This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
File:                     34352e3232392e33322e302f32322d3234203d3e203238303037.roa (raw, json)
Hash identifier:          NbI5gnnbz2eBuk3Z6GssNwnAB8NWf2HT9TKhWG8mJWw=
Subject key identifier:   9D:B7:2B:C2:4F:3C:4A:0B:E1:B4:20:16:AE:BF:AE:64:68:8C:D6:39
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       687222C7CDB68925630CF509A6A34870BEA3B5F7
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa
Signing time:             Tue 06 Jan 2026 19:22:51 +0000
ROA not before:           Tue 06 Jan 2026 19:17:51 +0000
ROA not after:            Tue 05 Jan 2027 19:22:51 +0000
asID:                     28007
IP address blocks:        45.229.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 14:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:72:22:c7:cd:b6:89:25:63:0c:f5:09:a6:a3:48:70:be:a3:b5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Jan  6 19:17:51 2026 GMT
            Not After : Jan  5 19:22:51 2027 GMT
        Subject: CN=9DB72BC24F3C4A0BE1B42016AEBFAE64688CD639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:28:33:62:9f:14:c5:fc:3c:85:9d:dd:3f:
                    e1:39:e0:d0:9d:ef:60:2f:a9:07:2a:3e:37:0d:e7:
                    31:74:10:f6:0b:22:74:63:69:1e:70:54:bb:fa:4d:
                    53:41:2e:76:9b:74:4b:5b:0e:6d:41:32:33:b7:f7:
                    2e:0e:7d:5a:1d:c5:f5:e2:7b:62:f0:e5:95:de:75:
                    dc:e9:c4:07:e9:33:70:57:ee:33:67:21:ca:af:6a:
                    73:63:16:1e:26:c1:5b:c2:d2:00:56:a9:f3:86:f9:
                    e0:3b:85:18:0e:ce:91:9c:b7:a0:fc:3b:9e:a0:33:
                    4a:0c:a7:6c:64:3e:80:fe:3a:58:15:64:85:f2:d1:
                    cf:c0:10:14:b0:d9:2f:ac:a3:35:15:8e:6a:00:de:
                    33:55:22:14:22:d4:13:a6:f1:f5:9b:c7:3f:62:48:
                    6a:e7:07:07:bc:28:5e:bd:4a:a5:11:9b:d5:3d:8e:
                    49:c2:5c:2f:0a:69:df:d0:0a:5c:0e:b7:81:c1:3e:
                    ac:8f:93:7e:27:69:79:a9:57:a4:6f:8b:cd:5e:42:
                    52:2d:68:fd:1c:f4:32:d0:a0:0c:9f:04:8a:2f:5c:
                    c3:8f:a7:6e:e0:ac:c7:ed:1a:1c:b2:4a:cf:8f:49:
                    60:b0:80:7b:3b:23:a1:8b:7e:15:e4:b6:60:ed:2a:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:2B:C2:4F:3C:4A:0B:E1:B4:20:16:AE:BF:AE:64:68:8C:D6:39
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ed:2b:f3:a8:c6:29:58:c9:3b:48:69:15:79:62:13:00:ed:
         1b:f9:51:08:1f:76:9c:f7:c9:56:31:62:9a:58:92:a7:fe:47:
         ee:56:70:ce:ea:90:0e:ec:ff:85:63:71:a0:14:65:dd:d1:01:
         be:2d:f4:b5:bd:69:10:0b:97:a3:82:55:3a:23:c3:b4:4a:b1:
         0e:b9:41:84:bb:9b:5f:f4:b2:e0:26:49:f6:83:2a:ab:ab:44:
         52:4c:95:78:66:a2:d5:ad:d0:e2:cc:5f:5d:a1:7f:ac:45:f6:
         09:0b:b2:5e:1a:c2:b6:6e:3f:16:c2:57:37:80:91:b5:01:d8:
         d9:8c:7d:72:c7:7c:7f:68:b0:6a:01:0b:4d:0c:bf:a0:16:45:
         18:61:9c:4a:34:87:c7:43:d3:2b:39:3c:0a:3d:42:b7:71:8b:
         ab:d9:df:dc:49:b5:38:67:72:a5:80:ee:3a:60:3b:92:21:62:
         7d:75:cc:9d:4a:e7:67:f9:2b:96:2f:60:b9:f8:4f:ac:b2:56:
         0c:e7:88:bf:03:4a:a9:29:e8:45:95:7b:30:79:c3:ee:a5:55:
         f9:29:75:55:6a:be:9f:f7:28:da:f6:7b:41:64:80:36:0f:48:
         f2:e8:9f:fa:ed:af:ab:4f:be:af:34:42:78:eb:77:f4:c2:8a:
         83:78:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:54:18 2026 by rpki-client