This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32312e302f32342d3234203d3e203238343233.roa
File:                     34352e3136342e32312e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          2ROMy1hMNtl4LlD4eAmab5XkXJI77b/wCGmKJrMFckU=
Subject key identifier:   FC:74:EC:1B:48:54:09:05:08:C1:42:57:2B:18:29:81:7B:5F:BD:69
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       306AEDE81821135C7D17E963385895E4AE4B8B8C
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32312e302f32342d3234203d3e203238343233.roa
Signing time:             Sun 28 Dec 2025 01:56:30 +0000
ROA not before:           Sun 28 Dec 2025 01:51:30 +0000
ROA not after:            Sun 27 Dec 2026 01:56:30 +0000
asID:                     28423
IP address blocks:        45.164.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 09:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6a:ed:e8:18:21:13:5c:7d:17:e9:63:38:58:95:e4:ae:4b:8b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Dec 28 01:51:30 2025 GMT
            Not After : Dec 27 01:56:30 2026 GMT
        Subject: CN=FC74EC1B4854090508C142572B1829817B5FBD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:bb:bc:f8:f9:46:4e:94:db:20:87:b6:a1:
                    82:12:06:64:2c:f0:3b:92:60:d9:e1:12:fb:d3:3a:
                    d9:12:27:8b:63:cd:d6:6e:82:1d:a7:73:b6:0b:ce:
                    67:8d:3e:53:09:11:93:3a:bc:78:0c:8f:87:97:7d:
                    4c:42:c1:4a:6a:ad:89:01:02:ad:f4:2b:5c:18:79:
                    0a:d6:ed:8a:90:28:74:df:ed:0b:55:9e:e3:c6:1a:
                    54:c6:69:ac:9b:b5:8b:3e:bf:56:97:8b:32:26:58:
                    b1:8c:2a:ce:37:57:5d:45:35:60:0b:5e:f5:d3:ef:
                    29:31:00:9e:1b:a4:50:bf:e9:99:12:a0:65:9c:e7:
                    a9:ee:72:06:3e:91:7f:20:f0:27:7c:1e:5b:a3:46:
                    fa:91:37:17:2d:fc:95:90:ea:31:09:0d:97:d4:75:
                    71:12:4c:e1:3f:73:81:e9:de:b3:30:c1:e3:89:03:
                    ca:9a:35:a5:ed:60:a2:ca:f7:86:46:ab:3a:b9:55:
                    fe:f6:90:1d:2e:86:4c:c6:fb:6d:1a:64:ea:13:74:
                    82:4d:6b:f6:d5:bb:9a:8a:6f:f0:66:4d:23:7a:76:
                    c2:81:d4:68:7c:a9:56:40:99:52:2f:a4:71:0c:9c:
                    93:5a:55:50:08:b8:c1:52:63:91:29:1f:ac:b9:7f:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:EC:1B:48:54:09:05:08:C1:42:57:2B:18:29:81:7B:5F:BD:69
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32312e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:01:c7:e9:55:7a:4c:81:f7:35:c7:9d:28:be:3b:da:09:
         98:1e:2f:90:b5:30:c4:e4:98:43:94:e1:8d:7a:ac:7b:a0:45:
         86:44:a8:11:1d:ce:40:60:cd:ba:35:79:7d:de:25:93:b0:18:
         f3:0e:c9:17:6b:2f:a0:8b:a0:47:c2:71:99:ab:b1:e2:fe:b6:
         9c:24:9b:84:fa:d6:f3:63:45:c7:b4:f4:34:c3:84:fa:b5:64:
         53:da:f8:20:12:42:d8:d6:2d:5d:d0:f4:eb:98:c3:4a:f1:16:
         59:c0:15:b3:3f:9c:de:1c:ed:98:de:9c:c9:bc:c1:1a:56:98:
         10:a3:ae:2c:d8:53:93:a2:97:50:79:b4:57:d0:57:0f:df:91:
         13:17:51:b4:0f:ee:3e:c0:25:7c:7c:cf:4b:e0:83:3b:bc:e3:
         42:8e:5e:49:d9:9b:dc:be:8a:b5:2a:13:85:df:27:cb:aa:eb:
         a3:70:65:e3:e7:ed:7d:41:5b:3e:bc:df:fb:d9:43:fd:06:e1:
         c5:8c:6d:fe:b6:f7:e7:02:43:cc:2f:fc:dd:ed:74:c4:5e:1d:
         09:89:21:ee:c7:e8:f3:4f:5e:5e:31:37:11:92:fd:ca:86:bb:
         d0:71:b3:3d:50:1e:cb:55:0d:84:2f:2d:aa:43:30:33:af:19:
         4b:22:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:51 2026 by rpki-client