This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323033.roa
File:                     34352e3233322e3131362e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          +DOhxHXAwPwBeT0dNm1Yja8bNMi5CnsdBHEnrR8fQ5s=
Subject key identifier:   55:25:8F:FE:75:14:D4:08:13:35:3A:2D:88:C8:5B:49:2C:0B:86:C7
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       54FD409FE9C28F606D27D15FFC3B275E70F519F8
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323033.roa
Signing time:             Tue 06 Jan 2026 19:30:40 +0000
ROA not before:           Tue 06 Jan 2026 19:25:40 +0000
ROA not after:            Tue 05 Jan 2027 19:30:40 +0000
asID:                     203
IP address blocks:        45.232.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 01:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fd:40:9f:e9:c2:8f:60:6d:27:d1:5f:fc:3b:27:5e:70:f5:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Jan  6 19:25:40 2026 GMT
            Not After : Jan  5 19:30:40 2027 GMT
        Subject: CN=55258FFE7514D40813353A2D88C85B492C0B86C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:f4:6c:c1:68:e0:5d:da:bc:2d:16:9a:a7:
                    a5:74:34:c6:a0:56:b6:4a:fc:28:20:a7:22:61:3b:
                    58:f5:f4:64:af:c2:9d:47:dd:de:cd:1a:09:9d:a9:
                    9b:1f:ba:d2:c1:7f:8a:81:9b:0b:8e:f8:05:42:67:
                    24:c7:5f:4d:9b:ab:24:d3:ce:7b:4d:6e:48:f5:ef:
                    86:87:9f:6f:b4:2d:23:ec:32:bd:eb:02:72:97:6f:
                    27:6e:d9:91:53:8e:c8:b7:01:55:10:7c:33:f3:b2:
                    fc:bd:f4:50:b9:bc:78:10:8e:aa:7a:8e:66:f6:ad:
                    5e:7c:4f:f4:6a:70:b0:94:6f:8c:57:a4:4d:23:a0:
                    a0:63:ad:3e:0a:ff:70:3b:2f:cc:ec:9d:b2:32:71:
                    81:6f:b6:bc:5c:63:a2:5e:3d:5c:8a:38:36:52:f1:
                    ff:d8:d2:be:52:0e:c8:0f:63:9b:de:55:7f:bd:7d:
                    cb:fe:21:9f:b9:e6:b3:3b:33:23:2b:32:32:52:16:
                    0b:2e:fd:fb:0d:78:7e:0d:7a:ae:27:24:83:17:58:
                    31:cc:fc:5a:b2:08:4f:03:63:63:4c:e7:47:c6:ed:
                    75:60:af:a5:fb:5c:7f:d3:b3:ab:af:e6:ba:d5:55:
                    40:e5:33:1f:d2:22:66:df:80:9c:68:4e:d1:fb:60:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:8F:FE:75:14:D4:08:13:35:3A:2D:88:C8:5B:49:2C:0B:86:C7
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:ed:f0:ee:ce:d2:62:2d:1e:b0:e1:b1:6a:54:53:a7:03:
         9d:42:87:d3:a1:f8:66:cd:f9:22:98:23:0c:ec:23:f8:62:9c:
         1b:a5:5d:0a:d2:8a:49:19:28:95:f8:8d:59:2c:e0:76:82:f9:
         d4:6c:27:e5:5b:ff:4d:04:97:c5:c4:16:ba:6c:ee:bd:96:1a:
         a5:be:e3:aa:f2:58:1c:0e:ff:3d:72:91:da:5d:44:4b:44:ca:
         68:46:17:4e:f5:49:9c:2f:05:e0:0b:8a:d7:1b:86:90:9b:ab:
         0a:2c:1f:78:c7:14:9c:67:05:9e:aa:69:91:f5:d9:46:23:b7:
         b0:33:da:7b:01:9b:36:68:ae:a4:f2:7b:e3:0f:b5:66:b6:8d:
         b6:11:f5:ec:b6:cf:56:8a:fa:30:26:fd:66:c4:82:da:77:24:
         0c:29:c7:53:b2:0f:75:f3:1c:ab:01:e6:d7:cd:f2:d5:58:78:
         60:ba:02:18:73:61:96:7a:f1:f4:62:24:3c:88:8f:f6:bf:18:
         59:e2:b5:fb:a3:8a:27:a5:a7:0c:6a:9d:9b:e1:5a:8f:21:32:
         13:0f:59:78:03:7a:25:e8:b2:65:63:08:0b:41:6d:29:40:99:
         2c:e4:85:5f:43:35:7b:0a:61:d8:46:c4:9d:ce:55:66:f4:47:
         a7:4c:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:14:04 2026 by rpki-client