This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa
File:                     34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa (raw, json)
Hash identifier:          KMiVUe0C1Hz62HDgbQW7Ylv2DpRb2rIGETjGKS8KtBI=
Subject key identifier:   64:A0:BE:17:78:17:46:5B:30:44:AE:78:F0:FA:57:54:DA:EF:00:AB
Certificate issuer:       /CN=D762BD634950F86F90198996258F5C888AE2933E
Certificate serial:       0FC085D53EA545DD6F7ED4C7A103E83781D4A4BC
Authority key identifier: D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa
Signing time:             Tue 06 Jan 2026 19:26:32 +0000
ROA not before:           Tue 06 Jan 2026 19:21:32 +0000
ROA not after:            Tue 05 Jan 2027 19:26:32 +0000
asID:                     266673
IP address blocks:        45.228.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 07:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c0:85:d5:3e:a5:45:dd:6f:7e:d4:c7:a1:03:e8:37:81:d4:a4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D762BD634950F86F90198996258F5C888AE2933E
        Validity
            Not Before: Jan  6 19:21:32 2026 GMT
            Not After : Jan  5 19:26:32 2027 GMT
        Subject: CN=64A0BE177817465B3044AE78F0FA5754DAEF00AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:f3:61:ef:2b:62:ac:94:b5:d9:ea:8c:c8:
                    b8:63:58:03:30:56:1a:80:90:af:8b:9b:42:c9:5e:
                    9d:e7:35:3f:27:eb:a7:20:d0:ee:fa:11:3e:7b:f1:
                    ba:03:b5:87:fb:4d:23:7b:8c:81:bd:5e:dc:b2:6c:
                    be:d5:1e:be:be:a6:17:6b:a3:4f:72:09:4d:ee:ca:
                    23:c2:a8:93:1e:43:13:1f:61:45:bf:96:02:8e:c2:
                    60:36:b7:55:87:16:61:b9:29:07:80:c9:05:f1:99:
                    5f:92:73:c8:d5:f6:e5:ca:f1:11:47:e4:7f:09:5e:
                    29:ab:15:6f:35:71:14:ad:f9:07:38:2f:7a:2b:dc:
                    37:20:cc:58:92:b9:c2:fd:30:2a:db:d1:06:fa:c3:
                    99:2c:08:55:9c:b4:c4:ed:4f:66:95:e7:10:c8:59:
                    ba:5b:2c:1b:8c:e8:ea:6b:a4:87:de:07:3f:d3:f8:
                    d2:bd:e9:04:b6:49:59:3d:6f:d4:e2:90:1a:cb:ea:
                    37:6f:da:51:9a:21:30:34:7f:8c:a4:41:9e:05:d7:
                    8f:39:20:92:5b:87:33:da:65:9c:eb:de:dd:f0:50:
                    28:05:41:5f:5d:0d:26:68:03:33:6c:72:7e:85:65:
                    b6:5f:a6:dc:ff:7f:14:67:6d:36:7e:23:1b:f4:13:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A0:BE:17:78:17:46:5B:30:44:AE:78:F0:FA:57:54:DA:EF:00:AB
            X509v3 Authority Key Identifier:
                keyid:D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:13:19:9f:92:73:b9:8a:a5:bb:d5:ed:a7:e9:45:11:9f:9c:
         4b:76:0c:99:0c:b9:99:43:16:b3:bd:f2:57:50:24:a5:eb:ff:
