This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32322d3234203d3e20323731383136.roa
File:                     34352e372e3134302e302f32322d3234203d3e20323731383136.roa (raw, json)
Hash identifier:          DiQ7u2CCydmpI7Yhw/jq4ZPLWtchghCHB/Y8Po81T9Q=
Subject key identifier:   8A:D9:E3:CC:CC:72:FE:20:FF:7E:15:49:3E:82:D9:ED:9F:80:B5:CE
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       4EC8FD69A7CCCD9D9DB93DCD476C86473B9A3BCD
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32322d3234203d3e20323731383136.roa
Signing time:             Mon 08 Dec 2025 19:15:00 +0000
ROA not before:           Mon 08 Dec 2025 19:10:00 +0000
ROA not after:            Mon 07 Dec 2026 19:15:00 +0000
asID:                     271816
IP address blocks:        45.7.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 11:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c8:fd:69:a7:cc:cd:9d:9d:b9:3d:cd:47:6c:86:47:3b:9a:3b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Dec  8 19:10:00 2025 GMT
            Not After : Dec  7 19:15:00 2026 GMT
        Subject: CN=8AD9E3CCCC72FE20FF7E15493E82D9ED9F80B5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:91:e0:72:62:98:f8:8d:ad:46:76:ca:1c:
                    ba:1f:44:53:00:22:0e:d1:aa:60:09:25:0e:a2:5f:
                    9c:6e:eb:b6:79:7a:36:d9:b9:23:f4:7f:54:b2:67:
                    01:62:ba:ae:24:86:5e:76:a7:d1:09:08:57:03:b6:
                    a6:91:bb:ef:55:3b:d7:64:3d:25:00:48:41:54:01:
                    d4:8f:8c:69:bd:8f:8d:86:f9:57:05:d4:55:6b:b8:
                    b7:45:57:7c:0c:c3:e2:6c:0d:2e:b0:1d:0b:96:dd:
                    3e:3c:80:ed:81:7e:38:7f:70:01:5e:ff:14:a5:be:
                    1b:d9:89:26:5a:6f:b7:25:13:53:a9:f2:28:7e:78:
                    9f:87:5f:ea:a7:7a:84:f2:ca:9c:9e:c0:14:c6:f5:
                    b2:75:5f:0f:59:6f:e0:9f:d0:70:a0:dc:97:fd:b0:
                    7f:3b:4e:c1:5f:bd:75:fd:64:a4:2b:b1:4a:a7:c6:
                    85:9a:8e:77:d6:12:09:5d:da:54:a8:ba:2f:16:a7:
                    ac:00:53:32:39:3a:b8:24:cf:56:7d:f1:dd:0b:16:
                    1a:50:1e:97:f7:9b:b2:e9:d6:ea:d1:57:5a:9b:dd:
                    94:70:38:8b:d2:4a:b3:16:aa:60:d9:be:14:69:4a:
                    88:02:02:17:d9:c6:17:78:e4:19:fa:2a:de:44:45:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D9:E3:CC:CC:72:FE:20:FF:7E:15:49:3E:82:D9:ED:9F:80:B5:CE
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32322d3234203d3e20323731383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:24:14:45:3d:f9:a9:24:98:12:b7:02:16:24:aa:90:9d:
         9a:2f:cf:40:e6:cc:2d:06:6f:7c:b6:2a:3b:3d:2f:09:0b:ba:
         56:e3:e3:c4:a2:4f:e7:40:12:0f:16:bc:e6:e2:24:5d:55:bb:
         d7:b4:34:52:e2:fe:9a:9b:ff:0b:97:f7:3e:76:57:07:b4:e7:
         0e:54:0f:ad:9d:a3:3e:27:0e:c2:e7:e9:a4:9e:f8:22:e5:5b:
         d4:7e:16:93:24:85:28:f6:66:cd:25:81:48:f6:95:63:0d:3b:
         64:ae:a1:12:e4:68:67:8a:51:16:db:74:1d:1c:1a:81:cd:d3:
         96:05:a2:7c:ae:a9:08:61:70:b5:3c:22:be:f6:ee:81:38:04:
         8d:d8:dc:b5:db:ef:16:4e:34:b7:f0:0b:2d:8d:f7:86:c6:29:
         1c:d8:24:94:fc:64:29:2e:1d:35:c6:eb:6e:eb:79:5a:a3:7a:
         1e:c3:e9:19:4f:95:1e:6e:53:4e:23:52:f6:97:19:58:1e:23:
         11:3e:53:f5:35:96:25:7c:ff:d6:e9:b3:53:28:33:66:4d:f0:
         94:cc:ac:a3:b0:da:61:d4:80:d4:26:2d:e6:43:68:98:f8:a1:
         e6:53:b9:97:83:20:c8:a7:1c:64:33:70:70:ff:bb:ed:15:4c:
         b5:2e:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:01:57 2025 by rpki-client