This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3234203d3e20323639383232.roa
File:                     34352e36352e3233322e302f32322d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          JRt1Gaqlrro10qtfcjjXux5nm4tUwd+vhMIsKWZkZzs=
Subject key identifier:   1C:2A:C4:37:8F:83:AB:72:22:1F:C6:14:39:CD:09:CE:AD:17:E9:42
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       72CDFA4990FBC5599F2AAF8098B5874F2270E634
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3234203d3e20323639383232.roa
Signing time:             Tue 06 Jan 2026 19:15:19 +0000
ROA not before:           Tue 06 Jan 2026 19:10:19 +0000
ROA not after:            Tue 05 Jan 2027 19:15:19 +0000
asID:                     269822
IP address blocks:        45.65.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 02:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cd:fa:49:90:fb:c5:59:9f:2a:af:80:98:b5:87:4f:22:70:e6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Jan  6 19:10:19 2026 GMT
            Not After : Jan  5 19:15:19 2027 GMT
        Subject: CN=1C2AC4378F83AB72221FC61439CD09CEAD17E942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6f:a0:27:07:9e:92:dc:27:16:46:f6:24:f5:
                    13:0c:3d:30:d3:7b:95:35:c1:0f:ea:e3:a0:f4:66:
                    32:4c:cc:2e:c3:0f:ae:5b:16:1b:c6:c7:dd:5a:4e:
                    1e:13:f1:a9:e5:f8:09:dd:e4:2d:d8:1d:48:83:dd:
                    6e:36:6d:e9:60:c9:20:82:e1:04:55:68:f5:32:e5:
                    a3:ef:88:3a:14:26:16:5f:6c:42:e9:3e:dd:11:f8:
                    74:c1:06:9a:73:bd:b9:65:2f:b2:76:68:8d:3c:f0:
                    db:3c:72:51:48:36:02:c6:e4:ce:ca:10:4c:ff:93:
                    a3:66:bc:6c:0f:f4:89:b1:7e:fc:ac:27:ba:22:17:
                    ae:b4:f5:c6:f2:22:08:e2:bd:4b:2a:a7:06:ff:76:
                    dc:a9:b0:ce:fa:71:4b:48:92:3d:bd:5f:fc:68:fc:
                    91:64:8e:68:61:0a:db:21:2d:3a:fb:23:48:d7:36:
                    4e:83:d5:ac:8a:7b:de:21:6d:dc:5a:88:85:1e:7a:
                    27:4e:c4:85:81:88:bd:57:91:b7:2a:96:be:22:3b:
                    e2:92:0a:32:92:0c:a0:f1:db:3b:e7:88:31:86:6b:
                    1f:c0:91:30:9f:15:98:f4:4c:45:cc:d0:7b:74:14:
                    f6:40:ef:56:49:b6:09:c3:49:f2:bb:89:bf:39:e3:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2A:C4:37:8F:83:AB:72:22:1F:C6:14:39:CD:09:CE:AD:17:E9:42
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:d8:2f:86:ac:96:9d:5b:40:e0:43:7c:6d:5f:45:4f:3a:
         9a:5e:0a:2e:0f:40:4c:50:09:c4:c0:af:20:06:57:f3:f8:6e:
         34:52:ea:33:51:d3:49:d4:35:9b:d8:59:8c:6f:90:27:89:33:
         b7:bb:e2:2d:b4:26:b2:ab:ce:8f:14:5c:12:65:22:e3:73:9f:
         0b:7e:b7:8f:0c:b6:16:d5:d5:b1:a0:23:b9:b8:50:b6:58:53:
         15:b1:54:5d:4f:5b:57:09:0c:c2:a8:d2:33:30:c4:e6:ac:16:
         df:04:5d:c7:cb:34:bd:39:f9:ea:de:65:28:03:78:7d:a4:57:
         a2:20:11:c1:0c:97:3a:5c:24:80:76:d3:90:99:b9:85:0e:3e:
         e3:fd:ac:85:40:8b:a2:9b:c7:11:66:61:11:33:66:73:12:34:
         02:27:4f:4b:90:a3:6a:83:16:f8:b0:81:dc:ff:aa:cc:08:25:
         37:36:b4:d9:7c:9b:39:94:c1:f5:fd:26:de:2e:f5:e6:8d:e0:
         52:59:56:b9:d5:51:9d:d9:82:c0:f0:ea:5f:9f:4e:13:56:06:
         1e:13:ec:e5:b3:b1:cb:3c:3c:30:ea:95:79:27:6b:07:98:16:
         4a:7b:2e:05:f5:64:0d:4c:1e:6b:16:6d:13:8a:c1:95:df:b3:
         bc:a0:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 14:08:47 2026 by rpki-client