This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa
File:                     34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          AE2rIDm8unUPAaGyx2xLn1MHE2PnSrmRuuKoqPnekvI=
Subject key identifier:   30:61:83:EE:C8:67:66:6F:BA:B8:07:1B:53:0D:F5:D9:F7:38:31:09
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       33B5225D091D06DF1A0CA7B6C9FE36692DA54779
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa
Signing time:             Tue 06 Jan 2026 19:43:43 +0000
ROA not before:           Tue 06 Jan 2026 19:38:43 +0000
ROA not after:            Tue 05 Jan 2027 19:43:43 +0000
asID:                     265851
IP address blocks:        45.225.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 06:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:22:5d:09:1d:06:df:1a:0c:a7:b6:c9:fe:36:69:2d:a5:47:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Jan  6 19:38:43 2026 GMT
            Not After : Jan  5 19:43:43 2027 GMT
        Subject: CN=306183EEC867666FBAB8071B530DF5D9F7383109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:be:3a:85:88:46:a7:d5:49:78:22:45:8e:a4:
                    de:a7:31:51:d3:e0:1c:4a:bb:9b:91:cd:3f:ab:37:
                    83:40:a8:e5:b5:8d:07:03:04:05:90:6a:dd:e8:3f:
                    26:a0:e0:0f:9b:29:ae:96:04:34:7f:fe:a2:9b:95:
                    b9:3c:88:43:5b:60:fe:b9:03:90:0d:55:31:c9:b9:
                    73:e2:8b:68:7d:8c:9b:31:34:48:40:e5:7a:20:c3:
                    5e:e8:18:86:7e:ad:29:4e:b5:0a:01:ed:3f:92:e0:
                    f2:4e:3c:fa:3c:a9:51:43:2c:a9:0a:59:12:31:31:
                    24:a2:0b:3d:59:94:6d:47:94:74:80:29:63:c7:2a:
                    c8:bc:ba:7b:89:c2:7b:bc:c8:bc:81:e8:70:86:1c:
                    cf:2d:94:0e:3b:68:e9:2f:87:11:7d:78:c1:c3:5a:
                    b9:ec:c9:3e:86:71:cc:29:d6:da:65:a8:e0:b9:39:
                    c9:9d:e2:fb:95:5b:f9:d0:41:04:a0:9d:fb:88:fa:
                    87:6f:6d:02:8e:58:4e:39:93:0f:26:b8:1c:ed:c5:
                    bc:ee:7a:71:b7:6d:4d:c4:e5:57:95:f4:61:ff:2f:
                    de:4f:12:91:3d:49:a6:44:5d:c5:5a:5d:bc:e2:18:
                    fb:5e:53:a0:4d:d8:98:9b:ff:0c:9f:ca:80:4a:9b:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:61:83:EE:C8:67:66:6F:BA:B8:07:1B:53:0D:F5:D9:F7:38:31:09
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:4b:fe:d1:e3:70:52:e8:7c:5d:d2:e0:e8:11:cf:95:69:
         f6:60:80:5e:0b:12:88:eb:b7:3c:ec:64:81:1d:57:4f:f7:ea:
         1c:18:57:86:73:d7:45:8f:10:37:a3:c8:b1:6c:b0:ba:aa:17:
         c3:fb:7e:33:ee:fd:53:31:fe:de:0b:9b:2c:c8:1d:d2:76:90:
         7b:1a:4a:6c:27:e3:d9:fb:7c:a5:9a:e2:f7:3e:15:83:29:72:
         b1:2e:d4:d0:fe:6f:cc:d4:27:37:5d:af:96:37:4c:12:df:6c:
         e9:4b:66:7d:c2:62:c6:dd:8a:06:3e:40:62:a2:da:2b:f5:ee:
         95:4b:28:c2:4c:a0:7b:72:ab:42:93:99:10:8a:70:83:1d:36:
         f9:c5:7d:ff:03:6b:12:fd:74:66:76:8b:76:9f:0a:09:4e:4f:
         04:b6:b7:5d:b0:5d:73:2d:c4:4a:a5:d2:44:b0:aa:5e:bd:d9:
         90:d7:9f:b6:8e:cb:c6:82:74:80:61:c2:d5:10:b0:b2:1a:7d:
         5e:aa:ce:db:34:1e:26:2e:bc:85:64:fd:38:8f:9f:68:84:54:
         a6:46:31:eb:12:f3:3d:5c:9b:4b:e4:f7:fa:4e:42:dd:1d:52:
         c2:8b:d0:1b:1b:5d:9c:eb:a6:d3:a4:96:6b:11:1a:9f:a4:5a:
         80:d1:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:18:57 2026 by rpki-client