This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234352e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3234352e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          GZvc2pxszFf3qGwcU1bVlQTGIeE3O06bF1ioVyTRVo0=
Subject key identifier:   7C:F7:B2:F4:61:C1:76:F4:08:85:23:84:47:73:C0:AD:A3:8D:75:95
Certificate issuer:       /CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Certificate serial:       208CEE6F264663A52A5C82A4DA3AABE5EB9788C6
Authority key identifier: 40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234352e302f32342d3234203d3e203238343233.roa
Signing time:             Sun 28 Dec 2025 01:56:28 +0000
ROA not before:           Sun 28 Dec 2025 01:51:28 +0000
ROA not after:            Sun 27 Dec 2026 01:56:28 +0000
asID:                     28423
IP address blocks:        45.170.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8c:ee:6f:26:46:63:a5:2a:5c:82:a4:da:3a:ab:e5:eb:97:88:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404AF48919442F94B61222A52CBC7E3F459B1B77
        Validity
            Not Before: Dec 28 01:51:28 2025 GMT
            Not After : Dec 27 01:56:28 2026 GMT
        Subject: CN=7CF7B2F461C176F4088523844773C0ADA38D7595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:88:70:83:14:d7:27:4d:c1:b3:93:14:9a:
                    d5:87:78:76:39:ae:69:87:c5:ae:78:4c:2c:e6:ad:
                    c8:b9:fd:96:5b:2a:2b:b8:8f:3b:b4:17:7f:37:8c:
                    d7:99:3c:b7:d7:93:22:a0:65:17:bf:11:80:6f:44:
                    41:bd:29:38:9a:33:af:ae:b2:d0:23:d9:3a:21:1f:
                    10:ab:5c:fc:5a:e8:65:b3:51:cf:22:0e:12:4a:3c:
                    b3:92:d5:a9:53:48:df:42:53:34:29:68:cf:59:78:
                    9a:f6:06:91:f4:78:ac:e2:4a:94:e5:15:a1:2b:2d:
                    39:35:a9:bf:a4:a3:65:62:ce:74:34:6f:11:c6:19:
                    75:3a:70:72:3b:f9:35:df:ea:ce:1d:63:04:f2:82:
                    d6:01:5c:54:99:58:a7:e0:51:cd:44:0f:ba:e0:1c:
                    fa:44:95:01:9c:4f:3c:71:59:0b:c5:84:bd:01:c9:
                    41:f0:b5:ec:39:4c:7f:7f:f6:46:4d:df:2e:11:ea:
                    24:1a:97:04:81:2a:ce:7f:32:a4:05:fd:58:ed:d7:
                    5e:ce:5b:b4:ea:b0:1e:87:72:7c:78:e4:92:f1:7b:
                    9f:62:54:47:ed:54:a7:3f:c1:60:4d:07:61:2d:ab:
                    b9:cd:76:fa:1a:01:8b:c9:89:a1:28:53:2f:a6:02:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:B2:F4:61:C1:76:F4:08:85:23:84:47:73:C0:AD:A3:8D:75:95
            X509v3 Authority Key Identifier:
                keyid:40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234352e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:3d:ca:b6:91:6e:b3:3c:58:68:51:ef:c3:e4:d3:3f:a4:6c:
         4a:ee:8a:eb:00:7e:05:2a:e4:d1:6f:71:b5:a2:c9:7f:e3:c4:
         eb:fe:5c:15:ae:91:82:c3:93:50:df:63:92:71:e9:a9:a3:9e:
         27:ec:31:5c:74:74:8d:3e:73:ca:3d:b6:cc:7b:1d:ca:f8:5e:
         bc:65:a0:9e:ef:df:9b:fe:56:1d:f8:e9:e5:fc:7a:89:95:64:
         fb:6e:67:0e:d4:0d:b5:76:66:b5:48:cf:7d:ea:de:8b:53:4a:
         8c:33:e9:db:4d:be:dd:f9:0d:42:14:42:1f:69:51:23:8f:24:
         e7:a7:4e:e9:08:af:41:e2:a8:49:37:84:85:68:54:fa:07:1a:
         cd:8d:59:ba:cb:55:64:47:8e:0e:1b:03:9a:97:3c:f9:62:2d:
         93:1e:13:27:f3:aa:aa:11:a2:84:4a:6f:2a:a7:78:9e:1e:43:
         a4:79:91:dc:1c:28:91:ac:6f:5c:b3:20:eb:49:2c:fa:6b:a0:
         3d:fd:06:92:57:50:05:8a:77:dd:d7:7f:35:1b:37:16:f9:14:
         88:7d:79:14:2a:9c:7a:34:a9:ce:35:eb:6c:bb:c2:ec:c5:3e:
         59:5e:98:1a:2d:3b:15:f1:8e:d6:b7:a8:5e:d0:4f:7c:02:1e:
         d5:16:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:37 2026 by rpki-client