This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/34352e3137382e37342e302f32342d3234203d3e20323635353930.roa
File:                     34352e3137382e37342e302f32342d3234203d3e20323635353930.roa (raw, json)
Hash identifier:          cN65MKh+DRufFaxRnUh8kfmZXwHD+c5YjHr6Na3NTHs=
Subject key identifier:   96:C4:55:25:94:C1:02:5D:24:25:51:01:B6:DF:6E:93:8B:D4:0D:4D
Certificate issuer:       /CN=44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71
Certificate serial:       4BB502A459A6896DD0E77EE26E1CB470F72CE6EA
Authority key identifier: 44:AF:FE:BA:19:37:C2:A0:8E:23:DE:18:92:F4:C8:3B:CB:C5:0E:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/34352e3137382e37342e302f32342d3234203d3e20323635353930.roa
Signing time:             Wed 19 Nov 2025 05:53:08 +0000
ROA not before:           Wed 19 Nov 2025 05:48:08 +0000
ROA not after:            Wed 18 Nov 2026 05:53:08 +0000
asID:                     265590
IP address blocks:        45.178.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 19:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b5:02:a4:59:a6:89:6d:d0:e7:7e:e2:6e:1c:b4:70:f7:2c:e6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71
        Validity
            Not Before: Nov 19 05:48:08 2025 GMT
            Not After : Nov 18 05:53:08 2026 GMT
        Subject: CN=96C4552594C1025D24255101B6DF6E938BD40D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:9b:47:40:cf:99:cf:45:23:47:c8:0c:8d:
                    7e:ea:dc:5e:aa:d5:ac:02:30:fa:81:54:62:9e:04:
                    b8:8e:7f:12:5b:b7:a5:38:9e:e4:74:92:cb:b2:9f:
                    9c:52:79:2f:38:06:58:1d:8a:2a:1f:c4:49:c9:fd:
                    45:8e:37:14:a8:20:b0:03:86:f1:f8:30:1e:d6:1a:
                    de:16:aa:ff:b2:7e:d0:ec:99:9e:20:15:37:3d:25:
                    89:ae:47:86:5c:b2:ed:55:00:46:a0:4b:04:85:72:
                    48:dc:09:b8:7d:4c:97:58:72:c4:e7:c7:a3:85:37:
                    57:5f:a8:5a:6c:68:db:af:e5:3b:47:6a:11:83:73:
                    83:31:a6:90:a5:32:f3:56:f3:9a:0b:a6:60:3c:c4:
                    29:96:be:8a:cf:78:99:c9:f9:9f:e7:e4:fb:2b:17:
                    35:66:9f:73:c3:4a:7c:ae:e1:fc:5b:f7:ef:23:e7:
                    9d:57:8d:b9:7f:77:88:43:de:96:c5:95:6a:79:1e:
                    b5:86:e3:8a:ee:a8:31:1f:bf:20:d0:d1:fa:9a:a2:
                    fc:01:79:66:65:c6:57:d3:d1:b5:a2:bb:dc:a7:58:
                    07:5c:95:bd:c8:8a:6a:3f:56:af:0a:11:f5:22:6f:
                    12:64:9b:5a:81:39:37:f7:8a:96:fc:59:a9:86:90:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C4:55:25:94:C1:02:5D:24:25:51:01:B6:DF:6E:93:8B:D4:0D:4D
            X509v3 Authority Key Identifier:
                keyid:44:AF:FE:BA:19:37:C2:A0:8E:23:DE:18:92:F4:C8:3B:CB:C5:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44AFFEBA1937C2A08E23DE1892F4C83BCBC50E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/873BD1E0152A7A8D934E21887C7EF733D0B15B007A41B45810215AAE6B663F5B/0/34352e3137382e37342e302f32342d3234203d3e20323635353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:4a:37:ba:88:b7:44:a5:a8:55:d8:b8:59:a2:b5:f7:86:
         a1:ba:5d:9e:ea:37:4f:ac:e4:b4:4c:c0:08:c3:21:fa:52:f9:
         3d:e9:a1:3f:cc:c7:48:b2:32:47:71:4e:3b:f6:be:4e:0c:19:
         eb:ce:de:19:39:fd:49:55:e5:c9:4a:8c:c0:4f:68:5d:a6:10:
         1a:bf:4e:7a:4c:c9:07:00:65:16:64:29:44:92:70:8b:f4:d9:
         d3:20:71:be:ce:97:31:2b:61:e2:96:97:ad:1a:8b:3b:5e:92:
         85:d2:e0:f7:08:a2:b7:ca:53:dc:95:6e:0a:9f:50:17:c3:b7:
         7a:3b:e1:3c:57:e2:d4:f2:f5:b9:3a:3a:fa:bd:4d:e7:ba:19:
         2a:cd:71:45:8d:f4:31:d1:64:3b:ba:9d:e3:db:f5:cf:cd:0f:
         f2:aa:b7:41:5f:cf:99:bf:70:f4:dc:2a:bf:91:ce:25:e9:d0:
         a2:58:c9:41:da:da:ca:c9:9f:7a:25:88:dd:69:5b:fd:e0:68:
         4d:92:6c:57:61:3a:43:65:33:c3:eb:56:bc:06:91:7d:93:5e:
         d4:c5:3b:c7:fa:df:d4:36:30:ee:7e:ef:b0:0e:69:93:84:c0:
         6b:a8:3f:cd:63:b1:91:1c:57:f6:8b:83:a4:0d:da:94:f1:c3:
         1c:72:97:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:44:33 2025 by rpki-client