This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32332d3233203d3e203634313339.roa
File:                     34352e3137302e3130322e302f32332d3233203d3e203634313339.roa (raw, json)
Hash identifier:          exOtejDUHgJs2mW3YfL8zrKRUt8KqH0dfyKPAYpRCa8=
Subject key identifier:   1E:76:30:B7:73:DD:3B:24:EF:81:30:DE:48:C5:F5:44:16:2B:C6:1E
Certificate issuer:       /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
Certificate serial:       1BF0FAFC994F3547174028F967EC6EDD299B822C
Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32332d3233203d3e203634313339.roa
Signing time:             Mon 22 Dec 2025 16:15:00 +0000
ROA not before:           Mon 22 Dec 2025 16:10:00 +0000
ROA not after:            Mon 21 Dec 2026 16:15:00 +0000
asID:                     64139
IP address blocks:        45.170.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f0:fa:fc:99:4f:35:47:17:40:28:f9:67:ec:6e:dd:29:9b:82:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
        Validity
            Not Before: Dec 22 16:10:00 2025 GMT
            Not After : Dec 21 16:15:00 2026 GMT
        Subject: CN=1E7630B773DD3B24EF8130DE48C5F544162BC61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:cc:22:b3:38:66:b4:eb:e3:21:a3:4e:22:
                    12:94:1a:f2:67:be:f4:bd:de:09:e8:14:1a:bc:ed:
                    54:fa:f5:1b:75:ef:c7:a1:d7:14:af:d1:af:a2:0f:
                    4a:0e:2f:95:9e:79:66:68:f5:98:d2:d5:58:9f:b7:
                    f6:71:27:9b:0f:39:ee:d1:93:b5:db:52:11:02:a2:
                    1d:98:db:35:01:47:86:79:01:b0:05:9e:37:15:a0:
                    ef:df:db:8c:0e:fc:84:6b:63:3f:4c:d8:9a:5f:17:
                    aa:8c:44:80:48:ef:9b:df:aa:ef:b9:fb:49:d1:72:
                    06:ce:f4:f4:9f:8d:2c:af:da:43:de:bd:53:e6:f0:
                    78:c3:69:18:eb:83:26:7f:99:8a:79:c3:f0:61:97:
                    14:42:9a:65:3a:50:7b:4f:a8:2e:f5:a1:3c:45:88:
                    5d:ac:6d:fd:6b:e2:b4:a3:b6:4b:54:0f:4e:38:12:
                    f8:54:1c:d4:2e:82:78:72:e9:2e:fe:54:4d:85:75:
                    3b:d1:be:7c:c7:54:dd:3a:9e:0d:f6:2f:22:25:e8:
                    b1:42:27:13:fe:b8:7f:16:e3:34:64:59:b1:4a:ab:
                    56:5b:18:06:fc:bc:f1:d6:c3:13:e9:e9:5f:db:ce:
                    2c:49:d1:79:9d:94:2a:8e:30:ff:66:71:97:52:36:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:30:B7:73:DD:3B:24:EF:81:30:DE:48:C5:F5:44:16:2B:C6:1E
            X509v3 Authority Key Identifier:
                keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130322e302f32332d3233203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:89:92:6c:03:93:83:fc:42:c7:68:1d:51:17:e9:46:d7:54:
         a1:1b:88:07:c0:ba:53:53:a3:93:cf:5d:8f:05:74:b4:b3:13:
         51:fa:b7:1f:15:81:c9:f3:e4:eb:a5:6e:5d:2c:d6:83:11:ee:
         46:8c:66:e7:85:66:19:af:c5:0d:a4:ea:11:09:fb:d1:2e:a1:
         27:07:68:75:7b:d8:34:99:5c:f4:66:fd:ab:13:16:3d:5d:3a:
         b8:73:7d:ae:e1:d7:e9:a2:f2:5d:4e:4d:01:22:95:1c:92:7e:
         27:29:d7:31:1e:d2:92:7b:35:6e:1b:53:7f:f3:82:5f:65:df:
         75:5b:a1:0b:51:ee:c2:2f:6d:48:ba:dd:b1:0c:41:de:a4:b8:
         55:9f:5f:e5:e8:49:0b:8b:14:ec:c1:df:44:4c:31:67:92:c6:
         e7:c7:fc:ac:06:49:22:61:e0:82:25:bd:b0:be:de:6b:2d:d2:
         68:1e:46:52:af:f2:d3:29:a7:54:47:e4:1a:c9:e8:9e:37:14:
         4a:09:e1:21:af:08:32:8f:73:63:63:2e:f0:08:48:76:c7:e4:
         3a:9c:bc:eb:a9:c1:97:b8:87:0d:35:94:b8:2b:89:86:e9:cf:
         87:21:0c:88:20:55:44:00:84:70:59:ef:bf:b6:2a:7d:2b:53:
         23:57:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:59 2026 by rpki-client