This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C5AE1B24242544C7B13AFEDD0EE3F4FF14C4465A742E9327AF38B82C1BA6E6C/0/34352e3136382e3231322e302f32322d3232203d3e20323637373633.roa
File:                     34352e3136382e3231322e302f32322d3232203d3e20323637373633.roa (raw, json)
Hash identifier:          ciGngzvj9UAQAsJEP986bwv8N+alU9RaIXRo01Vf15Q=
Subject key identifier:   7B:AF:A3:26:7E:26:D8:B9:9E:AC:89:BD:05:DF:94:50:B7:C9:0F:D8
Certificate issuer:       /CN=0D4946FD5F5B64301FF9FEE0647C1E1129C71725
Certificate serial:       15B3FC8A73DD5CEC6B4C3E7360B02A473E0510BD
Authority key identifier: 0D:49:46:FD:5F:5B:64:30:1F:F9:FE:E0:64:7C:1E:11:29:C7:17:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D4946FD5F5B64301FF9FEE0647C1E1129C71725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C5AE1B24242544C7B13AFEDD0EE3F4FF14C4465A742E9327AF38B82C1BA6E6C/0/34352e3136382e3231322e302f32322d3232203d3e20323637373633.roa
Signing time:             Wed 10 Dec 2025 21:50:00 +0000
ROA not before:           Wed 10 Dec 2025 21:45:00 +0000
ROA not after:            Wed 09 Dec 2026 21:50:00 +0000
asID:                     267763
IP address blocks:        45.168.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C5AE1B24242544C7B13AFEDD0EE3F4FF14C4465A742E9327AF38B82C1BA6E6C/0/0D4946FD5F5B64301FF9FEE0647C1E1129C71725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C5AE1B24242544C7B13AFEDD0EE3F4FF14C4465A742E9327AF38B82C1BA6E6C/0/0D4946FD5F5B64301FF9FEE0647C1E1129C71725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D4946FD5F5B64301FF9FEE0647C1E1129C71725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b3:fc:8a:73:dd:5c:ec:6b:4c:3e:73:60:b0:2a:47:3e:05:10:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D4946FD5F5B64301FF9FEE0647C1E1129C71725
        Validity
            Not Before: Dec 10 21:45:00 2025 GMT
            Not After : Dec  9 21:50:00 2026 GMT
        Subject: CN=7BAFA3267E26D8B99EAC89BD05DF9450B7C90FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:f6:49:b1:ee:d7:7e:17:15:da:bd:bd:c0:
                    ba:a2:b7:6c:72:05:7b:39:42:71:cf:96:65:36:78:
                    2e:bf:34:89:96:6d:18:ea:73:d0:98:f2:52:2b:d4:
                    99:bc:e2:c9:4b:73:b9:1e:55:41:4e:70:72:32:86:
                    38:b7:8a:b8:9a:f0:91:e6:24:a6:3e:0d:5f:a2:e6:
                    a4:54:14:87:e8:9f:8f:7b:75:80:04:6e:ec:e7:45:
                    51:3f:c1:ac:45:53:f0:5b:96:18:cb:ef:e1:25:b3:
                    2a:a2:0e:b8:72:8b:81:97:44:4a:b4:0f:aa:55:47:
                    4a:78:d4:66:f7:5d:0d:9b:16:66:18:7a:62:d6:85:
                    df:98:cf:cb:20:7b:3e:8c:a1:0e:42:1a:3f:40:c6:
                    8c:8b:25:89:64:da:79:eb:7d:fe:54:56:46:6f:2a:
                    48:28:bd:70:9d:24:89:8f:9c:6b:66:22:b8:67:fc:
                    00:c4:18:68:26:4c:83:e6:fa:d9:8f:e2:b2:19:6b:
                    4f:bb:7c:85:9c:48:b3:3c:9a:06:36:4d:a1:09:70:
                    d5:e6:bb:3c:d6:66:2e:a8:61:a9:3f:74:2e:eb:1e:
                    51:a6:3e:72:52:dd:c4:90:6f:d3:55:3e:2d:58:1d:
                    f7:73:f7:de:e2:24:32:1e:db:47:d1:50:32:18:15:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AF:A3:26:7E:26:D8:B9:9E:AC:89:BD:05:DF:94:50:B7:C9:0F:D8
            X509v3 Authority Key Identifier:
