This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa
File:                     34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa (raw, json)
Hash identifier:          Sq84FnZ5JiVW9Sjy19i6SEVGq1QJ5ndQt5w9E1FXUDw=
Subject key identifier:   48:54:C0:68:1C:74:BA:39:57:1F:6A:7D:37:B7:2A:2F:81:F0:65:DB
Certificate issuer:       /CN=CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4
Certificate serial:       064EB2DDD4740BE457BE774B0D52E0695DAA70AE
Authority key identifier: CE:1F:DA:E6:92:87:B2:29:58:F8:AF:C0:AC:C8:30:13:DD:CC:99:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa
Signing time:             Tue 06 Jan 2026 19:11:55 +0000
ROA not before:           Tue 06 Jan 2026 19:06:55 +0000
ROA not after:            Tue 05 Jan 2027 19:11:55 +0000
asID:                     265876
IP address blocks:        45.226.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4e:b2:dd:d4:74:0b:e4:57:be:77:4b:0d:52:e0:69:5d:aa:70:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4
        Validity
            Not Before: Jan  6 19:06:55 2026 GMT
            Not After : Jan  5 19:11:55 2027 GMT
        Subject: CN=4854C0681C74BA39571F6A7D37B72A2F81F065DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:ce:be:3a:e6:8c:63:d1:49:61:bf:54:92:
                    d5:d5:41:eb:0e:c5:0c:3a:78:d8:35:5e:75:00:37:
                    ae:86:0d:88:f1:a3:55:b9:8b:34:b9:bf:d1:e1:fe:
                    5c:69:f0:a0:6e:2a:be:67:7b:38:90:27:76:d7:1e:
                    cf:9c:cd:f2:e3:b3:8d:68:de:6e:8d:21:33:88:62:
                    54:85:95:9d:af:58:55:23:15:5b:e7:02:38:e3:b2:
                    60:82:a5:86:e7:a7:62:d2:0b:79:03:15:81:c2:71:
                    9a:86:a5:d6:18:51:3d:6e:3a:32:62:8c:c0:9f:ae:
                    e8:56:6e:34:85:31:b9:67:fd:6d:12:03:4b:8c:22:
                    3e:1c:53:23:4b:68:d5:47:be:4d:4f:8e:8d:43:6d:
                    f7:44:73:3e:a3:ba:c6:8f:c7:33:2d:cc:34:18:ea:
                    69:16:91:e2:3a:54:f7:e7:48:2b:d5:60:9d:2d:fc:
                    f5:d5:92:60:27:97:8d:99:eb:79:39:a0:da:0d:a2:
                    f2:77:8d:f6:48:d8:b2:8d:64:0a:bd:1f:3e:89:57:
                    45:f9:e7:91:67:ad:38:41:f5:7a:e9:15:cd:e6:7b:
                    10:5e:72:d9:c1:69:a8:e8:ef:c2:e1:73:94:0f:20:
                    44:b1:0c:93:78:88:d0:f6:79:ab:7a:da:cd:db:ef:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:54:C0:68:1C:74:BA:39:57:1F:6A:7D:37:B7:2A:2F:81:F0:65:DB
            X509v3 Authority Key Identifier:
                keyid:CE:1F:DA:E6:92:87:B2:29:58:F8:AF:C0:AC:C8:30:13:DD:CC:99:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FDAE69287B22958F8AFC0ACC83013DDCC99D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAE7E39EF1039F72FA2E54815626192E517B2B967CCAA02CB1D0AA59B2FF0BE/0/34352e3232362e3232382e302f32322d3234203d3e20323635383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:0d:46:c2:c6:d7:bf:7a:24:08:26:48:b0:62:37:f5:0f:
         96:3f:f6:f3:f7:62:a5:9a:c6:13:9d:96:78:77:3c:cd:71:27:
         60:c2:8e:11:28:a7:68:9e:aa:89:3f:29:8d:1f:a2:db:5d:db:
         22:82:2f:19:00:cb:b3:8e:4b:e7:fc:3d:38:df:fa:67:d6:80:
         06:0f:58:98:db:f0:ed:30:30:ff:f6:14:11:47:29:05:9c:76:
         6f:f1:9f:36:4d:64:1e:25:38:d2:6e:d1:a1:e7:c9:e7:3e:f9:
         78:cc:80:bc:5d:75:46:49:4c:36:71:0b:ca:12:cb:a7:41:ca:
         70:80:fd:ea:0c:2d:e2:c0:77:83:76:3a:ca:ea:97:dd:05:40:
         a9:1a:97:3e:de:43:f7:8b:17:20:cf:e6:a8:10:b4:71:0c:ae:
         a2:c2:88:59:ed:12:59:ab:f7:93:5a:f7:cc:47:e0:ac:07:23:
         4f:6a:5e:88:c3:b6:15:f4:fe:5c:bf:3a:20:d2:da:5f:cd:9e:
         c8:f7:9e:b5:ef:c0:e3:03:cf:1d:07:a9:f9:ff:b6:e1:b1:ab:
         2f:e2:85:32:a7:d6:5b:f5:34:87:fe:15:1d:95:d2:f4:64:90:
         15:c3:79:0a:3b:32:63:a6:7e:03:01:81:e8:b7:b6:06:f2:b2:
         36:a6:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:53:53 2026 by rpki-client