This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32342d3234203d3e20323732383734.roa
File:                     34352e3233342e36302e302f32342d3234203d3e20323732383734.roa (raw, json)
Hash identifier:          HtqRac1PDOF8zFrVbeccdYcyImIU/sqyKnB2AXS4wMM=
Subject key identifier:   49:5D:B3:0E:1D:F9:B5:95:8D:D2:26:36:3A:C7:D3:66:9E:87:C0:2E
Certificate issuer:       /CN=17C10DFC65DA73892644268270EF974D3E2D31A0
Certificate serial:       6F53C9092B001B03E1A5CD1643AA7719A922B52D
Authority key identifier: 17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32342d3234203d3e20323732383734.roa
Signing time:             Fri 26 Dec 2025 19:56:16 +0000
ROA not before:           Fri 26 Dec 2025 19:51:16 +0000
ROA not after:            Fri 25 Dec 2026 19:56:16 +0000
asID:                     272874
IP address blocks:        45.234.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:53:c9:09:2b:00:1b:03:e1:a5:cd:16:43:aa:77:19:a9:22:b5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C10DFC65DA73892644268270EF974D3E2D31A0
        Validity
            Not Before: Dec 26 19:51:16 2025 GMT
            Not After : Dec 25 19:56:16 2026 GMT
        Subject: CN=495DB30E1DF9B5958DD226363AC7D3669E87C02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:a3:84:0a:7b:31:a1:14:bc:ea:a7:34:d4:
                    6b:0d:a2:89:96:66:e0:d5:02:9a:1f:1d:02:68:16:
                    fa:98:f2:84:32:19:f7:ad:d4:a6:32:50:13:38:9a:
                    e5:b3:35:3c:3c:68:65:a8:be:6d:b0:ea:8e:80:48:
                    eb:44:bf:e2:47:a6:60:4f:25:b5:c0:fa:04:39:4b:
                    12:a8:6e:66:12:1b:86:af:63:29:7f:8e:5a:d9:57:
                    9f:45:40:0d:71:03:fe:8b:63:8a:e6:2f:11:04:b9:
                    c8:d6:bd:e3:23:87:7a:81:d2:53:3a:93:ba:bf:06:
                    a1:17:60:65:47:2c:6f:6d:1b:f5:93:ff:c7:fe:64:
                    59:06:ef:5c:d6:5d:3f:99:b0:6b:1e:f2:b6:af:8e:
                    b8:db:3d:00:10:9a:e6:62:77:09:43:91:31:e9:e1:
                    f4:25:73:ee:49:c1:11:35:7b:4a:5d:ed:76:b3:00:
                    3d:6a:db:dc:26:3e:5f:69:f1:45:87:1b:c1:1c:74:
                    35:3a:dd:f5:d6:84:06:ba:fd:e4:24:ca:2b:d6:76:
                    50:55:18:31:13:b3:d0:c3:e6:d0:6f:2b:ce:3c:1a:
                    78:d5:a7:e0:29:10:46:37:ca:9d:8e:ec:b0:b6:52:
                    47:60:54:4e:a8:61:45:c7:8e:31:b5:f7:42:c9:02:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5D:B3:0E:1D:F9:B5:95:8D:D2:26:36:3A:C7:D3:66:9E:87:C0:2E
            X509v3 Authority Key Identifier:
                keyid:17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36302e302f32342d3234203d3e20323732383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:2b:1e:5c:0d:17:4d:41:c1:2b:0f:37:c8:ec:9d:d2:a1:
         14:b3:7a:33:f7:e9:e5:7c:34:69:0e:f8:3e:c2:ed:b5:1d:74:
         50:e5:98:55:9e:1e:51:36:58:b6:6e:90:04:14:3d:09:c0:ed:
         a1:a8:1e:91:1a:b2:ab:85:56:e6:ad:bd:5b:62:06:68:82:3d:
         45:27:42:0d:59:83:55:11:b8:8c:68:b2:a7:aa:2c:26:bc:5f:
         5f:77:32:8d:6a:c7:4f:70:17:39:93:f1:88:10:fe:5c:77:18:
         94:c1:fa:9a:c1:61:09:63:f3:58:9b:6d:c5:45:26:50:90:b3:
         1e:a6:3c:06:9c:79:d2:f7:ae:ad:3a:bf:86:61:ff:78:29:8d:
         32:de:01:4c:36:2d:f4:e5:43:d3:8e:8a:7b:0e:4a:0f:50:f3:
         19:b8:0f:3a:dc:45:f1:a8:6d:d3:e6:ff:d2:be:9b:fe:cc:9c:
         0c:1f:bc:3d:b4:f8:9a:f7:67:fd:72:ff:5e:eb:45:d6:3f:94:
         66:5c:d7:e9:f9:53:d4:a3:19:88:14:f8:7b:76:ab:e2:73:a7:
         1a:ad:58:c4:e2:87:72:30:8b:3c:e0:0f:32:52:30:9b:97:25:
         e9:36:7b:b8:28:c2:4e:b1:be:5f:8b:d3:1e:71:47:14:c8:38:
         ea:d3:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:39 2026 by rpki-client