                keyid:0D:49:46:FD:5F:5B:64:30:1F:F9:FE:E0:64:7C:1E:11:29:C7:17:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C5AE1B24242544C7B13AFEDD0EE3F4FF14C4465A742E9327AF38B82C1BA6E6C/0/0D4946FD5F5B64301FF9FEE0647C1E1129C71725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D4946FD5F5B64301FF9FEE0647C1E1129C71725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C5AE1B24242544C7B13AFEDD0EE3F4FF14C4465A742E9327AF38B82C1BA6E6C/0/34352e3136382e3231322e302f32322d3232203d3e20323637373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:26:13:be:6b:d0:e5:1f:8e:ec:b1:f8:14:40:1d:bf:07:57:
         83:26:c5:b9:5e:4a:7d:1f:02:de:f2:88:fe:9e:7b:3e:c8:2c:
         8c:a2:3a:45:bb:f2:4b:c6:96:68:a8:1a:29:2d:7b:d2:71:71:
         bf:27:3a:1f:c3:ef:e9:15:2f:20:89:98:f2:d5:91:7e:0b:3b:
         9a:17:ee:be:bb:dd:ac:2e:3a:6d:72:64:dc:2c:0e:65:fe:74:
         83:87:66:c9:b1:3c:88:7a:cf:41:e1:30:3c:5b:ad:c3:37:bf:
         b0:f8:52:0e:ea:cd:b9:4b:5b:e1:7e:7a:cc:89:a8:ec:15:0b:
         5f:56:14:88:d8:89:80:eb:40:0b:1e:4f:d0:49:dc:2c:d7:7c:
         ed:c3:89:2e:44:fe:2f:25:35:94:33:79:ee:a0:ed:c6:a0:9c:
         4e:de:fa:4a:81:42:9d:52:d8:4e:c5:9e:ff:60:1e:ac:41:34:
         dd:04:f2:db:47:fb:01:24:cb:de:b7:50:f4:f7:4b:63:45:25:
         06:0e:af:95:66:40:27:9a:95:b1:af:05:8f:be:b7:1f:6b:2f:
         32:2a:a5:bb:56:c2:8a:f5:e9:bd:a6:00:e3:73:5c:23:76:c3:
         c6:f5:54:e1:8a:a1:69:56:56:59:70:03:78:e6:5c:ae:38:d5:
         6d:4d:8f:3f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFbP8inPdXOxrTD5zYLAqRz4FEL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0OTQ2RkQ1RjVCNjQzMDFGRjlGRUUwNjQ3QzFFMTEy
OUM3MTcyNTAeFw0yNTEyMTAyMTQ1MDBaFw0yNjEyMDkyMTUwMDBaMDMxMTAvBgNV
BAMTKDdCQUZBMzI2N0UyNkQ4Qjk5RUFDODlCRDA1REY5NDUwQjdDOTBGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSvZJse7XfhcV2r29wLqit2xy
BXs5QnHPlmU2eC6/NImWbRjqc9CY8lIr1Jm84slLc7keVUFOcHIyhji3iria8JHm
JKY+DV+i5qRUFIfon497dYAEbuznRVE/waxFU/BblhjL7+ElsyqiDrhyi4GXREq0
D6pVR0p41Gb3XQ2bFmYYemLWhd+Yz8sgez6MoQ5CGj9AxoyLJYlk2nnrff5UVkZv
KkgovXCdJImPnGtmIrhn/ADEGGgmTIPm+tmP4rIZa0+7fIWcSLM8mgY2TaEJcNXm
uzzWZi6oYak/dC7rHlGmPnJS3cSQb9NVPi1YHfdz997iJDIe20fRUDIYFSszAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUe6+jJn4m2LmerIm9Bd+UULfJD9gwHwYDVR0j
BBgwFoAUDUlG/V9bZDAf+f7gZHweESnHFyUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQzVBRTFCMjQyNDI1NDRDN0IxM0FGRUREMEVFM0Y0RkYx
NEM0NDY1QTc0MkU5MzI3QUYzOEI4MkMxQkE2RTZDLzAvMEQ0OTQ2RkQ1RjVCNjQz
MDFGRjlGRUUwNjQ3QzFFMTEyOUM3MTcyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDQ5NDZGRDVGNUI2NDMwMUZG
OUZFRTA2NDdDMUUxMTI5QzcxNzI1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEM1QUUxQjI0MjQyNTQ0QzdCMTNBRkVERDBFRTNGNEZGMTRDNDQ2NUE3
NDJFOTMyN0FGMzhCODJDMUJBNkU2Qy8wLzM0MzUyZTMxMzYzODJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3MzczNjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLajU
MA0GCSqGSIb3DQEBCwUAA4IBAQAxJhO+a9DlH47ssfgUQB2/B1eDJsW5Xkp9HwLe
8oj+nns+yCyMojpFu/JLxpZoqBopLXvScXG/Jzofw+/pFS8giZjy1ZF+CzuaF+6+
u92sLjptcmTcLA5l/nSDh2bJsTyIes9B4TA8W63DN7+w+FIO6s25S1vhfnrMiajs
FQtfVhSI2ImA60ALHk/QSdws13ztw4kuRP4vJTWUM3nuoO3GoJxO3vpKgUKdUthO
xZ7/YB6sQTTdBPLbR/sBJMvet1D090tjRSUGDq+VZkAnmpWxrwWPvrcfay8yKqW7
VsKK9em9pgDjc1wjdsPG9VThiqFpVlZZcAN45lyuONVtTY8/
-----END CERTIFICATE-----
Generated at Wed Dec 17 07:37:30 2025 by rpki-client