This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235302e302f32342d3234203d3e20323133363037.roa
File:                     34352e3137302e3235302e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier:          FO5/sID6rbTwZWPnz91IuaDYnAbA0m4z8f4Kq+hF6lU=
Subject key identifier:   BC:40:1B:6E:EA:87:0C:6F:4E:47:AD:13:5F:2C:7D:4A:6C:2D:58:74
Certificate issuer:       /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial:       0453C38A81BFEF5F09DE23D8ECEFE016C176081E
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235302e302f32342d3234203d3e20323133363037.roa
Signing time:             Sat 20 Dec 2025 09:20:00 +0000
ROA not before:           Sat 20 Dec 2025 09:15:00 +0000
ROA not after:            Sat 19 Dec 2026 09:20:00 +0000
asID:                     213607
IP address blocks:        45.170.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:53:c3:8a:81:bf:ef:5f:09:de:23:d8:ec:ef:e0:16:c1:76:08:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
        Validity
            Not Before: Dec 20 09:15:00 2025 GMT
            Not After : Dec 19 09:20:00 2026 GMT
        Subject: CN=BC401B6EEA870C6F4E47AD135F2C7D4A6C2D5874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:44:1b:e4:13:41:44:c6:e6:5c:2a:6e:98:
                    a8:88:bb:c5:47:f7:9b:22:fa:55:10:85:ed:f8:91:
                    62:32:db:8e:bf:46:91:f0:ec:27:b2:1b:5f:a0:9d:
                    57:0a:ae:c1:c7:9d:3b:74:3b:de:1f:e1:04:f9:5a:
                    65:56:4b:2a:97:8a:1e:c9:73:27:29:d2:a3:ce:6f:
                    fd:10:b0:42:83:71:54:9a:9a:da:1a:35:7c:8a:9e:
                    5f:1f:00:e9:5f:6b:f1:34:17:ce:05:c0:4b:d0:f8:
                    c0:6f:6a:2f:7e:33:c6:4c:71:c3:5a:cc:b3:53:4f:
                    e9:5e:6d:c9:32:c1:9f:81:17:26:cb:79:ae:36:ee:
                    d7:41:e3:48:a0:ad:df:3d:9a:cc:a3:72:25:e8:bb:
                    fd:b3:89:96:c2:77:52:b9:bb:50:26:ec:d2:a2:a7:
                    c2:41:79:13:ef:ba:2a:40:b5:0c:2d:f4:aa:3e:9c:
                    f3:e2:f6:d1:4b:46:a0:90:bc:bf:ce:09:1c:d7:e4:
                    5d:71:e5:de:79:8c:d8:9f:f6:7f:53:a1:83:4d:f7:
                    c4:f5:5d:2d:aa:59:94:3f:5c:ec:34:a5:80:84:75:
                    69:24:85:c1:9d:b8:f6:c1:55:be:84:d9:cb:1e:e6:
                    e4:f3:b3:89:e6:98:a4:57:07:78:ec:5f:ed:bd:e3:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:1B:6E:EA:87:0C:6F:4E:47:AD:13:5F:2C:7D:4A:6C:2D:58:74
            X509v3 Authority Key Identifier:
                keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235302e302f32342d3234203d3e20323133363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:ff:39:41:7d:36:2d:9b:45:4e:c8:2e:e8:68:11:09:bf:
         0a:33:56:af:c3:32:78:4f:3d:45:c7:16:6a:e8:3a:22:2e:0c:
         40:62:19:f5:cf:e4:f2:78:4e:14:d7:ba:93:13:06:48:13:39:
         11:d9:4c:2a:db:fb:b2:e3:2e:73:60:dd:0e:1a:39:d8:86:3f:
         26:e2:4c:f4:df:bb:8d:a7:e7:31:2d:f1:10:5f:ab:f1:11:1d:
         e4:b4:6f:22:b6:15:47:87:a2:b1:48:14:5d:84:54:30:a1:4b:
         19:24:16:02:46:0c:8b:6c:44:53:1c:98:10:d1:0f:64:84:fd:
         67:f7:bb:8c:82:db:80:4a:7b:3e:4c:44:49:b5:a4:69:7c:2e:
         c6:aa:50:d4:4d:0f:f0:7e:fa:ac:cc:ab:b3:d3:a8:99:59:31:
         78:96:1e:6b:b7:a7:81:e6:0f:7f:41:74:a3:28:13:5e:56:e8:
         e0:fd:20:fa:c9:cb:48:54:57:27:4c:71:c2:61:f2:31:cf:4c:
         ca:d4:88:53:46:fd:d2:97:66:93:fc:d1:93:89:4c:8f:ed:b3:
         00:b7:2c:7b:b6:22:02:c1:9a:b6:24:bb:96:bd:d4:0c:54:f2:
         19:7a:04:3a:13:0e:16:3d:94:91:13:e2:02:97:b9:4f:8b:76:
         98:47:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:34:35 2025 by rpki-client