This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32322d3232203d3e20323635363133.roa
File:                     34352e3138392e3235322e302f32322d3232203d3e20323635363133.roa (raw, json)
Hash identifier:          fpRofg/WkeajogIoXLXx/PRbjxg7qXB0QYj+DCcQ8kk=
Subject key identifier:   CB:5C:62:74:5B:A0:7A:79:C7:C7:CF:69:FB:27:E5:98:4F:30:29:C3
Certificate issuer:       /CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
Certificate serial:       38BE1B2863464808330F20D039FAE7009ED06F4E
Authority key identifier: 32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32322d3232203d3e20323635363133.roa
Signing time:             Fri 19 Dec 2025 18:55:37 +0000
ROA not before:           Fri 19 Dec 2025 18:50:37 +0000
ROA not after:            Fri 18 Dec 2026 18:55:37 +0000
asID:                     265613
IP address blocks:        45.189.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 18:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:1b:28:63:46:48:08:33:0f:20:d0:39:fa:e7:00:9e:d0:6f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322414D1DB98FF3F8C0C00272C00B290132C5CC4
        Validity
            Not Before: Dec 19 18:50:37 2025 GMT
            Not After : Dec 18 18:55:37 2026 GMT
        Subject: CN=CB5C62745BA07A79C7C7CF69FB27E5984F3029C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:fc:ef:b3:5d:57:ed:76:56:25:a3:90:f5:
                    78:0c:9d:fc:73:54:ee:61:f5:a8:46:f7:5c:fc:33:
                    a0:23:e7:a1:a7:b4:44:d3:b7:45:85:fa:40:a7:8c:
                    27:8f:b0:d4:63:41:9b:c1:d8:0f:db:98:d5:be:0e:
                    cd:8a:de:b8:40:d5:81:4f:3b:c2:f3:10:74:6f:d0:
                    2e:fe:6d:2b:cf:03:41:87:32:cd:31:6b:08:7e:45:
                    17:fb:64:ff:0f:8b:ea:c8:eb:bc:73:ed:35:07:a9:
                    64:77:fa:4e:82:7d:f5:3e:0d:97:1d:62:bb:25:a4:
                    ca:1c:87:8c:9e:ca:66:83:10:c1:cd:08:78:d3:29:
                    41:62:5d:4a:55:fa:27:8c:81:bc:28:6f:ca:62:d2:
                    6d:76:99:b7:a6:04:23:ec:0c:52:89:09:51:9c:14:
                    48:b3:a4:27:30:25:f6:3b:85:8c:59:03:db:0e:32:
                    3b:19:58:77:f5:3c:2b:ac:49:a7:a1:1e:38:05:39:
                    9f:07:f7:65:74:7f:5e:9a:85:f1:9f:10:95:e2:41:
                    6e:a5:b0:87:17:9d:3e:82:01:2c:e5:5c:d0:b3:39:
                    be:2d:1b:a3:45:23:99:d2:a3:d7:fe:d3:9a:c9:10:
                    4f:df:a4:01:48:b8:eb:97:36:4d:18:1d:30:d9:c7:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5C:62:74:5B:A0:7A:79:C7:C7:CF:69:FB:27:E5:98:4F:30:29:C3
            X509v3 Authority Key Identifier:
                keyid:32:24:14:D1:DB:98:FF:3F:8C:0C:00:27:2C:00:B2:90:13:2C:5C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/322414D1DB98FF3F8C0C00272C00B290132C5CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09C1392ED71B4B0EE5B815711A45B93183667856210B1737E10C98A3DC950994/0/34352e3138392e3235322e302f32322d3232203d3e20323635363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:24:87:ab:db:e3:26:02:e4:67:80:c2:dc:e5:59:df:fb:79:
         06:93:89:18:00:d8:e2:7f:8a:13:89:ac:af:6b:42:7a:d2:ab:
         01:d2:5f:55:a8:c3:6a:0c:27:ed:d5:98:b5:58:90:87:e0:c5:
         4e:10:c9:fb:e3:14:5b:f6:17:27:c1:47:f8:03:80:21:75:6b:
         52:d1:1f:fd:54:ac:9b:51:47:71:74:e2:8a:fe:ba:c3:5d:f4:
         6c:ad:0c:fb:0d:bc:ed:4d:28:a1:2f:cf:28:b5:2f:a5:3e:e1:
         65:f5:71:4f:21:b4:15:f5:2d:9c:d0:9f:19:7c:c5:b8:21:44:
         fb:52:d3:b8:5e:50:51:76:fd:99:6e:67:d1:18:35:fd:83:25:
         da:25:c1:66:f8:93:39:76:f7:4e:0e:26:49:82:6f:c5:27:55:
         6d:43:cf:09:83:48:46:8d:44:c1:90:c0:7a:0f:a3:65:19:09:
         3e:1c:f6:74:41:67:31:4d:1e:94:a1:34:66:68:9a:ce:94:92:
         d5:ce:10:79:bd:ab:6c:0d:97:6f:4e:f4:49:ec:ae:8e:91:3b:
         ac:c6:2a:40:a4:c1:b1:08:db:fb:95:f3:12:a4:3d:38:52:30:
         36:3a:3a:60:a3:18:e2:54:9a:97:db:de:54:d9:af:90:2e:6a:
         c4:93:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:07:20 2025 by rpki-client