This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
File:                     34352e3137392e3139382e302f32342d3234203d3e203634323331.roa (raw, json)
Hash identifier:          bv250loX5LzY9jY/JVRsXn9Ip7BOK1GZtNItG7Xb1bk=
Subject key identifier:   63:89:D0:A8:B7:45:ED:2E:B1:98:4E:5A:64:94:7A:C2:7F:22:14:2B
Certificate issuer:       /CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268
Certificate serial:       7CB5B157782F29E0D94D943796EF7A91CFF84239
Authority key identifier: BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
Signing time:             Wed 12 Nov 2025 16:52:23 +0000
ROA not before:           Wed 12 Nov 2025 16:47:23 +0000
ROA not after:            Wed 11 Nov 2026 16:52:23 +0000
asID:                     64231
IP address blocks:        45.179.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 11 Dec 2025 10:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:b1:57:78:2f:29:e0:d9:4d:94:37:96:ef:7a:91:cf:f8:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268
        Validity
            Not Before: Nov 12 16:47:23 2025 GMT
            Not After : Nov 11 16:52:23 2026 GMT
        Subject: CN=6389D0A8B745ED2EB1984E5A64947AC27F22142B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:ca:3d:22:5f:29:5e:6a:3a:c5:79:3d:75:
                    65:29:dd:3f:4f:2b:33:a3:6b:2e:11:dd:53:33:d1:
                    22:1d:9b:59:3f:a4:a1:7c:b6:9a:4b:69:52:87:7c:
                    b7:ae:8d:88:0d:a9:db:0b:5f:61:5a:1e:8e:e2:86:
                    e9:8e:c3:d0:b2:2c:36:42:36:f1:5d:ab:78:55:ff:
                    99:69:d8:62:2b:6c:81:ce:b7:17:52:69:40:18:ec:
                    4f:ed:a5:0a:19:10:88:df:f0:d4:c2:d6:93:2f:6f:
                    5c:08:86:77:22:e6:c0:c9:eb:45:ab:6e:5a:af:03:
                    5c:e0:de:89:b7:9b:3f:14:c2:6c:70:e8:20:a6:d3:
                    3d:bd:fe:32:51:fb:03:c8:6e:60:89:94:62:e6:6c:
                    2b:6a:85:da:65:0e:ce:25:da:56:84:39:f4:27:db:
                    7e:18:1a:c0:2f:f0:a5:51:c0:84:74:07:52:cd:58:
                    b1:c8:36:7f:60:80:83:d7:45:2f:76:bc:84:3a:0f:
                    32:89:ed:ee:66:51:13:f4:1b:80:88:5c:4e:32:64:
                    28:0d:bf:5b:e1:fa:81:7d:30:43:4c:af:f1:cc:d1:
                    83:28:47:24:fc:e2:de:cb:ce:30:74:1d:7a:e6:f9:
                    14:57:d7:cb:13:cf:4c:bd:a2:65:a4:ba:a0:5e:a8:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:89:D0:A8:B7:45:ED:2E:B1:98:4E:5A:64:94:7A:C2:7F:22:14:2B
            X509v3 Authority Key Identifier:
                keyid:BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:9c:b9:a0:ef:19:79:76:34:fb:a1:da:7a:3e:a2:ff:23:
         bd:24:1d:3a:f7:7b:8e:95:11:a3:e9:d1:a2:ce:7b:b8:88:88:
         08:a1:eb:64:89:ae:42:9c:27:ff:a8:e2:fa:15:5b:6a:0d:6f:
         f7:3c:fa:1a:ad:21:48:e4:f0:bc:97:f8:b7:77:b3:92:bd:25:
         18:67:d4:47:b6:b5:ad:02:0d:41:78:17:32:54:11:0b:56:08:
         65:cd:8b:76:9a:e3:5d:d8:ac:aa:ce:47:d4:ac:1c:a1:ff:d1:
         66:e4:ae:fb:e2:32:1f:87:c6:be:74:04:3e:ec:7e:60:8a:61:
         86:0c:a0:15:00:e4:9a:99:9c:d6:eb:7b:f4:4c:bb:fa:0a:3c:
         3c:ca:d7:e3:e0:f3:a6:90:f8:ee:05:2b:21:87:96:76:be:cb:
         ce:a7:4a:f4:d9:5a:03:c5:f0:07:1f:b0:04:d1:b9:bf:5e:4f:
         62:e6:96:5f:c4:72:6d:4f:57:00:91:6d:ad:0f:8c:65:99:8b:
         8a:b4:57:6c:23:d9:ae:a1:22:ef:ab:04:31:aa:1e:f4:6c:1f:
         13:f4:ae:73:68:34:4e:e1:47:a3:dc:73:51:9c:eb:af:c6:34:
         03:78:91:54:e9:a1:42:59:f0:75:e6:e2:5a:76:27:10:34:6f:
         f6:e0:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:30:17 2025 by rpki-client