This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa
File:                     34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa (raw, json)
Hash identifier:          m8t0QmjLcHnbMQpXcC+90WycGx/rB6yX734bKPeE534=
Subject key identifier:   F1:71:C6:15:40:07:E7:E1:1F:58:7C:34:DD:09:0E:E1:9D:24:BB:47
Certificate issuer:       /CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
Certificate serial:       2A3004AFF87B0E14F13052BF39272FB548DE5920
Authority key identifier: 1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa
Signing time:             Fri 14 Nov 2025 03:00:46 +0000
ROA not before:           Fri 14 Nov 2025 02:55:46 +0000
ROA not after:            Fri 13 Nov 2026 03:00:46 +0000
asID:                     266881
IP address blocks:        45.160.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:30:04:af:f8:7b:0e:14:f1:30:52:bf:39:27:2f:b5:48:de:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927
        Validity
            Not Before: Nov 14 02:55:46 2025 GMT
            Not After : Nov 13 03:00:46 2026 GMT
        Subject: CN=F171C6154007E7E11F587C34DD090EE19D24BB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:cd:c3:fa:40:78:92:6d:66:c7:dd:9d:ab:
                    3c:16:a7:56:96:97:7f:64:ec:96:ba:6f:93:c8:69:
                    61:d0:8e:ac:1b:6a:b1:6b:e1:7d:2d:c4:ea:70:73:
                    4b:04:61:8a:82:95:38:c9:8f:14:27:57:78:dc:08:
                    67:e6:85:2b:d8:32:e0:62:1a:eb:46:2c:00:7b:04:
                    17:fb:3e:87:21:54:59:e8:ce:14:4d:eb:1e:8d:0d:
                    14:95:86:1d:ab:45:42:4d:98:27:28:56:fb:b3:52:
                    6b:f3:1c:39:7b:65:9e:04:fe:ff:f7:74:9a:33:70:
                    f3:2c:82:56:f9:75:a8:d0:fe:00:74:a8:5b:73:00:
                    cf:14:aa:46:53:39:1b:58:96:30:29:e5:7c:74:39:
                    e2:ae:07:3f:99:54:47:d7:57:20:91:2e:5c:d3:97:
                    d3:32:10:64:bd:0f:b3:13:cb:1b:c4:0d:30:93:98:
                    84:a4:ed:d6:b1:b0:6b:91:60:e2:87:b0:e7:c4:e5:
                    c3:a9:2a:af:ff:f2:cb:9c:ff:1d:82:9a:d4:5c:b0:
                    6f:0d:11:b1:3e:02:af:78:ae:fb:b1:d4:4a:45:12:
                    af:d1:4d:2a:7c:ed:c5:da:06:4b:47:e0:d5:29:35:
                    4e:11:f3:a5:cb:6e:31:25:b2:aa:ed:37:ad:09:ef:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:71:C6:15:40:07:E7:E1:1F:58:7C:34:DD:09:0E:E1:9D:24:BB:47
            X509v3 Authority Key Identifier:
                keyid:1A:DC:8F:78:5D:1F:AD:0C:E5:D6:E3:7B:7C:9B:05:C5:42:5B:E9:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ADC8F785D1FAD0CE5D6E37B7C9B05C5425BE927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231342e302f32342d3234203d3e20323636383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:4b:fd:8a:69:94:41:17:be:69:76:ec:aa:96:65:36:10:30:
         a3:1f:ae:7f:ec:9e:a0:64:68:f7:5c:21:d3:76:9e:74:ea:a4:
         c4:c5:e4:20:fc:e3:cf:86:8c:97:c4:34:b5:20:c0:d5:20:a6:
         b9:33:3a:91:db:54:83:5a:c9:64:08:60:4d:e3:22:5f:09:af:
         8f:3d:03:81:3f:f2:ad:9a:8f:bf:f7:91:c7:3c:a1:a4:b4:e2:
         2f:f0:3c:d9:e4:1a:3a:09:31:b7:ca:25:40:45:46:c1:80:cd:
         e7:ef:25:04:8f:73:22:26:b5:0c:59:ab:54:47:03:6d:a7:43:
         b8:aa:1c:4a:d7:20:fa:32:53:36:2e:3a:1f:ea:10:31:12:9f:
         93:d4:2b:e0:58:20:1e:9b:78:ed:7c:b8:58:a4:17:8f:ab:9b:
         c2:0a:b3:95:92:eb:88:9e:a9:27:69:0c:d4:21:0f:6b:a7:55:
         4d:fb:0c:2d:ed:0e:fa:d3:bb:e3:98:84:cd:46:1d:48:07:7a:
         3a:9c:c3:36:12:df:a8:a2:28:c4:ae:0d:f2:e6:db:1a:99:d1:
         7a:25:27:f0:c4:eb:96:c4:29:3b:3f:c6:93:ff:1a:6b:ea:4b:
         75:9b:d3:1b:3e:b5:cf:64:d4:91:17:29:fa:59:d8:ce:1a:03:
         3c:c7:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:13 2025 by rpki-client