This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32312e302f32342d3234203d3e203237393437.roa
File:                     34352e3232342e32312e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          9PAblcuMWz3DUkfscfIwfU+SlKeCjjdUVxfgGc+zL24=
Subject key identifier:   55:A3:01:8E:E2:0A:CA:59:E9:61:87:18:EA:97:DF:D2:CA:59:9E:DF
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       5EB682DF967131B2A68A66561C17FE5AB8A36C0E
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32312e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 06 Jan 2026 19:13:13 +0000
ROA not before:           Tue 06 Jan 2026 19:08:13 +0000
ROA not after:            Tue 05 Jan 2027 19:13:13 +0000
asID:                     27947
IP address blocks:        45.224.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:82:df:96:71:31:b2:a6:8a:66:56:1c:17:fe:5a:b8:a3:6c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Jan  6 19:08:13 2026 GMT
            Not After : Jan  5 19:13:13 2027 GMT
        Subject: CN=55A3018EE20ACA59E9618718EA97DFD2CA599EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:72:0c:0c:9d:9d:ac:a2:3a:8d:26:e0:e2:
                    2d:2c:b6:8a:22:d9:f9:e6:9c:6d:2f:c0:f6:41:1d:
                    aa:49:49:4f:bc:12:3f:48:e3:c6:94:d5:44:56:d3:
                    1e:8c:f1:02:c3:84:4e:09:57:60:ac:d6:e7:da:9b:
                    d8:cd:4a:49:fa:46:fe:5e:95:91:de:a8:f8:6f:02:
                    4e:f5:82:ca:0e:96:0e:9d:59:96:df:f4:dd:37:74:
                    bc:4a:e3:ee:fa:9e:2a:a9:e7:b7:bf:a3:19:4e:eb:
                    d4:2f:b0:bf:a8:38:78:bf:dc:25:33:06:38:21:6d:
                    1e:4f:1c:85:00:48:91:53:eb:ff:71:df:8c:c8:db:
                    de:08:bb:54:24:f0:34:99:1e:ef:2f:d2:13:70:2c:
                    14:92:61:ea:cf:82:ae:e4:33:23:57:76:69:ab:78:
                    1d:04:37:04:4b:50:43:8f:3a:e1:36:39:23:1e:03:
                    8f:f6:48:21:b3:6f:b4:c2:a0:77:96:4e:12:79:20:
                    1d:43:a3:b5:e7:85:7f:3f:39:93:ba:3d:ea:e3:c1:
                    61:ed:fd:8f:7e:16:bf:32:86:d7:26:6c:d4:bb:95:
                    1d:70:de:97:df:c7:01:be:57:79:83:a8:9a:57:4b:
                    d8:89:4b:33:dd:7d:3c:44:f9:aa:f0:d2:7c:32:97:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A3:01:8E:E2:0A:CA:59:E9:61:87:18:EA:97:DF:D2:CA:59:9E:DF
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32312e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:be:c7:51:24:de:12:8c:d8:48:08:32:00:18:25:8c:4c:be:
         e9:28:42:11:ea:e5:21:53:0f:5a:ab:a6:f8:1f:af:78:a7:36:
         60:a0:a7:4f:c4:8d:99:c3:34:1e:88:56:5a:b6:64:bd:35:6a:
         66:9c:e2:ba:cc:42:5a:da:c1:5f:2d:30:8e:50:2b:2f:b6:b7:
         d0:2c:9e:f2:02:25:61:1d:d3:bb:10:62:29:80:0f:51:3d:93:
         cb:d7:67:d2:c8:3b:a7:9b:7d:ab:6e:0b:bb:95:42:5b:86:21:
         b9:ff:bb:51:63:e1:32:82:e7:64:a8:92:52:07:63:d0:9f:6b:
         63:51:8f:bd:ea:94:9c:4d:21:a6:78:14:51:76:32:66:84:ad:
         d5:11:f1:d0:69:b8:8e:83:5f:a7:07:cb:66:cb:33:37:fd:41:
         c4:4f:db:07:67:7b:b5:15:29:df:31:57:dd:ba:0a:a1:9c:a7:
         ef:10:21:3c:94:50:30:33:43:c5:1d:80:a6:9b:f4:60:b1:cc:
         b6:37:ed:33:30:2e:e7:5e:8f:d7:3d:97:3f:8f:1f:fa:ae:d6:
         3a:91:de:44:83:c2:c4:f9:03:7a:74:f3:e8:f1:cc:fa:2a:6d:
         f8:f3:1d:d5:e0:7f:ce:fb:41:53:6f:ac:5b:07:d8:cb:50:4d:
         32:82:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:36:46 2026 by rpki-client