This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234342e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3234342e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          Zf3vuK6otJJZKKEKHSUhAc/m6tHw8cwKyql+b/Ca8AM=
Subject key identifier:   99:07:B5:1E:BD:14:03:10:6E:57:C4:39:A5:84:90:ED:F7:74:DE:B2
Certificate issuer:       /CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Certificate serial:       503DC36F0C9358E9D7633D2547DE4353A733DA31
Authority key identifier: 40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234342e302f32342d3234203d3e203238343233.roa
Signing time:             Sun 28 Dec 2025 01:56:28 +0000
ROA not before:           Sun 28 Dec 2025 01:51:28 +0000
ROA not after:            Sun 27 Dec 2026 01:56:28 +0000
asID:                     28423
IP address blocks:        45.170.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 16:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3d:c3:6f:0c:93:58:e9:d7:63:3d:25:47:de:43:53:a7:33:da:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404AF48919442F94B61222A52CBC7E3F459B1B77
        Validity
            Not Before: Dec 28 01:51:28 2025 GMT
            Not After : Dec 27 01:56:28 2026 GMT
        Subject: CN=9907B51EBD1403106E57C439A58490EDF774DEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:53:19:27:78:c5:13:11:85:d9:a9:7e:ac:
                    d9:65:e3:6f:b8:42:69:5d:e5:d0:d5:29:15:b8:25:
                    2b:87:80:40:50:c0:40:ee:31:67:5c:17:b6:e1:8f:
                    f3:a4:a8:64:28:93:83:76:47:ec:ff:b2:5c:45:14:
                    e8:e9:54:e0:ca:c8:a3:b4:51:4e:e4:84:b0:48:88:
                    13:bc:9c:0f:6c:b8:2d:28:2f:22:27:fb:22:1e:5c:
                    5f:60:90:9c:0f:4e:54:c5:d1:7d:fb:9c:fa:bf:83:
                    97:1a:ec:b6:08:c9:00:b6:a9:3d:2d:46:ef:4b:8d:
                    7d:6b:22:d1:c1:52:30:7b:8f:15:ca:c2:f0:9c:ea:
                    af:56:af:b1:9a:0d:fc:e4:21:cc:fa:8f:7e:d4:65:
                    09:9d:3d:3b:07:bf:1f:b1:9f:9a:be:2e:2a:03:1a:
                    87:96:34:94:28:d6:e0:59:fa:03:4a:3f:3a:a1:63:
                    db:56:5e:8d:0f:e1:88:0d:a5:9d:22:1f:48:0b:43:
                    ef:30:73:2b:26:68:5e:02:5a:1b:84:9e:89:9d:ec:
                    19:29:4b:f9:79:d6:fa:af:42:f0:9a:2c:8a:80:1a:
                    a8:e6:08:3e:1d:e4:73:46:57:2c:1c:ce:7e:de:7b:
                    8b:85:55:36:ab:80:a6:c6:75:a2:1d:bf:66:3f:4b:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:B5:1E:BD:14:03:10:6E:57:C4:39:A5:84:90:ED:F7:74:DE:B2
            X509v3 Authority Key Identifier:
                keyid:40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234342e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:77:75:24:39:62:95:27:ce:d2:fd:29:5b:8d:e9:d7:ee:f8:
         c6:ac:21:c3:67:d8:47:de:05:aa:81:ec:c7:e7:7a:8f:82:ae:
         d6:da:d5:30:74:46:9c:1d:4a:81:1b:af:d5:af:0d:c7:5a:fe:
         27:fb:6e:57:f4:1e:09:cf:6f:62:4c:9d:79:2b:8c:41:98:45:
         98:1c:f3:7b:25:82:3a:77:54:53:58:83:98:b9:c8:ee:99:30:
         b0:cc:cc:15:39:33:08:50:86:a4:a1:2d:ac:c9:7c:cf:de:db:
         d5:05:e7:20:3e:10:a0:63:dd:82:14:ea:f7:4d:21:8d:16:dc:
         a1:cd:8d:9b:9f:bb:d8:c0:be:38:83:69:3e:c7:99:d1:09:d9:
         aa:d9:2c:81:45:eb:74:48:e2:08:86:89:33:4f:16:ba:96:95:
         60:a5:9a:d6:f8:56:01:89:fe:e2:2f:31:40:bc:c6:c3:e1:9b:
         2f:d1:7e:01:d2:1a:2b:3c:4a:3a:6f:ac:c5:98:ee:23:e2:63:
         0e:18:ef:93:72:71:b2:13:d4:91:27:ef:95:45:ef:bd:ce:4f:
         a5:6c:8b:c6:82:58:06:9a:da:87:fc:ce:ad:10:12:5d:ca:a4:
         11:f0:68:37:15:bc:af:9b:b2:93:d9:54:46:50:1c:42:97:12:
         84:5d:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 07:57:48 2026 by rpki-client