This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32322e302f32342d3234203d3e203237393437.roa
File:                     34352e3232342e32322e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          +QoPdBk6fweBhnLMDEf6tRzLuMBG3mGCMVT41Rckwzc=
Subject key identifier:   27:77:48:26:AE:7B:C4:E1:F1:E6:54:4A:8B:76:61:02:76:12:C3:65
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       45F2B347198B8748BD2E354A4D139A67AE5F0CC0
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32322e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:13:14 +0000
ROA not before:           Tue 06 Jan 2026 19:08:14 +0000
ROA not after:            Tue 05 Jan 2027 19:13:14 +0000
asID:                     27947
IP address blocks:        45.224.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 15:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f2:b3:47:19:8b:87:48:bd:2e:35:4a:4d:13:9a:67:ae:5f:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Jan  6 19:08:14 2026 GMT
            Not After : Jan  5 19:13:14 2027 GMT
        Subject: CN=27774826AE7BC4E1F1E6544A8B7661027612C365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e4:3c:aa:93:4b:7a:73:a7:63:f8:80:5a:35:
                    09:eb:7f:16:27:6d:05:66:ce:91:99:cc:87:62:1d:
                    4f:bb:cb:37:94:c1:d2:cb:62:16:04:cf:85:64:00:
                    e0:db:9f:7b:e9:cc:4f:db:78:6b:d1:cb:ab:93:80:
                    e5:9c:30:45:d6:c5:cf:1d:6b:a1:bb:b4:15:01:01:
                    a0:b3:11:56:85:33:79:b5:5b:a3:ef:72:8e:06:83:
                    22:af:e6:52:4d:57:57:12:f9:29:ac:4f:2e:4a:64:
                    23:4d:c9:59:46:3d:26:df:96:9a:8c:a5:a3:22:86:
                    6c:77:2f:ed:99:b8:8e:07:bc:07:30:90:1b:87:0b:
                    bc:b2:6f:5d:cf:22:8a:a8:5c:32:80:96:8c:91:fb:
                    a9:75:e4:a9:f0:13:be:23:5c:88:cc:16:8d:5c:57:
                    73:94:89:0e:99:34:da:c9:69:7c:d6:ca:0c:b7:e3:
                    c4:48:1c:18:d6:00:31:0d:53:75:88:2e:18:32:0d:
                    39:a3:32:fe:72:22:3e:15:e7:dc:1f:3d:12:13:04:
                    0a:cb:74:a7:24:e9:11:3f:86:3c:cf:0f:cf:79:a0:
                    3b:2b:1e:4a:56:32:46:b4:26:9c:94:92:7a:3d:19:
                    89:8c:8a:6b:14:37:65:34:76:af:83:9a:65:27:af:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:77:48:26:AE:7B:C4:E1:F1:E6:54:4A:8B:76:61:02:76:12:C3:65
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32322e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:04:28:91:f7:c9:a9:11:eb:f9:eb:34:9e:b9:f7:df:9d:a7:
         8d:80:1f:8c:1f:3f:91:1d:da:3b:b8:97:4a:11:5f:cc:d4:cf:
         c0:9b:9b:9b:44:78:aa:0e:d2:5a:58:a0:55:a1:42:c3:91:ef:
         8f:c3:b8:a3:5c:c9:9e:d1:6d:9d:69:e4:4e:50:8e:bc:44:e4:
         a1:cc:68:0e:77:4a:22:bb:9e:b8:93:f7:1a:b7:37:80:63:5b:
         52:a3:77:aa:54:87:c6:00:3e:ea:26:eb:a1:52:e5:25:c7:66:
         36:1c:98:15:14:74:d0:b5:4f:6a:bc:2f:ec:9f:d9:66:d1:c3:
         4f:1d:cf:db:39:e7:72:f4:3f:a8:60:dd:55:8b:a2:d8:f8:a3:
         81:65:59:bb:2f:56:b1:1f:f2:a5:e3:c9:0f:a3:91:ca:e0:71:
         2d:4a:91:d9:e3:84:b1:25:87:4e:5b:39:d2:d8:55:4d:85:24:
         c7:d2:2b:bd:72:b1:08:a5:8c:b1:b8:4c:85:04:34:1b:24:89:
         ff:77:ba:13:cb:2e:6e:fc:2f:41:55:e9:1e:7a:54:15:15:8d:
         12:d1:a6:f7:d7:48:4f:7d:4e:98:0d:5b:79:4b:ca:cc:55:2f:
         67:15:81:36:09:39:4c:b4:50:f0:75:ed:cb:99:10:ba:13:fc:
         4e:99:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 06:59:42 2026 by rpki-client