This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3235342e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          S2GQ0atgWXfibydD/77EdC5hP/KcWMP1FJi/Xn85hZw=
Subject key identifier:   77:BE:76:B9:94:A9:49:67:A7:2C:DB:DC:4A:66:AC:BC:9C:F8:17:A0
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       613FAE9867FB74BCF143C8463DFCB7FC292B9231
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203238343233.roa
Signing time:             Sun 28 Dec 2025 01:56:26 +0000
ROA not before:           Sun 28 Dec 2025 01:51:26 +0000
ROA not after:            Sun 27 Dec 2026 01:56:26 +0000
asID:                     28423
IP address blocks:        45.170.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3f:ae:98:67:fb:74:bc:f1:43:c8:46:3d:fc:b7:fc:29:2b:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Dec 28 01:51:26 2025 GMT
            Not After : Dec 27 01:56:26 2026 GMT
        Subject: CN=77BE76B994A94967A72CDBDC4A66ACBC9CF817A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:bb:90:0a:09:6c:6b:45:1e:2a:24:4d:ba:
                    9d:83:67:d2:9b:4c:9d:63:4d:5a:30:30:4c:36:c0:
                    ae:ae:3d:8c:df:94:1a:77:31:ec:0f:5e:37:8e:8f:
                    27:df:84:ae:51:d7:65:32:b6:7e:4d:27:63:1c:47:
                    50:54:8f:95:b9:bf:30:58:6b:42:b2:b3:f3:05:bd:
                    bb:ae:61:d7:66:3a:34:ef:0b:ca:85:eb:85:37:36:
                    f6:4e:7b:ac:4c:b1:cf:a6:3c:3d:b4:83:83:07:fe:
                    ca:74:cf:63:2a:14:4d:65:0a:52:00:a5:eb:23:b4:
                    03:0a:0a:cd:3a:d4:ba:eb:32:4c:bc:87:e4:85:fc:
                    e3:ce:c2:e3:80:52:6d:72:2e:b6:6b:14:41:3a:6f:
                    c6:96:27:c9:3d:da:1e:3c:85:39:95:77:7f:61:ce:
                    d4:88:a2:3a:2c:0f:64:45:66:9c:2e:43:f8:1c:62:
                    44:bc:3e:87:51:08:80:8e:19:e9:f6:b1:5d:bb:dc:
                    59:d0:cb:c0:02:a2:99:fd:7d:91:7b:e4:65:e6:e1:
                    35:63:9d:dc:67:d5:b3:1e:4a:26:6c:6d:da:cc:21:
                    7a:1e:52:bc:d2:b0:79:52:d4:c3:09:e9:0a:2e:82:
                    29:61:61:4e:c3:7f:70:ce:e3:fb:1e:b4:41:bb:63:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BE:76:B9:94:A9:49:67:A7:2C:DB:DC:4A:66:AC:BC:9C:F8:17:A0
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:83:8b:c6:7f:25:7c:c4:72:38:ba:fe:a8:be:3c:95:03:
         dc:11:9a:65:dd:69:ee:be:2e:ad:ee:47:51:e4:06:c4:c7:6d:
         db:6c:03:2a:7a:50:9e:dc:4a:ec:96:4a:14:d1:c5:86:af:a9:
         30:6e:f0:68:a3:3d:c1:d4:45:80:2b:81:53:ac:cc:af:7a:33:
         f9:14:ab:ba:70:14:95:f3:e4:b0:d6:72:21:45:03:41:70:50:
         30:b1:37:8b:00:df:bf:41:87:dd:c6:65:98:bb:95:d1:79:03:
         66:b4:db:24:46:3d:d9:c6:05:86:e1:c2:af:a9:61:09:56:6e:
         2a:5b:cd:78:0f:0e:fc:35:59:e1:06:62:7c:8f:25:b0:0a:f9:
         c9:b8:8f:54:ed:95:f9:68:02:a4:24:3d:df:73:79:b3:cb:b1:
         e8:1f:99:d0:a5:a9:51:4f:52:1b:9b:49:85:36:6d:db:38:f0:
         24:fb:71:9e:f2:4c:fb:94:e1:60:f2:f9:ea:05:d5:7a:81:9d:
         d8:42:1a:8b:2f:52:c8:e2:66:d0:df:dc:1b:ab:e5:68:fa:4d:
         91:24:71:fb:8d:99:18:51:13:a5:53:e0:1f:bd:9a:7f:50:1d:
         31:e9:65:e5:1e:49:25:9f:0d:8c:ec:43:ac:70:e0:4d:2f:12:
         12:a7:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:31 2026 by rpki-client