This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130332e302f32342d3234203d3e203634313339.roa
File:                     34352e3137302e3130332e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          JnEqnlLKgVAJlYH4hEz+CkBpRAUNGPFOnhvuoCgs6lA=
Subject key identifier:   20:D1:28:97:27:FC:84:A4:F2:3F:A0:7B:46:A5:51:C0:A4:22:C4:C2
Certificate issuer:       /CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
Certificate serial:       106A915B969DA54952AF0B805DBDBBB76A5196A3
Authority key identifier: AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130332e302f32342d3234203d3e203634313339.roa
Signing time:             Mon 22 Dec 2025 16:15:00 +0000
ROA not before:           Mon 22 Dec 2025 16:10:00 +0000
ROA not after:            Mon 21 Dec 2026 16:15:00 +0000
asID:                     64139
IP address blocks:        45.170.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 20:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6a:91:5b:96:9d:a5:49:52:af:0b:80:5d:bd:bb:b7:6a:51:96:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D
        Validity
            Not Before: Dec 22 16:10:00 2025 GMT
            Not After : Dec 21 16:15:00 2026 GMT
        Subject: CN=20D1289727FC84A4F23FA07B46A551C0A422C4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:ea:b7:af:c1:b4:79:fa:81:c6:94:e2:56:
                    6f:5a:ab:65:e1:68:d6:26:54:0e:7d:bd:57:ff:96:
                    c0:05:c7:bb:f1:ba:a0:0a:ad:4b:49:a6:97:92:2e:
                    24:93:4f:a9:cd:22:fb:ce:e5:eb:e2:7a:72:90:00:
                    e3:ee:e6:40:a8:56:9d:12:ba:ec:f1:d2:00:58:47:
                    b6:ef:ca:96:bc:92:74:78:7d:36:04:69:23:2b:1e:
                    d9:44:b8:c3:1a:05:d6:21:4f:74:c2:38:fd:0f:2b:
                    b1:a5:c2:d0:06:3f:6b:9d:eb:a9:78:d2:54:64:ca:
                    04:54:21:aa:ea:f2:4f:65:f7:db:72:6e:1a:94:77:
                    e4:3d:94:2e:4f:03:20:43:af:e8:24:36:d2:b8:45:
                    b7:56:e5:2d:b9:6b:d9:db:75:6b:20:1f:14:d7:37:
                    30:79:37:48:2f:ee:bd:a4:75:3a:37:d9:74:20:91:
                    fd:2c:a5:84:9c:fe:c2:7f:cd:89:8f:d6:e1:aa:81:
                    e0:2a:3b:16:0e:1d:23:b4:39:b3:90:9a:d9:20:9f:
                    ea:13:50:80:52:ca:e8:fe:b7:0b:36:4b:d0:38:0a:
                    05:b1:71:a0:a0:6c:4c:3c:c7:89:e8:5f:87:d7:10:
                    7a:f9:5d:84:c4:58:73:7a:76:08:18:46:8c:5f:fd:
                    d0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D1:28:97:27:FC:84:A4:F2:3F:A0:7B:46:A5:51:C0:A4:22:C4:C2
            X509v3 Authority Key Identifier:
                keyid:AF:AF:EC:BD:8D:8B:EB:5B:E4:14:03:DA:DC:4D:0F:7C:3A:8B:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFAFECBD8D8BEB5BE41403DADC4D0F7C3A8B4B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEE424006F537F0D7AB35B3A67D43812E0F710D4079B2E4EEDC314B4CB0AC8D8/0/34352e3137302e3130332e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:c0:f6:6c:45:bc:50:33:d7:2d:98:d2:8c:f6:60:a2:cc:
         b3:3e:d0:b7:1d:02:dd:1d:9f:fb:37:26:dd:af:7f:9a:59:ec:
         17:96:f9:da:f6:42:c8:62:ca:aa:ea:50:0e:1f:6c:2b:d5:13:
         78:04:1a:ad:37:67:f4:d9:c8:ca:78:1e:67:f1:0a:37:28:4c:
         63:d8:be:4b:84:e5:1e:4d:e1:eb:d5:f5:49:7c:f3:1a:68:77:
         d4:15:8f:92:03:4a:f4:69:ee:ac:58:04:48:98:96:6a:49:6a:
         59:3e:f7:dd:13:5b:05:5f:f1:d3:6d:08:8c:bf:e5:44:b0:48:
         7b:62:84:ec:8c:2b:b1:ef:3a:88:61:df:01:e1:0d:01:92:a3:
         ad:7c:53:68:83:bd:0a:27:ce:ea:4e:e7:f8:3e:b0:82:16:d2:
         9c:e4:a1:b4:af:f5:86:ba:95:60:45:d0:eb:fb:43:13:c8:ab:
         12:02:37:42:e2:a3:39:5b:98:3b:c2:df:d1:ee:b3:df:3a:31:
         4f:7d:9d:53:c8:b8:71:5f:79:0a:1f:47:cd:4f:16:53:2a:3a:
         5e:0e:69:a8:0d:36:2c:33:0a:63:1d:97:05:00:56:2e:f5:b4:
         6d:78:b0:d7:11:78:43:76:f8:c1:9f:71:cc:08:78:6d:bf:88:
         d2:87:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:58 2026 by rpki-client