This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          T6f5yWYTk2TkydWJbuvP0gqo2Cz4YZ9Mnoerq0XfFXo=
Subject key identifier:   F4:27:46:F0:BA:2D:12:89:E9:C9:B7:F7:FF:3A:6E:EF:8D:42:40:63
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       583F6005CD36FE5BDFEAA79E2B7286F79BE90730
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 06 Jan 2026 19:43:42 +0000
ROA not before:           Tue 06 Jan 2026 19:38:42 +0000
ROA not after:            Tue 05 Jan 2027 19:43:42 +0000
asID:                     265851
IP address blocks:        45.225.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 06:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3f:60:05:cd:36:fe:5b:df:ea:a7:9e:2b:72:86:f7:9b:e9:07:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Jan  6 19:38:42 2026 GMT
            Not After : Jan  5 19:43:42 2027 GMT
        Subject: CN=F42746F0BA2D1289E9C9B7F7FF3A6EEF8D424063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:e4:e3:74:db:6e:fa:d5:e3:f5:37:0f:51:
                    0f:0c:89:dd:fc:a5:44:71:06:61:52:49:f4:48:c8:
                    73:92:9e:e9:e5:c8:4c:13:30:96:aa:79:61:c5:a5:
                    9c:60:d6:60:1f:e0:98:aa:bd:28:99:b9:c6:3e:c5:
                    c3:57:ef:0b:3d:0c:5a:75:ef:b5:d8:06:74:d3:73:
                    ad:c2:27:b4:64:4c:9e:33:b3:8c:90:81:db:92:06:
                    99:13:d3:4b:ce:25:aa:d5:b2:15:59:b9:c5:6c:e1:
                    3d:e3:99:ff:31:ba:df:8a:72:4a:e5:b1:e1:e6:b0:
                    d0:96:67:c0:09:de:bd:53:f8:1e:1b:62:00:53:83:
                    3a:b2:5b:a9:29:43:21:2e:eb:bd:9f:18:44:27:06:
                    c4:e6:eb:13:bd:3a:da:79:45:b3:e5:9f:37:57:fa:
                    e8:f0:f1:9e:50:16:17:22:ff:df:49:b7:44:d2:9c:
                    71:e9:4b:fc:a0:fb:e7:a2:22:65:67:aa:52:75:56:
                    db:a1:c1:e7:39:e0:10:b5:83:c7:d0:96:94:9c:56:
                    2c:1c:c0:88:8b:be:c8:76:0d:22:24:2c:0b:07:83:
                    f5:37:08:5d:dc:a6:71:78:2b:61:ab:22:98:00:a7:
                    75:d3:d1:5a:d9:39:61:8a:0f:58:ff:e6:e4:5c:b0:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:46:F0:BA:2D:12:89:E9:C9:B7:F7:FF:3A:6E:EF:8D:42:40:63
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:f6:7f:c1:f1:92:df:ff:c6:b4:f8:70:38:57:28:fc:c0:45:
         72:47:ba:65:98:0c:ae:5e:a3:9d:c8:4e:92:66:6a:92:41:a4:
         b5:c7:06:4f:5a:26:32:e6:39:a9:da:33:34:67:59:3d:5d:1d:
         ea:df:2e:42:d7:23:ee:c2:40:34:6b:63:ee:97:0a:7e:5c:a4:
         9a:1d:ba:83:73:c5:1e:dd:ae:56:5b:a7:5d:d7:8c:49:66:c6:
         b3:65:e8:46:3c:dc:2a:8e:ac:69:20:80:8f:4d:d4:4b:b8:04:
         f7:5a:85:b2:6c:27:5e:cf:75:16:d8:da:cd:57:a9:1d:e7:26:
         88:4d:a8:18:82:2d:a9:bb:c6:d3:78:8c:71:a6:0a:62:6c:6e:
         08:d7:37:6e:5f:44:e8:71:9d:bd:63:9a:52:a3:3d:8d:db:48:
         b0:a2:8c:c0:10:a8:43:4f:ac:fd:c5:cb:58:4b:42:ed:0b:bf:
         d6:73:87:4d:fa:8f:14:a8:34:b6:61:21:c1:ef:7b:ad:e0:d8:
         a9:ac:79:f4:6a:42:80:2a:12:45:ec:62:92:77:0b:fc:2a:ec:
         0f:11:a3:25:ef:bd:46:8b:26:74:6c:3e:b9:09:1c:b9:f0:48:
         9d:88:05:63:33:4c:98:33:27:44:da:b7:e3:8d:5c:ab:53:e2:
         5f:a6:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 04:18:57 2026 by rpki-client