This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa
File:                     34352e3232392e34332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          8ds8dizoODLjsnn5drWXyQIgmLzCOc0bByQqZJ3MbOk=
Subject key identifier:   72:B0:6A:8F:4F:FB:5D:DA:E9:11:63:0C:03:38:CE:66:25:32:D3:B8
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       4182008BED907B65B451574548FEE1EE2F2F1F92
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 06 Jan 2026 19:04:18 +0000
ROA not before:           Tue 06 Jan 2026 18:59:18 +0000
ROA not after:            Tue 05 Jan 2027 19:04:18 +0000
asID:                     23243
IP address blocks:        45.229.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Jan 2026 13:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:82:00:8b:ed:90:7b:65:b4:51:57:45:48:fe:e1:ee:2f:2f:1f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Jan  6 18:59:18 2026 GMT
            Not After : Jan  5 19:04:18 2027 GMT
        Subject: CN=72B06A8F4FFB5DDAE911630C0338CE662532D3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0a:19:be:8a:18:8d:f2:3a:9b:9e:4d:a2:a3:
                    67:70:8b:92:ef:89:67:4b:d5:74:bf:f0:d4:28:26:
                    41:2f:1f:a4:d8:31:60:ea:40:cd:59:2e:fe:d6:75:
                    8b:e3:82:70:7b:01:b7:1a:f3:87:0b:84:fd:fc:38:
                    c4:c8:c4:d2:52:b1:ca:27:1e:ea:49:96:b5:4d:f0:
                    b2:23:33:11:5b:a5:3e:72:5b:86:db:ee:af:90:e8:
                    3b:a7:d4:83:da:4c:8c:23:16:2d:e7:ed:0e:05:23:
                    1e:1a:94:f4:28:58:25:6b:33:44:cd:9c:d5:4b:b2:
                    be:84:c5:ee:f3:52:44:92:76:a5:f9:4b:30:24:19:
                    09:d8:66:d7:fc:0f:05:4e:bf:55:5a:1d:72:1a:37:
                    d5:cd:89:8f:10:e0:fa:00:f9:7a:a8:56:64:b3:cf:
                    5b:cd:07:88:d9:15:23:66:6c:3e:52:78:31:c3:c5:
                    2f:46:5a:63:b9:25:39:56:22:07:4f:0c:5b:7e:28:
                    e4:32:4d:13:ad:8f:17:46:ee:f5:49:ca:3c:3b:82:
                    53:05:4c:56:66:df:96:5e:c0:40:88:fd:95:9f:81:
                    44:a8:40:4d:3f:7e:c8:a9:ba:17:6a:8e:88:4c:40:
                    f0:cb:40:f3:42:8f:25:c4:51:c2:c2:9f:35:36:89:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B0:6A:8F:4F:FB:5D:DA:E9:11:63:0C:03:38:CE:66:25:32:D3:B8
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:57:33:89:4b:e8:6e:1f:2f:56:99:d7:e1:08:87:b5:d0:
         1c:8c:12:3b:f5:16:66:b5:07:74:33:b8:2d:f8:53:27:12:38:
         da:54:8c:85:e3:53:15:db:b6:5c:c8:b6:fa:6d:00:ea:10:b9:
         6a:7e:df:1c:a8:20:99:4e:28:2a:88:7c:b6:31:ee:4b:cd:52:
         90:55:b0:e1:b1:48:4f:a5:e8:94:36:72:27:02:48:4d:3c:70:
         93:29:df:63:6a:cf:ad:33:ed:59:16:9f:f4:32:6b:61:8f:e1:
         74:5e:1c:b3:79:87:00:0e:c8:2b:9d:f3:84:71:62:42:a6:0a:
         2a:56:ae:b8:81:3b:99:f1:5f:7b:ad:04:1f:e6:8a:50:6d:60:
         c6:a3:8d:a5:f4:36:53:07:60:dc:4b:56:d3:81:c5:0d:94:f9:
         37:81:b0:9c:06:a2:9e:2f:9b:d3:e0:57:9e:6d:f7:e5:95:b3:
         52:71:9f:67:12:04:d8:40:b3:73:20:6e:b9:05:62:e5:80:48:
         6e:3f:6f:28:ad:34:14:bc:59:d4:6f:da:dd:e7:47:27:49:bb:
         c2:81:37:59:19:cd:3e:2b:1a:85:45:9a:64:4e:8e:a7:75:85:
         fd:34:81:c8:a4:0f:56:6a:27:0e:9d:49:9f:d1:44:8a:73:0a:
         48:58:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:52:19 2026 by rpki-client