This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa
File:                     34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa (raw, json)
Hash identifier:          2m2OE6j3ng/42nTT1th8MuQk8whqBEF16EufXVdfB80=
Subject key identifier:   24:C2:F3:01:B3:D8:2E:C5:FC:A5:6D:DD:C1:20:C8:F9:E0:2E:F4:37
Certificate issuer:       /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Certificate serial:       23E96290B0E8D4E97E596236BB8D854A52F86A68
Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa
Signing time:             Tue 06 Jan 2026 19:28:59 +0000
ROA not before:           Tue 06 Jan 2026 19:23:59 +0000
ROA not after:            Tue 05 Jan 2027 19:28:59 +0000
asID:                     266695
IP address blocks:        45.229.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 18:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e9:62:90:b0:e8:d4:e9:7e:59:62:36:bb:8d:85:4a:52:f8:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
        Validity
            Not Before: Jan  6 19:23:59 2026 GMT
            Not After : Jan  5 19:28:59 2027 GMT
        Subject: CN=24C2F301B3D82EC5FCA56DDDC120C8F9E02EF437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:1b:3f:af:36:d0:30:cf:53:18:29:16:00:
                    11:e4:b1:a0:ca:88:f4:43:77:d1:e8:d4:07:be:38:
                    40:72:aa:e0:07:12:ce:36:42:94:70:04:a5:83:a4:
                    48:9b:80:79:50:b4:03:72:f5:14:01:4f:ac:07:cb:
                    2c:d5:74:65:28:ff:15:89:bc:be:77:46:a4:f8:6a:
                    18:66:5a:5b:0a:37:6e:bf:3e:23:ad:a1:8f:7a:45:
                    52:76:8b:3f:5e:79:ea:f1:b8:3a:8f:e8:8f:53:f0:
                    cd:99:4b:93:fd:00:0c:54:92:ee:f5:cb:f2:4d:d2:
                    5d:16:79:6c:86:7a:b3:51:88:59:68:28:27:ad:d3:
                    55:2d:bb:70:a0:d8:db:b1:00:18:60:50:dd:93:a8:
                    1a:b7:46:dc:bd:73:aa:32:dd:8c:1f:7e:38:16:ba:
                    04:18:05:e0:ce:05:71:22:bb:f8:6f:ff:ac:0a:00:
                    33:34:c6:0d:21:c6:3a:cf:fd:50:cc:2d:71:98:21:
                    b0:f6:ce:5c:5b:70:fc:4e:19:a6:53:e0:91:bf:cc:
                    1e:24:be:4d:33:8e:09:1b:c9:18:d9:1b:bc:38:fa:
                    5c:3b:24:dc:e3:9f:59:9b:94:8b:3a:05:bf:c7:f7:
                    06:55:52:4c:8f:73:1f:17:f2:ed:a6:0d:df:81:c3:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C2:F3:01:B3:D8:2E:C5:FC:A5:6D:DD:C1:20:C8:F9:E0:2E:F4:37
            X509v3 Authority Key Identifier:
                keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:10:f6:29:cb:20:30:f7:c8:ed:2b:2f:0f:f0:ab:a5:81:
         0a:75:5d:ac:50:38:99:57:d7:42:74:b9:05:14:d4:dc:db:e4:
         58:7e:c1:34:3f:5a:54:79:e6:ca:76:72:a0:29:22:29:59:08:
         6d:ca:e3:f3:57:26:48:60:ae:f2:f5:96:42:ba:2b:06:be:f3:
         95:2c:1b:6c:8d:7c:f9:51:a9:51:5f:b3:23:e8:93:08:77:db:
         e9:c2:35:b5:37:56:53:18:69:c1:cb:6e:89:0c:8b:84:f4:7f:
         bd:c4:16:1e:cd:2f:e3:fb:d5:a9:37:0c:9d:a1:f8:fc:3f:81:
         eb:51:bc:8d:f9:05:f5:54:1a:fc:68:7e:6c:3d:9a:d9:19:56:
         5d:8a:9d:7b:92:85:50:92:8f:82:71:dc:14:8c:5e:c8:c3:4e:
         9a:c4:39:a0:cd:bc:16:4b:ed:d0:58:17:34:a5:7c:3d:27:d4:
         c6:97:21:4b:90:e8:9f:f8:be:54:ec:c7:75:7f:56:48:a9:46:
         e6:ed:ad:7e:90:11:8a:cc:98:7f:da:79:b6:e9:d2:a5:fa:98:
         c3:cc:db:1e:dd:e1:8c:62:75:a6:2f:8f:d6:79:68:30:b3:00:
         c9:11:28:c4:37:dd:20:2f:4f:06:1e:8e:fd:fc:2b:13:5e:8d:
         95:6d:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:17:43 2026 by rpki-client