This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20333935313631.roa
File:                     34352e3232382e36372e302f32342d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          Epb+Yez3N3JtvQZ+NXXiTfTDeD9+lQwgrhaq3PXBPBY=
Subject key identifier:   90:A5:2C:55:C0:E2:33:34:D5:20:FC:33:C8:1D:DC:BA:98:D9:D9:6A
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       058D7224BB11703D0092BF906A7F6A571712FE2D
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20333935313631.roa
Signing time:             Tue 06 Jan 2026 19:44:53 +0000
ROA not before:           Tue 06 Jan 2026 19:39:53 +0000
ROA not after:            Tue 05 Jan 2027 19:44:53 +0000
asID:                     395161
IP address blocks:        45.228.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 12:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8d:72:24:bb:11:70:3d:00:92:bf:90:6a:7f:6a:57:17:12:fe:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Jan  6 19:39:53 2026 GMT
            Not After : Jan  5 19:44:53 2027 GMT
        Subject: CN=90A52C55C0E23334D520FC33C81DDCBA98D9D96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:ac:f2:f6:ce:83:5e:a8:d6:8b:ed:cc:5d:
                    39:d9:ab:37:51:64:81:6b:27:8a:25:1a:f9:68:ae:
                    11:0d:e5:3e:6b:4a:46:40:a8:00:ae:e7:8e:7c:c7:
                    b2:a9:b7:5f:27:08:e4:b2:4b:aa:af:35:4f:26:5e:
                    47:e4:3f:1c:73:15:a2:cf:53:21:dd:33:b1:d9:23:
                    ea:ab:66:2c:5e:81:8e:8a:f6:6b:d8:86:45:cd:e0:
                    a9:67:6e:4c:4a:4c:3f:00:f5:5d:41:79:1b:98:c8:
                    e1:d6:2b:7a:44:64:99:8b:f2:32:b1:22:9d:fc:d2:
                    e8:f8:40:7e:d4:4b:b2:8d:44:9f:89:34:f1:fa:60:
                    8e:95:e2:3a:9c:76:be:b2:bd:f4:a3:9c:f5:6d:1c:
                    8b:94:a2:12:fa:ac:ad:ce:9c:b8:55:1c:3b:bf:d2:
                    bc:c2:23:cb:84:57:41:c1:28:5a:fa:ff:8b:d2:17:
                    95:7a:c8:f1:41:9b:a4:ba:88:ec:af:a5:3d:87:71:
                    a2:79:af:38:f1:04:81:53:b4:48:d7:b7:52:31:91:
                    85:bd:91:43:3c:a1:11:f7:71:49:c2:a7:9a:48:e0:
                    31:c5:ac:97:fa:f7:97:70:0d:5e:fd:19:c9:18:7a:
                    e3:60:2e:5c:36:06:dd:ee:55:71:28:15:4a:48:e0:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A5:2C:55:C0:E2:33:34:D5:20:FC:33:C8:1D:DC:BA:98:D9:D9:6A
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:74:40:72:8d:c5:2a:e2:bb:3f:5c:b1:29:02:2f:06:e7:b4:
         a7:70:c2:25:38:b3:61:34:8c:79:25:ee:25:6b:f3:30:ce:d9:
         23:29:36:ef:c6:3f:31:5a:67:b2:54:e4:0f:be:76:06:22:08:
         c6:2f:b2:44:86:21:bc:06:50:30:e4:6c:ac:47:de:a8:ed:8c:
         7b:bb:ee:99:e4:14:0b:dd:06:91:1c:08:6f:41:77:74:70:c2:
         b2:29:3c:ca:1d:fe:ed:0f:d5:4e:d1:cc:16:c7:0d:45:c1:58:
         ed:7b:53:78:ab:7b:91:c9:0b:4b:f0:9c:73:1c:42:4f:ae:51:
         c4:88:cd:d3:47:42:74:ac:60:42:43:dd:39:33:09:ec:d4:5e:
         e8:3f:d2:46:a2:15:11:7b:02:52:79:53:2a:c7:f9:3f:2b:8a:
         7a:0c:26:9c:94:a8:13:69:ac:d0:7d:a0:55:a0:50:b6:99:8e:
         8a:fb:64:58:18:3c:0d:4b:9a:00:b6:c9:81:ac:52:1e:b4:d2:
         39:72:34:99:08:61:f2:84:9a:e5:d1:8e:ca:12:95:b1:5e:71:
         ad:c3:a5:4a:41:e5:6d:73:77:7a:56:86:4e:a1:dc:1c:9c:d4:
         0b:6e:1c:ae:9b:bf:c6:2d:ef:03:ab:52:8b:d5:84:b8:e3:53:
         94:f1:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:41:33 2026 by rpki-client