This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39342e302f32342d3234203d3e20323734303734.roa
File:                     34352e3136362e39342e302f32342d3234203d3e20323734303734.roa (raw, json)
Hash identifier:          yFdNFFZf2+Vvb6Rf6VGWWDEIgdowMJbjiojYnODo2TE=
Subject key identifier:   BD:63:87:8F:B1:C9:2B:8E:16:B4:06:3F:23:97:2D:77:A2:64:96:3E
Certificate issuer:       /CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
Certificate serial:       5157CF3C7F0EC1D97FA3473B6CDBB7D5DAC2F110
Authority key identifier: 30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39342e302f32342d3234203d3e20323734303734.roa
Signing time:             Mon 17 Nov 2025 08:55:00 +0000
ROA not before:           Mon 17 Nov 2025 08:50:00 +0000
ROA not after:            Mon 16 Nov 2026 08:55:00 +0000
asID:                     274074
IP address blocks:        45.166.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 14:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:57:cf:3c:7f:0e:c1:d9:7f:a3:47:3b:6c:db:b7:d5:da:c2:f1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
        Validity
            Not Before: Nov 17 08:50:00 2025 GMT
            Not After : Nov 16 08:55:00 2026 GMT
        Subject: CN=BD63878FB1C92B8E16B4063F23972D77A264963E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:63:fd:c7:ea:49:9b:52:49:87:e9:94:b2:
                    36:1b:7d:1e:cc:03:8c:0b:d1:fe:2c:8d:f8:06:bb:
                    73:34:d4:b7:d9:ff:73:ab:74:94:02:83:97:67:38:
                    33:7d:05:e2:49:f5:8a:b8:9f:28:91:d2:95:e3:e4:
                    e9:e1:85:99:76:8d:d5:90:50:2f:31:06:1f:c7:d2:
                    75:c2:e8:72:bc:dc:21:5f:e4:08:a6:c4:77:02:9b:
                    68:7f:65:08:f9:6e:7e:10:95:ec:49:3c:76:f6:03:
                    7c:81:b9:c5:f2:44:17:b7:ae:89:69:86:91:a7:72:
                    2e:fd:b4:76:46:a8:e8:96:82:d3:aa:70:fe:8b:bc:
                    54:85:23:6d:f1:c4:86:29:62:41:91:67:69:a0:ee:
                    06:d9:c5:6c:ad:c2:b3:06:0e:a1:bf:27:3e:ea:96:
                    e0:26:70:9b:b1:c6:2c:a1:5c:30:a5:88:22:73:c8:
                    8d:8b:ee:d0:a0:74:6d:e5:ac:8b:8f:b5:06:66:8f:
                    ca:94:a4:90:49:5d:3c:49:c6:cb:97:23:9b:3d:53:
                    02:47:61:51:4d:48:47:87:af:1d:43:de:e7:1f:e7:
                    5f:50:84:70:24:fc:38:50:d8:68:d3:1a:a1:50:62:
                    55:8d:d4:73:48:cd:d7:3d:33:85:94:b1:b9:41:9c:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:63:87:8F:B1:C9:2B:8E:16:B4:06:3F:23:97:2D:77:A2:64:96:3E
            X509v3 Authority Key Identifier:
                keyid:30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39342e302f32342d3234203d3e20323734303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:be:27:90:dc:4d:d9:41:bf:1c:75:d6:34:4b:e2:14:92:
         9a:66:75:68:76:d9:f3:3c:67:05:02:9f:85:d2:0b:95:4a:09:
         e7:5e:16:25:8b:5e:5d:11:90:b5:59:96:5a:ce:40:ad:26:4c:
         4a:b2:c8:f3:97:94:ac:f3:b3:e9:8e:f8:74:56:bb:13:66:0d:
         63:ad:ee:d0:91:46:2b:f1:6b:d6:3f:8d:cd:af:25:ed:f1:b0:
         5f:56:70:71:5e:e4:3f:fc:85:2b:73:bb:f4:be:ce:f8:fb:cd:
         52:57:6b:0a:8c:e4:0f:24:d3:4c:48:cb:1a:1b:27:52:13:41:
         85:53:7c:e0:5b:ab:7f:87:7c:da:60:c0:b5:2d:88:28:70:ca:
         b8:36:0a:05:bc:8a:d0:4d:18:0e:a0:ed:93:8c:44:b1:cb:cb:
         b3:43:81:95:ac:36:5a:d8:aa:b7:ae:59:84:f7:34:be:ea:c3:
         56:83:91:f1:fc:0c:2e:a9:6d:6a:e2:99:23:11:7d:e1:3a:55:
         89:71:36:d2:74:d8:a5:bc:2f:e4:da:83:90:1c:39:f1:90:52:
         a2:45:6a:e5:00:ee:a1:cf:d5:42:3c:59:37:bb:51:92:2c:57:
         55:ce:b1:42:ab:81:64:66:96:c7:46:44:fe:26:ec:57:47:cb:
         6f:f8:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:04:23 2025 by rpki-client