This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135372e302f32342d3234203d3e20323732393936.roa
File:                     34352e37312e3135372e302f32342d3234203d3e20323732393936.roa (raw, json)
Hash identifier:          aeUIBlMkRO4JuNp8e4M+vc+sT5z8O/BWc+A9ikEpYPQ=
Subject key identifier:   DC:3C:3D:F0:EC:E5:D5:72:C4:76:20:82:DD:03:F1:D0:89:00:C7:BA
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       106D19EBD6568AFCA263E04456440F490A64BD72
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135372e302f32342d3234203d3e20323732393936.roa
Signing time:             Wed 26 Nov 2025 19:30:00 +0000
ROA not before:           Wed 26 Nov 2025 19:25:00 +0000
ROA not after:            Wed 25 Nov 2026 19:30:00 +0000
asID:                     272996
IP address blocks:        45.71.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 03:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6d:19:eb:d6:56:8a:fc:a2:63:e0:44:56:44:0f:49:0a:64:bd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Nov 26 19:25:00 2025 GMT
            Not After : Nov 25 19:30:00 2026 GMT
        Subject: CN=DC3C3DF0ECE5D572C4762082DD03F1D08900C7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:ca:fd:8a:9a:e3:fb:2b:61:2d:0e:19:35:
                    bb:25:3f:c2:47:69:ea:79:c5:8d:95:25:94:c5:98:
                    32:64:a9:68:a9:72:9e:d0:14:3f:56:ec:ea:c0:7a:
                    a8:d1:ec:e7:5e:9b:0c:91:89:f6:c1:ee:18:87:c3:
                    c1:b9:97:24:3e:e0:1e:b3:0e:c5:e0:df:ba:ae:4a:
                    4d:04:03:cf:0f:d9:0d:3b:c4:2d:75:9e:ef:5c:66:
                    24:bb:e5:a9:92:19:ae:20:59:65:aa:ec:74:9f:5d:
                    2e:d6:4c:2c:eb:d4:e5:02:5f:13:bf:3f:6e:e7:d9:
                    2f:1f:78:41:df:bc:2b:bb:2d:0e:29:d9:c3:5a:af:
                    49:9a:43:a0:5d:59:a1:08:e9:8b:bf:63:ce:b3:17:
                    c7:44:ab:fb:f9:38:63:52:13:c0:b3:02:4a:7b:36:
                    fe:11:06:71:8e:1e:92:95:e0:a6:c7:49:11:72:80:
                    0c:bb:d8:0f:ae:be:00:57:53:39:60:e1:e2:3a:d8:
                    36:7b:d6:42:92:04:10:d3:ee:60:93:64:a5:32:21:
                    84:0e:d9:5e:6e:68:7e:47:38:23:22:0a:66:92:40:
                    07:59:ed:78:a1:e2:1e:65:86:2c:9d:c1:14:2c:75:
                    37:b9:52:94:ba:d0:ad:27:b2:df:af:ae:43:ec:73:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3C:3D:F0:EC:E5:D5:72:C4:76:20:82:DD:03:F1:D0:89:00:C7:BA
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135372e302f32342d3234203d3e20323732393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:66:0f:9d:7b:2c:d4:eb:20:72:48:06:42:48:b5:be:99:
         bc:36:ea:d7:c6:3c:64:22:0d:b8:f5:22:91:6b:03:de:af:5d:
         fa:57:3d:eb:eb:a2:7e:84:e9:4e:c6:a2:ac:32:69:00:f0:6a:
         94:44:04:35:ec:7a:cf:18:dc:97:d6:7e:f9:5c:07:77:cf:86:
         6e:17:d3:32:7b:fa:cc:87:4c:14:b1:42:f2:7b:5c:a0:00:d2:
         7b:47:9a:4f:0d:10:32:e0:ab:da:85:8e:f2:0f:f2:4a:9d:88:
         3b:0e:00:73:51:9b:16:73:3f:3c:5a:2f:53:57:63:02:2a:f2:
         fe:2e:b9:58:e4:0b:cb:82:03:2e:03:d5:86:c0:56:5c:cc:8b:
         93:52:46:95:a3:3c:db:fb:cf:7a:b3:dd:46:a8:9f:5a:7f:d5:
         14:af:13:5a:aa:e4:55:d6:51:bf:36:81:27:7c:9f:6c:33:19:
         ed:d6:36:59:ab:6c:7b:ed:a2:cd:d6:4f:dc:7e:de:5f:47:21:
         48:1b:b8:93:f1:1a:06:98:f9:47:df:60:05:4e:4c:20:c7:08:
         f4:bc:6d:e1:77:99:57:97:6d:a5:32:5e:71:c1:ad:b8:cd:82:
         2a:52:42:c8:b9:aa:11:72:27:54:94:7a:ca:77:2a:90:81:d3:
         ce:ca:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:40:59 2025 by rpki-client