This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/34352e3139302e36342e302f32322d3232203d3e2033323537.roa
File:                     34352e3139302e36342e302f32322d3232203d3e2033323537.roa (raw, json)
Hash identifier:          CsGb4vpRhJuJ/K80YIpMfzz9FgRL4/Owy+jTJ6l2S4c=
Subject key identifier:   DD:21:7D:7C:CB:C7:B1:6E:E7:2E:B8:BE:A9:97:C8:C8:94:A9:58:55
Certificate issuer:       /CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
Certificate serial:       0FE135EBDC11FD9DFE2739028BFDD30DB472550F
Authority key identifier: AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/34352e3139302e36342e302f32322d3232203d3e2033323537.roa
Signing time:             Tue 06 Jan 2026 19:30:19 +0000
ROA not before:           Tue 06 Jan 2026 19:25:19 +0000
ROA not after:            Tue 05 Jan 2027 19:30:19 +0000
asID:                     3257
IP address blocks:        45.190.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:35:eb:dc:11:fd:9d:fe:27:39:02:8b:fd:d3:0d:b4:72:55:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
        Validity
            Not Before: Jan  6 19:25:19 2026 GMT
            Not After : Jan  5 19:30:19 2027 GMT
        Subject: CN=DD217D7CCBC7B16EE72EB8BEA997C8C894A95855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:2d:01:eb:ec:06:91:37:ba:33:1b:c0:df:
                    e7:3a:05:4d:9e:cd:8a:eb:4d:a8:64:33:41:fa:c5:
                    d8:93:ee:84:81:c2:c5:23:38:de:c9:81:77:24:97:
                    b1:80:85:12:fd:6f:e1:fb:e3:b1:bb:ac:4e:6d:21:
                    7e:bf:19:93:28:5c:ad:a3:b1:c1:54:f1:ab:4a:c7:
                    a0:20:2a:66:0d:0a:7a:16:93:20:09:89:d1:08:0c:
                    f9:37:ad:d2:14:bf:71:bf:ba:02:b5:bb:b3:f3:83:
                    ba:b7:12:b5:c4:56:c7:69:f4:27:d7:25:7f:6e:10:
                    cb:e5:e6:93:a6:1a:fe:a6:7f:fe:e5:da:0b:4e:29:
                    a5:0d:75:1d:31:28:a4:5c:f4:c4:5e:aa:4a:83:9c:
                    2f:93:9a:fb:37:7b:ab:17:9f:12:10:de:71:3f:99:
                    86:1d:d5:e5:6a:a3:fa:87:d8:ee:a7:b8:fa:71:ab:
                    6c:4b:44:09:8a:78:af:8e:9c:1b:c4:bd:30:77:93:
                    24:61:41:0e:70:be:26:22:b8:22:7f:ee:2b:fa:db:
                    7e:ec:d0:e7:3d:fd:d9:e1:a6:dd:a7:4b:73:ce:55:
                    42:81:f7:15:a8:85:24:d2:d2:12:cf:2b:6b:32:29:
                    16:2e:e7:13:0e:75:7f:e9:a4:40:20:0d:49:08:48:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:7D:7C:CB:C7:B1:6E:E7:2E:B8:BE:A9:97:C8:C8:94:A9:58:55
            X509v3 Authority Key Identifier:
                keyid:AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/34352e3139302e36342e302f32322d3232203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:22:14:5d:01:cf:68:5a:8e:49:0f:43:e0:18:7a:79:59:
         39:1e:2c:f5:5c:90:ce:b3:3a:de:be:f5:7d:1b:3a:0e:ad:a7:
         ec:eb:01:65:bd:64:36:75:47:69:c9:10:24:d0:12:9d:8e:42:
         42:5f:dd:67:4b:a4:e1:2b:8e:2a:2f:1c:27:95:32:69:33:8d:
         e8:c4:41:4b:25:ef:03:13:ce:d6:d3:5e:9f:6e:5b:74:be:04:
         db:03:46:0c:fa:4b:64:d2:2b:74:a9:ea:4b:8d:59:92:07:ed:
         9c:ee:3c:3b:e3:8c:40:bd:f8:b2:90:5a:21:73:37:93:ca:9f:
         74:32:78:d4:2d:55:20:44:ea:6c:03:01:64:0b:90:43:cd:98:
         00:38:69:02:5e:5a:2f:59:74:08:a3:5d:0a:27:d6:c0:8b:c4:
         6b:8c:96:92:38:40:ef:76:70:0e:0c:5e:8e:ea:ae:34:72:d7:
         dd:35:fa:cb:10:25:16:5d:c5:8e:5d:8f:3b:34:b7:f3:28:6c:
         e2:76:1b:e8:60:82:ed:8d:0f:d7:0c:d9:df:7b:b9:72:39:d9:
         df:d0:9d:01:70:07:23:ad:bb:7d:be:ba:92:ae:29:d6:6c:1c:
         db:25:dc:35:00:f3:df:d4:11:e9:f7:aa:8f:c1:21:4e:8c:bb:
         96:ea:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:22:59 2026 by rpki-client