This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39352e302f32342d3234203d3e20323734303734.roa
File:                     34352e3136362e39352e302f32342d3234203d3e20323734303734.roa (raw, json)
Hash identifier:          7Oix7cATzSZIG8EG7LOuEpVp/IM+AMuXjO9DPd5IXJ8=
Subject key identifier:   CC:F6:9D:DC:0D:F1:DE:D5:2D:D5:05:90:3B:54:03:94:79:47:25:A9
Certificate issuer:       /CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
Certificate serial:       2526C7DA45651F357977E6E0A39E2BAB9C9E3762
Authority key identifier: 30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39352e302f32342d3234203d3e20323734303734.roa
Signing time:             Mon 17 Nov 2025 08:55:00 +0000
ROA not before:           Mon 17 Nov 2025 08:50:00 +0000
ROA not after:            Mon 16 Nov 2026 08:55:00 +0000
asID:                     274074
IP address blocks:        45.166.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 14:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:c7:da:45:65:1f:35:79:77:e6:e0:a3:9e:2b:ab:9c:9e:37:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
        Validity
            Not Before: Nov 17 08:50:00 2025 GMT
            Not After : Nov 16 08:55:00 2026 GMT
        Subject: CN=CCF69DDC0DF1DED52DD505903B540394794725A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:f2:c9:93:68:3e:8e:04:2f:34:ca:e5:41:
                    64:ed:6f:97:b9:88:a6:7a:be:86:b5:36:26:f3:29:
                    cd:83:29:b5:60:25:91:7c:f2:14:67:c4:38:6b:5f:
                    fb:98:ef:c8:03:87:96:61:f2:b5:35:fd:ac:d3:94:
                    37:7d:a0:4a:bc:cd:c6:29:e4:4c:cb:b2:42:c8:81:
                    70:08:e1:86:17:24:cc:a5:e9:1e:56:63:86:a9:86:
                    e6:11:3e:ae:94:0b:75:9c:5a:c9:17:89:84:28:c9:
                    5e:41:eb:fa:54:70:b2:dd:57:28:d9:62:d0:a1:f2:
                    9b:10:01:f9:b8:38:91:74:d3:e8:9b:5a:51:97:62:
                    5d:b2:77:f3:ec:4b:59:d3:6d:23:e2:e1:54:0f:6c:
                    1c:14:9c:44:78:b7:32:be:09:00:cb:23:90:ae:cc:
                    c5:5f:e4:22:1b:ec:62:75:75:66:7c:e6:b7:21:bb:
                    99:f5:94:c7:a1:ce:51:05:4c:1a:59:ca:3c:46:27:
                    f1:19:75:11:59:a0:c0:2f:3e:de:06:2b:08:b7:95:
                    12:aa:9a:23:23:1a:4e:7e:21:06:ad:a8:a0:ca:21:
                    63:b6:94:9b:a2:5e:d1:07:0f:28:37:e0:6d:a1:35:
                    ac:9c:56:02:5c:ce:d1:2e:8e:92:92:74:43:13:5e:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:9D:DC:0D:F1:DE:D5:2D:D5:05:90:3B:54:03:94:79:47:25:A9
            X509v3 Authority Key Identifier:
                keyid:30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39352e302f32342d3234203d3e20323734303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:67:d2:d5:bb:17:79:35:25:21:ae:da:e3:cc:4b:5b:8f:09:
         37:26:b0:2f:c3:81:d0:7f:89:05:45:c4:89:0e:a3:f5:bf:4a:
         bb:97:26:55:31:40:10:f3:57:fa:da:50:20:a0:fb:6a:69:cb:
         23:8c:0b:f5:17:ec:8e:db:0b:fa:72:8f:62:b0:bd:c6:ba:a2:
         43:bc:fe:87:52:6a:b6:d9:10:38:44:56:89:9f:d4:c5:52:35:
         7a:3f:ff:12:9f:de:98:71:cc:cc:69:c5:ad:f3:70:90:0c:cb:
         b5:0e:5a:1b:08:a0:e9:3c:7d:e9:0c:a1:ec:b8:a2:5b:7e:f3:
         31:2a:0b:92:f4:f5:16:2b:1a:b6:1e:55:00:e7:71:6d:18:08:
         8e:70:67:e0:38:27:1f:ab:3f:92:7e:56:ea:b4:80:51:0f:79:
         4e:fb:7f:e4:d6:d1:79:4f:51:0f:6c:77:2e:fc:1e:7b:a7:ec:
         32:e2:84:12:dc:66:55:ba:0b:7b:5d:28:c7:2d:cf:3d:c5:e3:
         c7:ae:74:32:48:bf:96:85:ea:15:9d:6d:a3:ea:74:e4:57:15:
         3b:a5:65:bd:f4:a1:73:b2:a1:d0:a3:c4:36:a0:4c:9b:b5:93:
         01:f4:14:22:39:88:ee:85:4c:7d:a2:c4:ea:fa:73:66:87:f6:
         eb:ea:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:04:23 2025 by rpki-client