This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e203532343638.roa
File:                     34352e3232382e3233332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          D3N0CZQciFNK2Jr9wdqTphkSQEQgVM9F1Y8aPTW/gzE=
Subject key identifier:   D9:82:E4:5D:CF:22:BC:AA:1F:F6:E5:FF:1A:52:C3:99:D5:4C:2A:D0
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       38F2ACF9D9925F1252C982499B12AF29BBE034B5
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e203532343638.roa
Signing time:             Mon 17 Nov 2025 18:55:00 +0000
ROA not before:           Mon 17 Nov 2025 18:50:00 +0000
ROA not after:            Mon 16 Nov 2026 18:55:00 +0000
asID:                     52468
IP address blocks:        45.228.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 09:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f2:ac:f9:d9:92:5f:12:52:c9:82:49:9b:12:af:29:bb:e0:34:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Nov 17 18:50:00 2025 GMT
            Not After : Nov 16 18:55:00 2026 GMT
        Subject: CN=D982E45DCF22BCAA1FF6E5FF1A52C399D54C2AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:bc:8f:fe:5e:19:a2:42:a1:dd:96:95:3f:
                    63:fe:c3:38:e9:e1:39:90:61:b0:a8:74:ff:c3:b9:
                    67:d7:99:82:22:2f:bc:06:76:a3:78:86:03:79:94:
                    c4:5d:a3:c9:6e:eb:51:fb:70:06:5f:23:c1:ff:fe:
                    9c:5b:87:c8:f2:1a:16:79:29:5b:82:b2:54:d3:ad:
                    65:1c:2e:c6:f2:aa:12:da:be:65:62:4f:b8:9c:f4:
                    70:5b:95:91:01:cd:a7:11:fb:55:4f:f7:74:8d:b2:
                    a1:d5:3a:cc:16:cb:22:3d:fb:01:ba:24:bc:8d:49:
                    d2:db:69:7d:c2:78:89:3c:75:4f:1b:2b:38:24:0c:
                    e4:bc:65:6f:1b:7e:67:75:eb:83:ff:f1:dc:eb:57:
                    9b:38:97:d3:f1:ee:4c:5d:f0:01:5c:74:fe:38:c4:
                    49:81:94:c4:0f:67:53:a5:32:03:e3:3a:f6:b5:d6:
                    39:6a:db:27:84:e0:78:f2:6a:ee:05:af:85:8f:cf:
                    7c:ee:7e:f3:b7:ed:a4:96:bb:a2:57:1e:b2:68:40:
                    d5:3e:2c:ac:47:bb:32:65:ff:ba:e3:a4:49:f6:8a:
                    df:c1:5d:1e:b2:51:b7:14:ae:99:b6:5b:a1:d1:ae:
                    c6:b2:06:fe:29:61:7e:cf:92:29:72:f5:8f:cf:75:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:E4:5D:CF:22:BC:AA:1F:F6:E5:FF:1A:52:C3:99:D5:4C:2A:D0
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:42:1e:01:55:e8:b6:27:7f:fb:c4:c1:ee:12:99:5a:62:
         f0:6d:ff:73:ae:c7:61:6b:75:11:8b:b6:c2:5a:d6:1b:1a:81:
         e7:9c:d3:2e:bd:4e:73:d2:c4:47:a6:9d:76:fa:fc:d3:1f:68:
         d3:e1:fd:69:b8:9d:b6:f8:19:31:2c:d5:1c:f1:dc:0f:ac:00:
         d8:01:77:b6:04:40:52:c1:85:e2:87:08:c5:93:d4:8a:9f:7a:
         2d:b0:7f:83:7d:3c:32:5c:ae:60:95:7b:a2:19:a4:db:23:a2:
         72:6f:f9:ea:3c:8e:90:3d:6b:3c:40:6f:30:c1:d6:92:37:28:
         a1:0c:30:91:79:f9:d8:4f:32:dd:41:b3:d6:8b:bb:03:14:35:
         fe:1a:64:c8:3e:57:51:b4:4b:2a:9e:44:93:f3:88:aa:4e:28:
         9c:9e:b2:d6:4b:2a:1b:a2:cf:07:aa:69:4c:86:90:1d:f3:f5:
         9e:68:98:25:e0:60:64:fd:ed:24:1b:ce:17:ef:37:ac:93:ba:
         d6:95:51:2c:50:04:ba:76:76:e2:e2:75:8e:03:0f:49:d7:23:
         0f:27:59:d0:7d:e3:ff:06:82:4a:ca:d4:57:47:20:b6:fc:a4:
         1f:59:9e:0e:d1:f0:f3:24:cb:f2:a2:70:c5:22:3c:73:47:09:
         9e:46:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 08:31:04 2025 by rpki-client