This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B5614A01C73285DB4905FA4A8D90C8371ABB1B890100D2002FFA7EC5550D338/0/34352e3232372e3135322e302f32322d3234203d3e203532343434.roa
File:                     34352e3232372e3135322e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          JFQchIK4ID1MRJkhE947zG6FKfKkWMrGri2tfBeDFaA=
Subject key identifier:   73:23:68:D4:F2:1D:8F:47:6D:93:5B:85:B4:33:62:0F:65:F7:0E:CE
Certificate issuer:       /CN=E4A23A363B591D0CF864B139D921FDB4D1A26A3A
Certificate serial:       77AFDC095305CAFA44950838E109D170EE7BDB6A
Authority key identifier: E4:A2:3A:36:3B:59:1D:0C:F8:64:B1:39:D9:21:FD:B4:D1:A2:6A:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A23A363B591D0CF864B139D921FDB4D1A26A3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B5614A01C73285DB4905FA4A8D90C8371ABB1B890100D2002FFA7EC5550D338/0/34352e3232372e3135322e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 06 Jan 2026 19:07:22 +0000
ROA not before:           Tue 06 Jan 2026 19:02:22 +0000
ROA not after:            Tue 05 Jan 2027 19:07:22 +0000
asID:                     52444
IP address blocks:        45.227.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B5614A01C73285DB4905FA4A8D90C8371ABB1B890100D2002FFA7EC5550D338/0/E4A23A363B591D0CF864B139D921FDB4D1A26A3A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B5614A01C73285DB4905FA4A8D90C8371ABB1B890100D2002FFA7EC5550D338/0/E4A23A363B591D0CF864B139D921FDB4D1A26A3A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A23A363B591D0CF864B139D921FDB4D1A26A3A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:af:dc:09:53:05:ca:fa:44:95:08:38:e1:09:d1:70:ee:7b:db:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A23A363B591D0CF864B139D921FDB4D1A26A3A
        Validity
            Not Before: Jan  6 19:02:22 2026 GMT
            Not After : Jan  5 19:07:22 2027 GMT
        Subject: CN=732368D4F21D8F476D935B85B433620F65F70ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:9a:95:ea:c7:f7:5b:ae:20:62:1c:9d:61:
                    f1:86:6e:45:31:fa:a5:64:9a:f3:dc:a2:70:8b:3f:
                    e6:ca:26:ea:53:e6:bc:07:1c:a2:d5:5b:6f:6d:09:
                    8f:6e:f2:19:31:b9:b7:13:ed:25:2c:72:8c:74:5d:
                    f6:8b:4a:74:e0:81:50:2f:9f:da:63:0f:05:c2:a0:
                    be:f0:7a:9c:5d:f9:8d:b8:b1:b8:1c:30:49:df:6a:
                    4c:d2:81:48:97:a0:d3:44:74:cb:c0:95:a1:cb:b8:
                    fd:e8:de:06:6e:bd:2b:58:32:7c:65:e7:ca:5b:28:
                    99:c4:b8:90:2b:e1:f4:43:5f:ce:d8:bb:4d:d7:d0:
                    03:08:a9:cd:21:ad:a2:89:bb:20:73:f3:0c:d3:31:
                    56:3d:b1:b9:48:50:29:db:c9:e6:15:c0:04:84:10:
                    24:a2:70:31:9a:b0:f6:89:7c:6b:3c:1c:98:ae:ea:
                    7b:4d:bc:b9:fd:96:33:73:6f:88:88:32:d6:91:f7:
                    65:a2:d9:7a:e7:75:12:10:7c:2b:ae:ec:c4:04:60:
                    a0:1c:4f:e6:98:e5:c9:8f:03:1a:bc:e7:ac:f3:c5:
                    4f:41:9c:e2:dc:a5:49:dc:f4:f5:9b:78:39:a3:d5:
                    2f:63:32:22:b1:b0:d6:85:d9:7f:6b:98:50:1a:57:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:23:68:D4:F2:1D:8F:47:6D:93:5B:85:B4:33:62:0F:65:F7:0E:CE
            X509v3 Authority Key Identifier:
