This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135362e302f32342d3234203d3e203232383630.roa
File:                     34352e3233342e3135362e302f32342d3234203d3e203232383630.roa (raw, json)
Hash identifier:          MuLA+d3yABed2hbt0fWnlIDsimJrHTF+/XR7U9UTT5E=
Subject key identifier:   50:7D:A2:64:C0:32:31:F9:29:2C:AE:BB:F1:01:0A:02:07:A0:44:07
Certificate issuer:       /CN=E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB
Certificate serial:       6501DF8F2EC321677B37D4EFC95F1D4B25639F1A
Authority key identifier: E8:84:A6:78:8F:56:7F:A5:F2:EF:3E:8C:0B:A4:B2:B5:E3:DF:37:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135362e302f32342d3234203d3e203232383630.roa
Signing time:             Wed 17 Dec 2025 21:55:12 +0000
ROA not before:           Wed 17 Dec 2025 21:50:12 +0000
ROA not after:            Wed 16 Dec 2026 21:55:12 +0000
asID:                     22860
IP address blocks:        45.234.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:df:8f:2e:c3:21:67:7b:37:d4:ef:c9:5f:1d:4b:25:63:9f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB
        Validity
            Not Before: Dec 17 21:50:12 2025 GMT
            Not After : Dec 16 21:55:12 2026 GMT
        Subject: CN=507DA264C03231F9292CAEBBF1010A0207A04407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:2f:07:01:20:59:34:ff:d4:2c:53:ff:1f:
                    9b:23:54:ea:6a:90:e3:24:7a:df:8c:c9:a4:8c:7a:
                    ad:8b:69:d9:91:45:da:7f:7f:63:7f:8e:c0:80:b5:
                    bd:bb:8a:bd:d9:a8:6d:e4:60:52:7b:8c:0d:d0:a7:
                    de:df:6e:e4:30:dd:a0:d7:0c:f4:85:9e:c4:ad:dd:
                    ea:8f:37:95:ae:00:81:c4:d0:c3:d8:6f:1b:1f:0f:
                    6a:84:a1:7c:b0:30:d4:ed:38:9c:f7:3e:5f:2b:f9:
                    05:49:48:02:2d:f5:b2:c6:fc:a9:d5:e0:ea:99:a4:
                    fe:66:c9:09:41:d7:d3:c7:ee:83:20:c5:8d:9b:c4:
                    69:ce:a8:e9:7a:3b:f6:fa:a9:28:48:5f:56:4e:79:
                    60:14:96:ef:24:8a:a3:c1:0d:a4:1c:19:af:9e:f5:
                    65:fe:b0:c2:3b:f3:0b:d4:7b:97:55:68:0f:a4:c6:
                    0e:77:c3:f2:07:8c:67:6e:84:6c:68:94:38:e7:f9:
                    45:b8:74:4a:63:a1:97:3e:9f:84:fb:9e:d8:aa:00:
                    b5:82:6c:fa:0c:49:4e:fa:87:bc:52:b2:22:76:d8:
                    a2:c3:be:8d:3e:d6:d0:47:af:37:f2:f3:aa:b0:f9:
                    f3:03:9d:a2:e0:f9:4a:f4:38:93:25:96:10:e5:bb:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7D:A2:64:C0:32:31:F9:29:2C:AE:BB:F1:01:0A:02:07:A0:44:07
            X509v3 Authority Key Identifier:
                keyid:E8:84:A6:78:8F:56:7F:A5:F2:EF:3E:8C:0B:A4:B2:B5:E3:DF:37:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135362e302f32342d3234203d3e203232383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:fd:a1:36:81:ab:9f:b5:cc:a0:ec:e1:d5:27:02:29:47:
         6c:e0:58:e1:15:87:55:8d:8c:d0:da:53:57:b0:de:ce:05:5f:
         db:3e:12:85:a1:a6:da:90:cd:11:95:c0:7d:5f:2c:d0:e9:13:
         ed:b2:54:64:0e:b8:c6:97:b2:6e:4d:2a:67:94:32:57:b7:61:
         c5:50:0c:0b:79:76:bb:cb:7e:fd:85:46:09:b9:dc:3d:fe:4d:
         be:46:cb:99:07:8f:d5:76:33:fa:51:81:c7:5a:89:a0:8d:df:
         a5:04:87:a1:47:85:46:c5:24:46:28:47:13:4d:1f:17:df:f0:
         00:f1:7d:66:30:0e:8e:c8:e1:26:9d:e4:48:44:50:ae:c8:d3:
         dc:57:b6:bf:1b:52:42:b1:01:06:34:a3:f0:4a:fb:df:e8:eb:
         e3:77:07:2d:7d:4e:f2:14:10:ca:f7:eb:02:2c:85:91:19:76:
         28:1b:b8:48:6c:f4:76:59:be:7c:2b:f1:64:97:0a:87:45:bc:
         90:f1:66:30:89:88:e6:90:2b:48:16:b0:aa:e6:a6:25:4e:18:
         5f:5e:6d:59:49:e9:97:e7:a8:41:4e:45:5c:a1:de:c5:98:cc:
         dc:06:83:c0:42:b5:e5:c8:65:02:9b:59:68:ec:d1:4d:fa:1b:
         07:a0:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:20:23 2025 by rpki-client