         f6:0e:2d:a2:51:22:ae:8f:13:79:3d:48:ad:55:d1:2b:f7:a0:
         cb:c8:8c:32:d3:5a:01:df:77:cd:80:d3:4a:32:ec:03:81:83:
         d2:1d:5d:90:08:8b:c7:5e:d6:46:18:fc:6e:ad:74:48:df:d1:
         63:3f:37:d4:ae:b9:58:be:e1:91:10:7f:30:18:51:cc:b6:a1:
         38:82:7c:f9:a7:7f:59:09:c8:67:03:aa:44:61:13:68:b5:29:
         2f:73:73:10:ad:6b:11:b4:8c:2e:4a:d1:da:00:20:08:57:ad:
         1c:69:93:73:ae:6d:9e:09:38:c1:44:12:f7:da:47:b7:fe:ce:
         43:ef:43:7c:5e:f2:64:02:2a:86:21:50:25:5a:e2:2d:6f:66:
         27:1e:62:d6:c1:db:93:94:ed:3d:df:f5:cb:60:a4:9b:f8:b5:
         88:1f:57:d9:00:be:6f:1e:0c:b2:a7:95:f1:6c:2a:9f:3e:60:
         0b:9d:cd:4b:6d:5f:3c:06:fa:8f:56:5e:65:e0:3f:67:8a:9d:
         e7:ab:b7:2c:7a:9b:1c:30:7a:af:25:1d:4c:0d:9d:7c:b6:14:
         08:0d:97:bc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUD8CF1T6lRd1vftTHoQPoN4HUpLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc2MkJENjM0OTUwRjg2RjkwMTk4OTk2MjU4RjVDODg4
QUUyOTMzRTAeFw0yNjAxMDYxOTIxMzJaFw0yNzAxMDUxOTI2MzJaMDMxMTAvBgNV
BAMTKDY0QTBCRTE3NzgxNzQ2NUIzMDQ0QUU3OEYwRkE1NzU0REFFRjAwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI3vNh7ytirJS12eqMyLhjWAMw
VhqAkK+Lm0LJXp3nNT8n66cg0O76ET578boDtYf7TSN7jIG9XtyybL7VHr6+phdr
o09yCU3uyiPCqJMeQxMfYUW/lgKOwmA2t1WHFmG5KQeAyQXxmV+Sc8jV9uXK8RFH
5H8JXimrFW81cRSt+Qc4L3or3DcgzFiSucL9MCrb0Qb6w5ksCFWctMTtT2aV5xDI
WbpbLBuM6OprpIfeBz/T+NK96QS2SVk9b9TikBrL6jdv2lGaITA0f4ykQZ4F1485
IJJbhzPaZZzr3t3wUCgFQV9dDSZoAzNscn6FZbZfptz/fxRnbTZ+Ixv0E3whAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZKC+F3gXRlswRK548PpXVNrvAKswHwYDVR0j
BBgwFoAU12K9Y0lQ+G+QGYmWJY9ciIrikz4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82REIxNzhERkU1MTUxQ0ZDMjIxMzQ0NzA1Q0FEQzhFRDNC
N0M3NzZBRjgxRUI0QzlFMkJGRUQ0QkIyNUNBRERFLzAvRDc2MkJENjM0OTUwRjg2
RjkwMTk4OTk2MjU4RjVDODg4QUUyOTMzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENzYyQkQ2MzQ5NTBGODZGOTAx
OTg5OTYyNThGNUM4ODhBRTI5MzNFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkRCMTc4REZFNTE1MUNGQzIyMTM0NDcwNUNBREM4RUQzQjdDNzc2QUY4
MUVCNEM5RTJCRkVENEJCMjVDQURERS8wLzM0MzUyZTMyMzIzODJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzYzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeSI
MA0GCSqGSIb3DQEBCwUAA4IBAQB0ExmfknO5iqW71e2n6UURn5xLdgyZDLmZQxaz
vfJXUCSl6//2Di2iUSKujxN5PUitVdEr96DLyIwy01oB33fNgNNKMuwDgYPSHV2Q
CIvHXtZGGPxurXRI39FjPzfUrrlYvuGREH8wGFHMtqE4gnz5p39ZCchnA6pEYRNo
tSkvc3MQrWsRtIwuStHaACAIV60caZNzrm2eCTjBRBL32ke3/s5D70N8XvJkAiqG
IVAlWuItb2YnHmLWwduTlO093/XLYKSb+LWIH1fZAL5vHgyyp5XxbCqfPmALnc1L
bV88BvqPVl5l4D9nip3nq7csepscMHqvJR1MDZ18thQIDZe8
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:15:53 2026 by rpki-client