:87:bc:5f:
                    5b:c9:2d:c5:13:fd:96:ee:4c:76:0d:3b:60:7a:ba:
                    2e:40:cf:f8:ee:a7:b3:d9:4b:86:c5:97:b8:b8:a0:
                    54:67:16:19:6f:85:25:f3:ee:f4:68:53:dd:f3:ee:
                    4e:c5:6a:13:17:85:78:ee:24:fd:41:31:8a:0e:72:
                    84:95:8e:6d:8e:46:07:73:79:f3:30:8a:a3:6f:2a:
                    c0:ec:ed:40:72:c0:66:ea:af:17:6b:f9:50:11:b5:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EC:A9:E9:10:D6:53:C7:98:99:FC:C7:FE:46:19:6D:18:E1:C9:55
            X509v3 Authority Key Identifier:
                keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39302e302f32342d3234203d3e20323732393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:32:a7:12:dc:0b:29:55:8f:0e:30:31:46:92:4d:72:89:
         44:cd:c4:2c:c2:1c:34:e2:f9:40:4d:36:14:5c:f4:90:1c:55:
         b5:92:d4:a8:ad:57:79:30:e0:a7:9a:d9:ab:26:9b:30:4b:84:
         3e:46:28:65:ad:2f:50:cb:33:7b:d4:10:49:72:c9:25:df:3e:
         04:24:a4:d6:67:bb:f9:38:9b:8d:91:78:d8:74:67:29:a5:76:
         62:b7:3c:c3:ea:46:ee:fe:da:3c:7f:a8:3c:c8:dd:64:c3:6d:
         fb:ab:85:15:a1:00:41:e9:2e:2f:12:62:b0:bb:ae:83:13:4f:
         b1:ac:e5:6f:f9:14:72:2a:b4:07:89:45:fe:98:9a:47:a7:f3:
         91:b2:80:5b:31:28:f5:2b:88:c0:27:0c:65:74:80:87:12:b0:
         de:92:78:4b:01:45:3a:6e:58:f4:66:47:e7:66:7b:17:7a:f0:
         42:a3:81:1b:74:4d:d6:1e:48:78:ca:ae:f5:e2:27:b8:45:3d:
         db:e8:dd:5e:42:95:26:2a:ff:b3:c6:f0:01:91:c8:c4:4f:a2:
         7d:0a:06:01:82:79:6e:c5:6c:15:7d:db:96:32:77:54:6d:5b:
         2a:42:b4:ea:a5:39:d2:34:20:cd:f4:7b:4d:cb:53:ee:92:6e:
         30:e3:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 00:42:43 2026 by rpki-client