This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/34352e3136322e3136382e302f32322d3234203d3e20323637363831.roa
File:                     34352e3136322e3136382e302f32322d3234203d3e20323637363831.roa (raw, json)
Hash identifier:          uQoeoK7S6oOAGFz+ZOhIP+JmifkG7fkkVpVjpvtCns0=
Subject key identifier:   B3:10:99:DC:86:09:4C:66:B5:C5:EF:85:00:AE:D3:8D:D6:EA:BC:5B
Certificate issuer:       /CN=8315FC764BE8B3A46CBE3B829CAC268BE1CB3313
Certificate serial:       3A50FFD7EF24845252D9CE747121C1AEF871C47E
Authority key identifier: 83:15:FC:76:4B:E8:B3:A4:6C:BE:3B:82:9C:AC:26:8B:E1:CB:33:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/34352e3136322e3136382e302f32322d3234203d3e20323637363831.roa
Signing time:             Sat 15 Nov 2025 12:45:00 +0000
ROA not before:           Sat 15 Nov 2025 12:40:00 +0000
ROA not after:            Sat 14 Nov 2026 12:45:00 +0000
asID:                     267681
IP address blocks:        45.162.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 22:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:50:ff:d7:ef:24:84:52:52:d9:ce:74:71:21:c1:ae:f8:71:c4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8315FC764BE8B3A46CBE3B829CAC268BE1CB3313
        Validity
            Not Before: Nov 15 12:40:00 2025 GMT
            Not After : Nov 14 12:45:00 2026 GMT
        Subject: CN=B31099DC86094C66B5C5EF8500AED38DD6EABC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:d0:04:7f:ee:79:25:af:dc:25:55:dd:a2:
                    ec:12:ed:9b:e1:2a:1e:b3:51:d5:32:0b:a8:dc:81:
                    bd:ea:70:7b:33:54:5b:b9:c4:43:6b:5a:ad:87:a1:
                    6d:5d:d6:7b:9f:e9:ba:27:f7:b8:1a:74:9a:a7:9f:
                    18:cc:8f:24:1b:43:ba:84:12:69:b1:29:66:eb:b6:
                    3b:21:ad:a4:a2:cc:7a:1f:f8:7b:19:43:69:8a:5c:
                    8b:09:23:f9:a7:a4:2b:74:86:0d:99:68:22:73:05:
                    cd:44:bb:5d:83:e4:68:4d:a6:45:ec:e6:e3:91:5f:
                    ed:f5:11:cf:f0:35:b7:02:d2:ce:6d:e0:35:b0:f0:
                    42:52:cc:25:da:7f:38:c3:26:92:95:8c:be:4e:44:
                    df:d4:2c:e4:18:5e:ec:00:b0:11:8a:0b:ce:28:c7:
                    a4:88:85:75:df:8a:e9:c7:47:aa:10:54:9a:65:e7:
                    09:bd:bc:59:e7:dd:a9:c8:bc:5b:62:21:90:f4:d6:
                    f8:bf:cf:ff:c0:3f:e3:9f:42:98:7d:21:79:5b:20:
                    dc:28:1a:41:c6:65:39:ed:0f:71:41:b2:75:52:5e:
                    0e:41:ad:0b:e1:56:4f:c1:85:68:a2:ef:fa:0c:ae:
                    4d:77:dd:5d:9e:f0:03:02:0d:a9:5b:16:9a:e9:99:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:99:DC:86:09:4C:66:B5:C5:EF:85:00:AE:D3:8D:D6:EA:BC:5B
            X509v3 Authority Key Identifier:
                keyid:83:15:FC:76:4B:E8:B3:A4:6C:BE:3B:82:9C:AC:26:8B:E1:CB:33:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8315FC764BE8B3A46CBE3B829CAC268BE1CB3313.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC7F12AFE54DA2BE1076F2EE44F612EF6CE5297E5102438AC78BBF6BAC30EE55/0/34352e3136322e3136382e302f32322d3234203d3e20323637363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:06:b7:bc:ca:65:8f:61:6b:6a:3c:2b:9c:e5:e1:84:02:
         b0:7d:10:03:30:99:d2:aa:8b:19:b5:41:0a:ac:f4:5a:85:a1:
         e0:19:ca:43:a5:5a:79:45:a7:91:1c:59:e6:c3:f9:a8:91:93:
         c4:f5:d7:ae:53:09:1d:99:e6:31:95:a2:29:02:9c:03:44:78:
         c7:88:ed:46:e6:5a:49:0a:36:08:c0:b7:18:d1:03:1f:05:3b:
         b9:bf:b1:d5:dc:79:cc:d1:d0:ad:61:9e:17:b4:38:a4:e6:01:
         c9:db:3b:85:4b:4c:64:b7:77:61:a5:47:87:23:80:f6:15:d2:
         00:f6:fb:25:e9:b1:9e:cb:53:50:7c:2e:2a:19:e7:c5:36:7d:
         50:a8:23:85:a6:d0:ec:70:79:98:6e:a5:55:b6:71:a9:dc:ab:
         6d:47:c0:6c:45:c1:1d:6e:0c:6f:65:e7:45:dc:27:c2:76:54:
         6f:32:ba:2c:93:34:60:50:13:c2:d9:74:16:bf:e5:fc:db:a1:
         ac:08:02:d9:dc:cd:10:85:0e:8c:c9:c7:99:24:c7:69:80:80:
         ce:d0:5d:2a:2e:c1:5e:59:93:25:00:20:23:04:a6:3b:1b:7e:
         8d:76:4d:2f:2b:0c:e3:9c:8d:bf:cf:d8:bd:bc:47:36:b2:66:
         46:6d:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:29:13 2025 by rpki-client