                keyid:E4:A2:3A:36:3B:59:1D:0C:F8:64:B1:39:D9:21:FD:B4:D1:A2:6A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B5614A01C73285DB4905FA4A8D90C8371ABB1B890100D2002FFA7EC5550D338/0/E4A23A363B591D0CF864B139D921FDB4D1A26A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A23A363B591D0CF864B139D921FDB4D1A26A3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B5614A01C73285DB4905FA4A8D90C8371ABB1B890100D2002FFA7EC5550D338/0/34352e3232372e3135322e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:c5:47:6c:95:6e:ab:c1:19:5f:b9:14:5e:93:36:cb:ad:
         d4:3b:82:e2:c8:e1:cc:ce:fc:8f:7d:74:29:87:b8:53:16:58:
         56:ed:26:06:13:f7:98:12:cf:75:22:d1:24:3a:53:cd:b8:2c:
         97:13:06:f0:d1:ac:f0:40:1c:55:4b:24:7d:04:ad:a8:3e:f9:
         ec:62:fa:0d:17:aa:c3:6d:04:50:e7:91:2a:63:c1:fc:eb:39:
         e3:f8:0c:fa:31:3b:9f:fc:9f:d1:05:36:d6:6b:99:eb:3c:56:
         53:8c:8c:a5:48:8d:ba:a1:20:4f:81:66:0d:7c:0d:8b:89:0f:
         51:f8:33:a3:5c:27:eb:25:11:67:b6:94:ae:28:4c:89:d5:9d:
         5c:7d:b1:f5:21:61:63:fc:16:70:12:ee:28:76:b0:3d:ff:ee:
         0a:86:d7:36:61:b0:d9:c8:dc:60:77:9a:c9:df:dc:1a:93:9c:
         72:cd:87:99:a2:3b:3d:23:f3:e2:88:8b:a5:ee:85:1d:f8:3e:
         b5:83:c7:35:dd:f6:f0:fe:ec:8c:27:16:c8:c3:b2:22:27:20:
         f8:6a:8f:6b:67:38:11:20:34:84:ad:03:d1:b1:6d:d0:cc:eb:
         a7:ab:66:0c:95:97:4e:01:c2:ca:4c:72:38:4b:84:61:ab:5b:
         1b:2c:91:00
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUd6/cCVMFyvpElQg44QnRcO5722owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRBMjNBMzYzQjU5MUQwQ0Y4NjRCMTM5RDkyMUZEQjRE
MUEyNkEzQTAeFw0yNjAxMDYxOTAyMjJaFw0yNzAxMDUxOTA3MjJaMDMxMTAvBgNV
BAMTKDczMjM2OEQ0RjIxRDhGNDc2RDkzNUI4NUI0MzM2MjBGNjVGNzBFQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rJqV6sf3W64gYhydYfGGbkUx
+qVkmvPconCLP+bKJupT5rwHHKLVW29tCY9u8hkxubcT7SUscox0XfaLSnTggVAv
n9pjDwXCoL7wepxd+Y24sbgcMEnfakzSgUiXoNNEdMvAlaHLuP3o3gZuvStYMnxl
58pbKJnEuJAr4fRDX87Yu03X0AMIqc0hraKJuyBz8wzTMVY9sblIUCnbyeYVwASE
ECSicDGasPaJfGs8HJiu6ntNvLn9ljNzb4iIMtaR92Wi2XrndRIQfCuu7MQEYKAc
T+aY5cmPAxq856zzxU9BnOLcpUnc9PWbeDmj1S9jMiKxsNaF2X9rmFAaV2ixAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcyNo1PIdj0dtk1uFtDNiD2X3Ds4wHwYDVR0j
BBgwFoAU5KI6NjtZHQz4ZLE52SH9tNGiajowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQjU2MTRBMDFDNzMyODVEQjQ5MDVGQTRBOEQ5MEM4Mzcx
QUJCMUI4OTAxMDBEMjAwMkZGQTdFQzU1NTBEMzM4LzAvRTRBMjNBMzYzQjU5MUQw
Q0Y4NjRCMTM5RDkyMUZEQjREMUEyNkEzQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNEEyM0EzNjNCNTkxRDBDRjg2
NEIxMzlEOTIxRkRCNEQxQTI2QTNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEI1NjE0QTAxQzczMjg1REI0OTA1RkE0QThEOTBDODM3MUFCQjFCODkw
MTAwRDIwMDJGRkE3RUM1NTUwRDMzOC8wLzM0MzUyZTMyMzIzNzJlMzEzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3jmDAN
BgkqhkiG9w0BAQsFAAOCAQEAJZrFR2yVbqvBGV+5FF6TNsut1DuC4sjhzM78j310
KYe4UxZYVu0mBhP3mBLPdSLRJDpTzbgslxMG8NGs8EAcVUskfQStqD757GL6DReq
w20EUOeRKmPB/Os54/gM+jE7n/yf0QU21muZ6zxWU4yMpUiNuqEgT4FmDXwNi4kP
Ufgzo1wn6yURZ7aUrihMidWdXH2x9SFhY/wWcBLuKHawPf/uCobXNmGw2cjcYHea
yd/cGpOccs2HmaI7PSPz4oiLpe6FHfg+tYPHNd328P7sjCcWyMOyIicg+GqPa2c4
ESA0hK0D0bFt0Mzrp6tmDJWXTgHCykxyOEuEYatbGyyRAA==
-----END CERTIFICATE-----
Generated at Mon Jan 12 06:07:05 2026 by rpki-client