This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32322d3233203d3e20323635383236.roa
File:                     34352e37302e3232382e302f32322d3233203d3e20323635383236.roa (raw, json)
Hash identifier:          iOwaISiH4vVwn4ikWDKEEIh23icBqFcz3G9jGjebo+4=
Subject key identifier:   AE:72:10:95:F5:7A:20:B4:25:38:33:91:C3:29:16:3F:38:81:D4:82
Certificate issuer:       /CN=F785859FBACDBEF31792F07975E7101B28F16433
Certificate serial:       2EA5BBC50638CC3AB66C6A2DD388F76B38E56379
Authority key identifier: F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32322d3233203d3e20323635383236.roa
Signing time:             Tue 06 Jan 2026 19:19:00 +0000
ROA not before:           Tue 06 Jan 2026 19:14:00 +0000
ROA not after:            Tue 05 Jan 2027 19:19:00 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 09:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:bb:c5:06:38:cc:3a:b6:6c:6a:2d:d3:88:f7:6b:38:e5:63:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F785859FBACDBEF31792F07975E7101B28F16433
        Validity
            Not Before: Jan  6 19:14:00 2026 GMT
            Not After : Jan  5 19:19:00 2027 GMT
        Subject: CN=AE721095F57A20B425383391C329163F3881D482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:b6:ff:20:8a:d4:6e:6f:cf:7e:47:ed:40:
                    a7:87:80:03:d1:13:df:4d:be:85:74:af:89:64:f4:
                    e9:64:ec:6f:8b:c8:c3:c6:58:54:54:e5:2c:0c:47:
                    70:08:32:37:cc:f2:f2:ae:0d:c2:92:3d:66:a4:39:
                    0c:ad:f1:71:03:e6:bd:6c:7d:16:03:e4:1b:aa:16:
                    72:fd:e8:8a:13:12:72:7c:b0:d4:1e:40:15:81:8e:
                    ed:af:f0:ed:89:ea:40:32:e9:43:1f:58:81:44:9e:
                    1e:92:e4:66:34:bb:c3:1b:6b:60:f0:53:8e:97:99:
                    23:b9:f4:7b:71:dd:ff:74:fa:b5:4b:ff:06:dd:b8:
                    56:06:0c:e4:57:49:77:83:69:d5:e0:b7:ba:40:ba:
                    35:2e:18:7c:93:f9:b4:43:dc:14:5e:52:bf:0e:4f:
                    e2:87:99:10:15:a4:80:7a:3f:6d:fe:c1:fd:d6:f1:
                    15:c9:b9:d0:88:22:c9:49:db:ef:29:d0:d9:e8:23:
                    59:b1:aa:2b:d6:4d:ea:9c:39:ea:51:b3:c8:31:f5:
                    c7:c1:80:73:74:d9:f3:a3:75:0e:9b:cf:8b:50:74:
                    1b:b3:d9:fa:3c:e7:7e:29:22:85:fa:4e:52:fa:83:
                    f7:a0:4a:89:39:26:70:97:e5:df:c8:2c:81:b0:05:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:10:95:F5:7A:20:B4:25:38:33:91:C3:29:16:3F:38:81:D4:82
            X509v3 Authority Key Identifier:
                keyid:F7:85:85:9F:BA:CD:BE:F3:17:92:F0:79:75:E7:10:1B:28:F1:64:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/F785859FBACDBEF31792F07975E7101B28F16433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F785859FBACDBEF31792F07975E7101B28F16433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94B185E25AAB8941461B292DD84CF4159C0A215B30C96E33CAFE7AF97A6BDF48/0/34352e37302e3232382e302f32322d3233203d3e20323635383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:ed:3d:4b:5b:71:4f:6d:28:77:cf:23:20:90:ef:06:60:23:
         ff:12:6d:95:f7:7e:8b:32:46:4b:b0:41:9f:9f:ad:04:9e:87:
         0e:2e:d2:0c:af:32:09:f5:cf:05:c4:40:d6:57:3c:84:f1:01:
         56:0c:dd:1a:0d:44:b6:9c:87:29:48:de:5b:25:5c:1a:f9:d7:
         d1:b7:cd:94:93:ec:38:ef:a1:af:fe:c7:13:fb:7d:0c:b3:05:
         70:da:7b:50:77:d6:2c:87:e8:97:78:08:57:86:5e:16:e1:32:
         a5:25:fb:49:fe:2d:8e:90:2e:da:96:35:6f:f8:9e:c8:34:85:
         89:6f:aa:bd:5f:aa:ea:73:da:1e:84:c4:6f:25:9a:c7:91:30:
         0c:4a:07:1a:01:8b:87:7e:96:44:b8:e5:9c:b5:08:30:1a:e6:
         32:8b:6c:ec:6f:42:55:9e:71:80:13:28:f5:46:5c:34:4b:a4:
         44:fe:95:8f:5a:de:5b:f3:35:3b:6a:c6:a7:d5:54:a8:34:b9:
         05:ca:df:15:56:91:95:64:99:23:ff:f6:62:c1:e8:4c:ea:28:
         9f:4f:54:39:35:6c:b0:87:cc:a7:47:78:a1:82:3c:5d:2a:98:
         8c:6a:21:ff:1a:64:65:81:87:2f:99:65:49:e4:96:ec:6c:19:
         e1:7e:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:59 2026 by rpki-client