This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32342d3234203d3e20323639373738.roa
File:                     34352e3138302e36302e302f32342d3234203d3e20323639373738.roa (raw, json)
Hash identifier:          MkCU03q/mkCN4Mrm7vudBBKgJauOTKx3iOZ7xk6n6vc=
Subject key identifier:   44:94:B4:41:FC:84:8C:81:B3:70:E4:33:1D:65:DE:B5:ED:F5:D9:7A
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       0A35C4453FE9F876C9A077D306C017BD84FFC04A
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32342d3234203d3e20323639373738.roa
Signing time:             Sat 22 Nov 2025 04:53:29 +0000
ROA not before:           Sat 22 Nov 2025 04:48:29 +0000
ROA not after:            Sat 21 Nov 2026 04:53:29 +0000
asID:                     269778
IP address blocks:        45.180.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl
                          rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:c4:45:3f:e9:f8:76:c9:a0:77:d3:06:c0:17:bd:84:ff:c0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Nov 22 04:48:29 2025 GMT
            Not After : Nov 21 04:53:29 2026 GMT
        Subject: CN=4494B441FC848C81B370E4331D65DEB5EDF5D97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:b0:bf:a9:2f:26:9a:89:58:12:5f:d7:7c:
                    0c:ec:7b:d8:dd:cf:15:dd:d4:20:51:65:0c:66:06:
                    f9:ea:7a:7e:57:40:c5:19:b1:a3:57:ae:75:26:4a:
                    0d:0f:6a:e4:bd:05:91:df:8d:86:4e:80:25:3e:1f:
                    0e:e4:a6:f0:58:99:92:a0:ed:8d:09:3f:98:37:8a:
                    cd:89:2f:4f:72:7b:c4:5f:3b:68:a9:03:eb:95:41:
                    86:e4:73:0d:02:8c:a5:68:1b:42:47:c8:2e:9e:5b:
                    11:fc:55:da:6f:fa:6d:2c:d8:c8:37:24:69:55:b3:
                    01:a5:f8:2b:57:a6:ef:09:b9:4f:0b:32:27:71:5f:
                    00:14:08:0f:56:78:d9:20:7f:ad:56:3f:19:0e:a4:
                    34:35:72:f3:1e:59:c0:45:ad:78:b2:23:45:86:72:
                    7e:69:2e:ae:31:33:18:3d:80:f9:c2:a4:cf:a8:fe:
                    bc:b3:52:21:3f:ba:18:21:0b:cd:c8:1a:04:b9:2f:
                    3c:d5:d0:33:81:2d:77:8c:c3:ce:45:ef:f5:99:9b:
                    aa:1f:d4:93:e5:42:2c:88:e8:8b:83:e5:76:b5:38:
                    6f:da:b6:d9:e5:3f:b4:0b:4f:52:04:34:a0:ca:5c:
                    bb:b7:6f:23:a9:84:df:06:69:92:f1:d1:7d:d5:1e:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:94:B4:41:FC:84:8C:81:B3:70:E4:33:1D:65:DE:B5:ED:F5:D9:7A
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32342d3234203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:90:b3:0f:6b:f0:b5:b4:2b:de:8f:db:c9:97:37:e1:5e:31:
         d5:53:1e:24:97:57:e9:2f:4c:43:7f:fc:b2:27:56:53:3b:f6:
         87:e0:bb:01:d2:0b:fc:6c:2a:14:dd:05:4a:96:2b:01:58:71:
         3f:9e:f6:1b:67:bf:3d:e0:b9:fb:24:e3:51:75:e6:51:47:49:
         96:ce:b6:bf:10:ea:1e:3b:88:ab:17:24:58:31:93:84:1b:d9:
         0c:49:3e:c3:b1:be:cd:03:5f:cf:10:80:5f:78:12:96:a2:bf:
         89:7b:86:a1:fa:c2:a6:20:48:88:8f:12:be:1c:5a:b3:81:60:
         10:49:5e:10:06:f3:ed:2c:77:fc:e8:18:02:e5:05:9e:7f:24:
         75:f5:df:09:ed:bf:3b:1f:e4:e2:2f:eb:68:fe:cf:b3:8b:04:
         2f:11:03:d7:f8:95:8f:a0:b6:d7:30:ea:c9:36:eb:2b:e0:de:
         bb:46:22:ac:60:73:04:14:4a:c9:78:7d:f9:15:6d:0c:26:b1:
         b8:2e:32:36:2f:b4:a1:bb:79:28:2f:1b:af:dc:76:4c:2a:9d:
         e8:b3:57:d2:76:0d:14:1c:5e:3e:f3:56:9f:d4:7a:3a:fb:54:
         ef:37:c4:f7:c1:4a:04:f1:0b:70:bc:44:cb:9e:d7:ae:4b:5f:
         f4:b6:e4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:18:13 2025 by rpki-client