This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa
File:                     34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          RmrSVf/zuGFIRfg0i1ZxhenxnzivREawcB7Nnz+na+0=
Subject key identifier:   02:04:FB:8A:A6:95:7B:4D:02:63:B5:09:E3:93:39:0F:F9:CB:E4:AE
Certificate issuer:       /CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Certificate serial:       36A9633E45936DBAF987B667343EA5FA8D44FD4C
Authority key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa
Signing time:             Fri 07 Nov 2025 19:51:59 +0000
ROA not before:           Fri 07 Nov 2025 19:46:59 +0000
ROA not after:            Fri 06 Nov 2026 19:51:59 +0000
asID:                     273133
IP address blocks:        45.171.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a9:63:3e:45:93:6d:ba:f9:87:b6:67:34:3e:a5:fa:8d:44:fd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
        Validity
            Not Before: Nov  7 19:46:59 2025 GMT
            Not After : Nov  6 19:51:59 2026 GMT
        Subject: CN=0204FB8AA6957B4D0263B509E393390FF9CBE4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:91:7d:e3:68:bc:58:63:50:da:1d:b5:10:
                    5a:31:bb:6d:2b:cd:3b:c7:7a:ee:79:2f:01:ec:cd:
                    30:df:6a:3e:0f:4c:61:97:6a:49:4a:f3:9b:dd:2f:
                    05:9b:c0:bf:f5:1c:cb:9c:9c:86:e1:a9:10:98:69:
                    b0:06:34:1a:dd:f4:89:e2:e1:1d:6b:ee:00:9e:14:
                    bc:dc:95:da:0b:bb:b0:49:23:61:1d:81:b1:77:43:
                    8e:c9:2d:1a:3e:82:a7:8a:61:7c:d2:4f:c0:38:6a:
                    a3:36:58:f5:3f:9c:cc:d5:57:99:b0:de:46:3a:b3:
                    39:c9:5a:0f:c1:a8:f2:37:ea:bc:6e:ef:98:a8:84:
                    39:6b:aa:13:13:41:c3:ef:d0:b1:d4:c0:72:19:e4:
                    06:46:05:8a:82:db:6f:34:4c:e0:e7:bd:4f:72:b7:
                    cb:76:cf:6d:6c:c0:0c:d6:e4:f7:98:e4:20:ef:21:
                    e0:45:4f:12:96:13:8a:ae:ac:45:15:8e:03:ec:6e:
                    07:53:0a:bb:e4:f5:e1:07:18:ca:92:61:e5:bb:a8:
                    48:a2:4f:fd:8a:ca:fb:5b:4a:74:20:a1:2d:b6:f4:
                    ae:18:22:bc:45:ea:7b:ed:24:85:da:a4:0e:3b:01:
                    fd:43:c5:15:71:94:56:48:bc:45:11:6a:a1:8c:13:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:FB:8A:A6:95:7B:4D:02:63:B5:09:E3:93:39:0F:F9:CB:E4:AE
            X509v3 Authority Key Identifier:
                keyid:A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:27:49:ac:d8:de:78:61:e3:40:ce:b4:d7:be:7c:c4:e1:d3:
         3f:bc:ac:2b:34:7a:14:af:c7:ff:a9:6d:ab:b0:6b:c8:28:92:
         3f:0a:25:3b:6c:c2:76:e7:bc:2f:05:84:a8:e3:73:af:91:b3:
         0a:0f:04:8e:ca:95:e6:1e:41:57:12:9e:65:6b:df:50:1e:3b:
         fc:ac:89:18:45:3d:d6:fa:6e:ee:bc:55:65:81:d0:b4:13:13:
         ce:33:75:a8:7a:3e:24:8e:99:0a:a8:fa:2d:c8:4a:9e:4b:2f:
         c1:01:5c:44:58:47:c5:dd:c4:8d:89:39:e8:37:9e:ff:f6:64:
         b2:65:76:66:cb:5f:f6:6a:76:eb:c8:94:66:09:da:70:ad:68:
         15:75:c3:4a:43:47:a6:98:20:54:7c:c2:f0:3f:7b:af:35:cb:
         5c:ff:74:87:e6:d7:c8:31:53:06:0e:9a:49:ed:d7:0e:02:6f:
         42:39:57:d8:dd:6b:bf:e2:b0:e1:ff:c1:24:93:43:71:cf:26:
         57:7f:0e:87:66:a1:89:05:14:44:a3:92:f3:dd:4d:0c:98:ee:
         77:5c:ae:52:0b:98:12:a5:c7:6e:d8:a6:ab:03:6b:42:ed:d8:
         b1:c8:5e:ec:c1:0a:e5:93:8a:01:67:c5:9f:7e:ad:6f:6e:46:
         e2:3a:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:27:39 2025 by rpki-client