This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          QnXQmVvx6eBPq59w02zLFchtXYdA+zmA8isi0hLyEOc=
Subject key identifier:   18:AD:8D:1D:E0:64:06:E2:F7:9D:4B:80:9F:AB:7C:77:4B:EB:D5:6F
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       6DACFEE4743B09933D85E0B99C857C8761521CB1
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 06 Jan 2026 19:23:15 +0000
ROA not before:           Tue 06 Jan 2026 19:18:15 +0000
ROA not after:            Tue 05 Jan 2027 19:23:15 +0000
asID:                     266725
IP address blocks:        45.65.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ac:fe:e4:74:3b:09:93:3d:85:e0:b9:9c:85:7c:87:61:52:1c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Jan  6 19:18:15 2026 GMT
            Not After : Jan  5 19:23:15 2027 GMT
        Subject: CN=18AD8D1DE06406E2F79D4B809FAB7C774BEBD56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:0b:6d:65:7a:ea:67:1e:c6:6d:ce:5a:0d:
                    13:6f:39:5b:aa:05:f0:51:89:4d:ff:3c:bd:2b:95:
                    ce:3e:22:aa:e1:ea:8c:69:75:d1:ad:5e:94:51:41:
                    56:ba:74:d4:fb:86:e7:34:12:55:29:3e:44:a8:64:
                    22:f1:5f:35:3f:d0:a0:c6:90:a2:0a:0d:a7:dd:f6:
                    e0:8e:af:f4:13:b5:44:2a:eb:ed:bf:3a:2d:80:cb:
                    0f:25:14:28:11:6f:62:bc:d2:40:af:dc:21:1c:de:
                    8a:fa:d5:7c:bf:40:03:8b:b0:0f:01:6b:b9:3f:78:
                    b6:f7:a6:99:21:c7:31:79:40:b9:70:a3:56:ea:44:
                    77:f6:47:53:07:e8:f9:89:8c:05:b0:71:68:fb:a8:
                    59:cc:39:ad:50:0e:b9:47:47:5f:f2:df:b4:2b:ff:
                    14:cc:2c:7a:8b:be:fd:e1:5a:f9:9a:58:8b:85:4f:
                    78:99:c8:98:f3:a3:b9:68:e3:e6:ca:14:02:33:df:
                    76:09:20:f3:17:66:46:3c:c4:e7:4a:11:42:11:98:
                    1b:1e:5c:af:e3:25:83:94:c8:3e:84:c7:7f:7a:c5:
                    52:98:a7:eb:31:ff:46:1e:e8:31:b3:d9:82:1e:a3:
                    02:05:ac:9f:dd:fc:00:a2:80:f0:29:b4:8e:6b:05:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AD:8D:1D:E0:64:06:E2:F7:9D:4B:80:9F:AB:7C:77:4B:EB:D5:6F
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:c6:95:bd:4e:8a:ac:40:99:0a:9e:2f:fc:86:ff:78:97:fb:
         28:43:84:bb:db:cd:18:88:9e:d7:50:9a:69:8a:09:6c:a8:5d:
         07:91:68:17:0f:22:1e:13:c7:49:a1:31:17:04:6f:71:1c:d4:
         fa:ae:8c:c2:ea:4e:7d:80:7a:3a:0e:c8:e0:75:ac:9e:cf:8f:
         1a:62:f8:c2:1a:6a:f4:9f:1d:78:92:4b:49:50:ec:7b:b9:87:
         a4:11:87:0f:97:5f:fd:23:7f:3d:9f:bf:3a:d2:51:e9:1f:63:
         5d:29:bf:dc:ed:57:07:d6:ca:75:48:d2:13:e3:93:c4:f8:1c:
         bb:19:3a:fc:9a:29:a3:60:73:54:0b:33:75:1b:08:38:82:ec:
         25:5c:e3:6e:c1:cc:e9:2a:db:8d:bd:5e:cf:fd:cc:6b:28:f3:
         d9:75:de:2a:e6:88:cf:5d:4a:f9:5e:1f:c9:7c:f1:5c:45:de:
         38:af:ac:41:fb:1b:6b:5a:04:ed:df:cb:bb:13:d8:b3:f9:e9:
         2e:40:1f:ef:41:13:7b:38:dc:09:94:7c:6f:ac:bc:c8:4a:d2:
         3b:16:92:e2:72:0e:ca:cd:a6:2c:3c:a8:11:cf:26:c8:c6:0b:
         70:8e:95:a2:cb:18:77:cd:43:d3:31:b7:2d:27:fe:b6:85:57:
         42:ce:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:09:55 2026 by rpki-client