This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa
File:                     34352e3232362e3130302e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier:          lOt19yKVgMA8Lb7KdzclnPjHCPulohYtKiwDu6GE0+Y=
Subject key identifier:   5C:82:B9:02:81:42:E7:B1:DA:F4:43:D2:E6:9B:4F:60:0F:7A:50:D4
Certificate issuer:       /CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
Certificate serial:       51A7C734488709FC7418D2AFC95C40497B0510E1
Authority key identifier: AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa
Signing time:             Tue 06 Jan 2026 19:06:51 +0000
ROA not before:           Tue 06 Jan 2026 19:01:51 +0000
ROA not after:            Tue 05 Jan 2027 19:06:51 +0000
asID:                     52327
IP address blocks:        45.226.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl
                          rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 09:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a7:c7:34:48:87:09:fc:74:18:d2:af:c9:5c:40:49:7b:05:10:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
        Validity
            Not Before: Jan  6 19:01:51 2026 GMT
            Not After : Jan  5 19:06:51 2027 GMT
        Subject: CN=5C82B9028142E7B1DAF443D2E69B4F600F7A50D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:77:7a:1b:e1:40:8c:aa:20:c1:f5:e9:9e:
                    83:3d:41:53:7e:49:fb:58:01:53:2e:c5:97:5e:3e:
                    95:4f:32:0e:e5:ad:bc:d8:5a:06:04:e4:e7:68:46:
                    59:bf:d0:f8:59:ec:a0:89:d6:6c:09:5d:ca:66:b2:
                    7c:f1:c0:0f:fc:68:fb:32:76:23:b3:e1:9a:27:3b:
                    2c:12:bf:d1:83:3c:84:34:14:dc:b1:c5:6c:0d:51:
                    c2:b8:85:35:de:14:a4:a5:d8:cd:04:ba:0d:d5:06:
                    b2:57:55:85:09:89:4f:f5:d0:1b:3b:24:04:0d:91:
                    a0:07:73:74:b1:2c:37:08:58:01:53:5b:55:29:a4:
                    10:5a:b1:58:98:ed:7b:53:d5:35:a8:1e:5c:cf:b2:
                    04:9c:75:c3:80:90:7c:dc:e9:5f:a9:42:cb:0b:1b:
                    30:14:2a:14:c0:c3:38:55:4f:7f:06:2d:db:cc:14:
                    10:86:fc:78:ed:44:ec:d5:df:7d:17:21:58:09:58:
                    aa:c7:38:dc:0f:96:19:6c:d1:d6:30:bb:66:1c:55:
                    c8:b8:6e:be:c9:6b:a7:77:1a:48:b7:40:18:6d:6a:
                    b0:7d:98:32:30:d3:74:c5:d0:12:73:1b:de:fb:64:
                    1e:b1:42:cb:d2:49:d1:30:3b:4f:8b:1f:80:3a:da:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:B9:02:81:42:E7:B1:DA:F4:43:D2:E6:9B:4F:60:0F:7A:50:D4
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:38:f4:95:83:20:69:da:e1:94:ca:fd:26:73:a3:b1:13:b7:
         d7:02:75:3b:93:e9:ab:77:43:55:5d:21:82:08:63:2c:49:6f:
         81:ec:85:0c:a9:b3:28:08:cd:58:40:4b:4e:c2:e5:f9:67:c9:
         3b:a6:e4:80:67:07:24:73:3d:ef:45:9b:4f:b5:40:10:71:f3:
         82:fd:6c:51:d5:35:1b:1e:5a:6c:2d:d3:7e:5c:59:de:d0:b9:
         02:d3:e8:7d:cc:6b:d8:92:b5:ba:d8:87:6c:e7:28:04:d9:62:
         72:53:1d:8f:94:33:8e:62:e3:c5:26:e6:b0:0c:43:03:21:f6:
         24:d4:1a:2b:54:3c:95:55:b6:75:30:88:01:fc:55:96:0b:c2:
         ab:79:17:ee:4d:45:56:7e:66:8b:20:11:dd:40:20:50:25:d5:
         32:db:90:68:f4:32:4c:39:0b:8b:cc:d0:f0:6a:d4:56:20:23:
         9f:d2:4a:70:3e:e4:62:8b:bb:20:c1:3a:3d:73:6e:1c:c4:a2:
         c8:76:10:aa:84:b1:3d:c3:53:a6:d1:6a:1a:65:dc:6c:cf:32:
         9e:c4:4c:57:6c:21:be:9a:63:86:dd:e5:33:da:8e:5c:e8:b9:
         bd:26:4f:e9:a6:1a:b0:9b:c9:81:64:7e:9d:69:e8:0e:dd:75:
         ed:2c:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:53:20 2026 by rpki-client