This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6F57D12E1DEE31080187AC3BE680390012ED726978B80BDCE8B5C21C93EB5F5/0/34352e3136302e342e302f32322d3234203d3e20323636383636.roa
File:                     34352e3136302e342e302f32322d3234203d3e20323636383636.roa (raw, json)
Hash identifier:          U/hKZL204wZbiEkOqXRPgthKFy1VQItsUZvlxa7CtVo=
Subject key identifier:   B9:D0:37:44:17:7E:03:A3:38:5A:EB:6F:8F:3D:82:A9:38:64:86:8C
Certificate issuer:       /CN=D7274268579CA162EE9FB615C1F0628090347C85
Certificate serial:       0E081EADA706F36437568EBA5A2DDDBD3DC7C3EB
Authority key identifier: D7:27:42:68:57:9C:A1:62:EE:9F:B6:15:C1:F0:62:80:90:34:7C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7274268579CA162EE9FB615C1F0628090347C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6F57D12E1DEE31080187AC3BE680390012ED726978B80BDCE8B5C21C93EB5F5/0/34352e3136302e342e302f32322d3234203d3e20323636383636.roa
Signing time:             Wed 03 Dec 2025 16:20:00 +0000
ROA not before:           Wed 03 Dec 2025 16:15:00 +0000
ROA not after:            Wed 02 Dec 2026 16:20:00 +0000
asID:                     266866
IP address blocks:        45.160.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6F57D12E1DEE31080187AC3BE680390012ED726978B80BDCE8B5C21C93EB5F5/0/D7274268579CA162EE9FB615C1F0628090347C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6F57D12E1DEE31080187AC3BE680390012ED726978B80BDCE8B5C21C93EB5F5/0/D7274268579CA162EE9FB615C1F0628090347C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7274268579CA162EE9FB615C1F0628090347C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 12 Dec 2025 03:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:08:1e:ad:a7:06:f3:64:37:56:8e:ba:5a:2d:dd:bd:3d:c7:c3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7274268579CA162EE9FB615C1F0628090347C85
        Validity
            Not Before: Dec  3 16:15:00 2025 GMT
            Not After : Dec  2 16:20:00 2026 GMT
        Subject: CN=B9D03744177E03A3385AEB6F8F3D82A93864868C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:7f:7b:24:a2:9c:a5:9f:23:a8:96:b5:a0:
                    44:91:bf:54:f7:92:43:0b:3f:c5:cd:fe:1a:73:96:
                    e2:d1:57:ce:85:ed:04:d7:46:f5:16:d4:d6:aa:78:
                    99:99:70:8f:e8:78:1c:e3:35:99:c8:60:16:05:12:
                    fa:72:09:7c:54:42:9d:78:76:12:36:d4:d6:77:c8:
                    6a:60:52:a2:09:52:7d:5b:2a:1e:72:49:5f:50:53:
                    2c:88:92:d2:06:07:9d:7f:e0:45:4e:b2:9e:a8:0c:
                    3e:1c:65:3c:24:33:06:d1:e7:20:44:f7:89:8c:eb:
                    45:fa:43:c5:e7:ba:e1:7d:0b:e0:ba:eb:3f:83:a7:
                    62:43:7f:8a:75:29:5f:e7:d0:58:46:38:39:38:60:
                    a5:e9:2f:53:10:de:f0:36:c2:1c:92:6d:77:03:2c:
                    ce:34:11:10:9a:8c:18:e4:4f:41:4a:9e:4c:02:69:
                    a6:0a:35:bd:bb:8d:d1:21:1e:e2:75:ae:5d:26:7f:
                    65:b4:d5:7e:3d:34:33:89:22:d7:24:ea:29:34:e2:
                    05:37:9a:4e:e5:c1:b3:ef:ec:72:ac:17:34:28:29:
                    42:32:87:17:65:b1:07:e4:a1:6f:87:c0:ae:68:bc:
                    5a:fa:1c:76:39:b3:b1:7e:13:f1:05:8b:4d:9a:30:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D0:37:44:17:7E:03:A3:38:5A:EB:6F:8F:3D:82:A9:38:64:86:8C
            X509v3 Authority Key Identifier:
                keyid:D7:27:42:68:57:9C:A1:62:EE:9F:B6:15:C1:F0:62:80:90:34:7C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6F57D12E1DEE31080187AC3BE680390012ED726978B80BDCE8B5C21C93EB5F5/0/D7274268579CA162EE9FB615C1F0628090347C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7274268579CA162EE9FB615C1F0628090347C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6F57D12E1DEE31080187AC3BE680390012ED726978B80BDCE8B5C21C93EB5F5/0/34352e3136302e342e302f32322d3234203d3e20323636383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:31:75:5e:66:e3:06:76:21:2c:ed:65:bf:3e:46:a7:d0:ab:
         87:07:a6:e3:ef:5f:7c:74:11:70:05:97:75:09:c9:5d:db:9d:
         ff:98:61:9e:a1:dd:a7:c1:0f:da:f9:54:6b:c5:c9:ce:27:bd:
         94:7c:0a:49:10:3d:e8:1a:ef:87:e6:b8:cb:fe:8e:f2:e4:ad:
         58:d7:92:73:63:d3:38:30:5d:1f:d1:b6:4e:8b:0d:4e:db:35:
         5b:0a:c2:1a:78:20:32:7d:e2:20:6e:ce:b2:8f:31:74:d7:f5:
         f0:9a:c4:1f:19:5a:35:c3:48:19:24:57:6c:25:aa:17:d6:4c:
         60:7b:0a:45:3f:de:8d:48:4a:81:e1:7f:29:fc:50:dc:66:d1:
         1a:2a:1b:ba:c6:72:18:18:da:2c:60:fb:5c:d9:25:b7:d9:ed:
         47:ec:74:e0:78:c7:77:61:fb:a8:7d:31:a5:c7:a2:48:2d:aa:
         70:ba:60:ff:5e:ec:78:f9:a8:7e:25:0b:38:88:21:59:36:45:
         2c:c6:24:3a:43:c8:32:42:97:24:1d:a9:af:5e:2d:af:71:90:
         24:5e:ed:72:2b:68:7b:70:5b:1b:a7:af:40:52:d1:6a:2c:07:
         a5:ff:ed:0e:26:ef:bb:b0:d0:6a:35:ff:ba:74:b1:50:c7:91:
         3c:6c:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 21:30:09 2025 by rpki-client