This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31362e302f32342d3234203d3e20323636363835.roa
File:                     34352e3232382e31362e302f32342d3234203d3e20323636363835.roa (raw, json)
Hash identifier:          ZF4zIpLdLTeMD+dqvh6jjuGDgEyt4H1qwenjsBwSFgY=
Subject key identifier:   03:9F:B1:BB:01:BF:5B:B7:B6:6C:F9:E9:68:70:D5:43:49:0F:44:C5
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       3AC2289CB8B67CE0349D4AC58706F13650095FC1
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31362e302f32342d3234203d3e20323636363835.roa
Signing time:             Tue 06 Jan 2026 19:35:29 +0000
ROA not before:           Tue 06 Jan 2026 19:30:29 +0000
ROA not after:            Tue 05 Jan 2027 19:35:29 +0000
asID:                     266685
IP address blocks:        45.228.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c2:28:9c:b8:b6:7c:e0:34:9d:4a:c5:87:06:f1:36:50:09:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Jan  6 19:30:29 2026 GMT
            Not After : Jan  5 19:35:29 2027 GMT
        Subject: CN=039FB1BB01BF5BB7B66CF9E96870D543490F44C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:81:2a:78:36:91:46:de:eb:39:80:e8:80:
                    13:12:03:38:e3:b5:fa:45:60:a4:0a:a9:90:e9:ce:
                    5d:aa:fa:3c:2b:cf:e0:c7:54:6c:01:c2:50:1c:e4:
                    73:55:a8:31:35:90:d4:60:2f:57:db:3f:55:91:41:
                    cc:fa:9c:5c:7c:63:6a:e9:6e:08:1d:b0:3a:46:5d:
                    b6:b9:17:83:ab:bf:c1:3b:da:3d:d0:6b:d3:b0:f7:
                    a8:cb:43:f3:00:4f:ae:bf:ef:0e:85:c3:66:9d:2f:
                    47:aa:99:bd:43:32:c7:f5:d2:77:0c:24:3f:aa:3a:
                    68:5e:9e:08:e1:37:8b:18:d1:93:94:95:67:b8:08:
                    db:60:70:61:c0:62:14:39:41:9f:fa:fe:86:10:d4:
                    a3:e5:bf:d0:7e:c9:21:b8:3d:0b:af:45:fd:63:77:
                    1d:70:3d:a5:56:9b:f7:82:ff:1b:5a:04:27:b2:60:
                    76:87:a0:7a:8d:c7:13:10:b5:44:13:fc:43:78:2c:
                    91:4a:e9:85:be:64:54:d8:2e:0f:c8:f6:25:a3:ee:
                    48:25:cf:63:ab:da:cf:c4:19:d4:a2:90:ff:30:be:
                    6d:c6:81:b1:16:46:46:8d:a0:e4:75:56:f1:ba:b0:
                    c6:28:cc:0b:af:52:f3:55:17:1c:90:fd:5c:fc:40:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:B1:BB:01:BF:5B:B7:B6:6C:F9:E9:68:70:D5:43:49:0F:44:C5
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31362e302f32342d3234203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:aa:a8:1d:75:6c:58:80:ef:b0:e9:ec:da:30:c8:84:20:
         8c:b2:3c:a1:6c:a6:a5:6e:8b:b0:00:ea:30:4e:0a:d6:e3:4a:
         41:f4:ba:94:16:56:e4:89:ad:76:71:56:a2:dc:d0:94:7a:8a:
         e0:38:25:6f:85:fe:46:89:11:35:6b:42:b9:32:52:62:30:a9:
         0f:73:54:a2:ec:e3:d3:2e:dc:0e:8b:2d:50:cb:f4:f9:e8:87:
         09:d6:e8:fb:c3:fd:0a:9c:bb:76:56:a3:bf:b2:65:e5:45:89:
         34:dd:be:31:ce:80:68:0c:db:26:b6:21:80:0a:90:9c:89:73:
         8e:d6:e9:a5:a2:ee:a4:e8:07:9a:63:25:1d:fd:c8:de:3f:88:
         48:a2:49:1f:6f:3e:8e:65:7a:23:bd:3d:48:e6:60:a9:61:4d:
         21:e1:9c:5e:96:a2:16:40:01:49:fc:d3:8b:0e:28:68:6b:e1:
         d9:0a:0a:51:23:bf:c6:71:35:f6:dd:64:d7:f3:80:2e:c0:43:
         fe:cf:f3:47:04:4e:ec:04:03:77:38:ba:b5:56:6b:e7:08:19:
         e6:2b:00:47:db:89:aa:ab:18:96:fa:8e:5f:ed:a6:0b:05:a6:
         28:55:8f:70:b1:34:5b:63:7d:b9:46:41:94:8a:7d:e0:4c:1f:
         a0:df:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:26:56 2026 by rpki-client