This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135382e302f32342d3234203d3e20323732393936.roa
File:                     34352e37312e3135382e302f32342d3234203d3e20323732393936.roa (raw, json)
Hash identifier:          jsO/067JxzpKmoKwEqABDOCfGnPlSEQZoR1KReDaSaw=
Subject key identifier:   66:BA:7B:17:F0:D6:8B:1F:4C:E6:EB:71:66:F2:6E:82:F0:97:DE:E1
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       16D5D87F4279B8B1F0B1A96818B32DE5F25389F9
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135382e302f32342d3234203d3e20323732393936.roa
Signing time:             Wed 26 Nov 2025 19:30:00 +0000
ROA not before:           Wed 26 Nov 2025 19:25:00 +0000
ROA not after:            Wed 25 Nov 2026 19:30:00 +0000
asID:                     272996
IP address blocks:        45.71.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Dec 2025 12:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d5:d8:7f:42:79:b8:b1:f0:b1:a9:68:18:b3:2d:e5:f2:53:89:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Nov 26 19:25:00 2025 GMT
            Not After : Nov 25 19:30:00 2026 GMT
        Subject: CN=66BA7B17F0D68B1F4CE6EB7166F26E82F097DEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:ea:f5:c8:62:be:10:db:f9:82:0d:6f:6f:
                    92:21:20:2a:f4:a0:97:5a:40:f8:e4:90:b8:43:da:
                    95:fb:ba:26:03:f8:10:93:d7:4f:3a:2a:07:31:2b:
                    47:8b:21:fc:02:b8:86:6f:ff:f3:bf:81:0f:dc:3e:
                    ee:78:0a:34:e2:8b:44:34:2e:24:0f:97:17:cd:88:
                    79:ae:c6:5b:e4:7e:ac:0d:a2:9f:1b:be:2f:5e:bb:
                    bc:8f:70:97:ae:a4:65:3f:99:e4:e5:a6:e6:f9:02:
                    87:f7:1f:82:a0:bd:df:d5:d2:da:3b:99:e8:76:56:
                    7e:8f:7e:12:66:5e:e8:ef:13:18:c0:2f:39:22:d3:
                    60:29:d4:b7:f8:50:57:8a:45:58:8d:32:b3:bd:50:
                    b1:71:ac:27:f9:3b:be:d6:0b:c2:6d:96:61:2b:1f:
                    66:cf:97:4d:dd:46:29:1d:30:ee:59:8e:f1:08:aa:
                    dd:4e:60:e1:bf:d6:37:8b:5e:34:4b:82:a2:3a:62:
                    2c:27:17:6f:31:09:93:6d:54:f2:3d:7b:ce:75:7c:
                    6a:23:2e:36:d8:c5:f0:b9:d7:4d:99:25:3e:78:8a:
                    e6:e1:8a:05:ec:22:d2:b7:80:2a:91:10:fd:95:2d:
                    aa:24:36:85:37:65:06:bd:07:46:2b:51:82:2f:86:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:7B:17:F0:D6:8B:1F:4C:E6:EB:71:66:F2:6E:82:F0:97:DE:E1
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/34352e37312e3135382e302f32342d3234203d3e20323732393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:fd:7c:ec:10:33:e8:ff:30:e0:e6:34:5a:d5:1e:b3:84:
         92:09:8a:77:8c:2c:d0:ee:5a:6e:11:be:d8:b1:85:e7:35:84:
         4e:54:5d:cb:43:31:f6:fc:fb:ba:c9:0e:7f:32:dd:ba:99:38:
         83:a7:1d:e7:93:3c:08:0a:b0:f4:97:f5:74:1b:d0:11:de:e1:
         ad:95:3c:72:cc:ca:14:63:1e:14:d6:70:92:bb:ae:33:e5:17:
         93:cd:86:a5:dc:07:f1:65:ef:e8:9c:b2:56:65:cf:e7:63:cb:
         78:d4:b0:15:23:d3:f0:32:d5:b3:ad:51:0c:21:d4:4a:e5:21:
         31:f9:7b:a5:99:47:03:7a:45:6b:9d:5b:4b:d5:08:13:e3:1a:
         11:3a:30:59:a4:d5:b1:3f:a0:7a:a2:31:0e:90:eb:2e:d5:e0:
         79:18:7f:cb:3e:05:9a:5b:98:ed:32:bc:88:3c:f1:de:56:85:
         0c:04:2d:77:f3:a4:8e:e9:61:4f:3c:a4:59:5e:1d:af:ee:1a:
         87:50:e0:29:33:31:8a:26:f7:9a:12:ef:31:4e:a2:db:e4:72:
         e4:f0:b6:64:a2:dc:e6:9b:9d:74:76:6d:cb:fe:24:b5:52:bc:
         fa:c4:34:83:dd:6d:cd:17:08:da:b9:21:ec:db:87:86:f9:dd:
         57:c6:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 00:59:01 2025 by rpki-client