This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/34352e3233372e33362e302f32322d3234203d3e203631353130.roa
File:                     34352e3233372e33362e302f32322d3234203d3e203631353130.roa (raw, json)
Hash identifier:          BddJP8fUMsdkIrdO89qV0oRlY1xKIwj/RUPdlMBIbZs=
Subject key identifier:   AB:7E:3B:D1:FC:A0:23:D7:C2:21:83:CB:97:68:67:08:38:6C:5E:04
Certificate issuer:       /CN=F43A9A12F8E8BF00FA962B7630FC633E917262E5
Certificate serial:       69C99A67A3423CBC4BF5D184B7516EFA7AEEBA1B
Authority key identifier: F4:3A:9A:12:F8:E8:BF:00:FA:96:2B:76:30:FC:63:3E:91:72:62:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/34352e3233372e33362e302f32322d3234203d3e203631353130.roa
Signing time:             Fri 14 Nov 2025 15:45:00 +0000
ROA not before:           Fri 14 Nov 2025 15:40:00 +0000
ROA not after:            Fri 13 Nov 2026 15:45:00 +0000
asID:                     61510
IP address blocks:        45.237.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Nov 2025 01:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c9:9a:67:a3:42:3c:bc:4b:f5:d1:84:b7:51:6e:fa:7a:ee:ba:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F43A9A12F8E8BF00FA962B7630FC633E917262E5
        Validity
            Not Before: Nov 14 15:40:00 2025 GMT
            Not After : Nov 13 15:45:00 2026 GMT
        Subject: CN=AB7E3BD1FCA023D7C22183CB97686708386C5E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:13:df:fd:17:72:13:cf:8b:bb:4d:8f:0c:
                    14:9c:eb:dc:72:45:68:0e:18:25:69:c3:63:cd:c7:
                    60:dc:47:70:c7:0a:49:26:5a:75:7c:aa:88:39:2c:
                    b3:6c:4c:f8:1e:1b:fc:90:02:a7:88:fe:d5:c3:45:
                    54:5c:00:31:29:67:00:eb:1f:ef:37:48:3a:b9:2f:
                    74:a9:38:b0:0c:b2:24:cf:02:03:f2:f1:82:fd:48:
                    0b:05:51:9b:9f:c4:30:8a:c2:dd:ab:6b:21:cc:12:
                    1c:33:b6:2a:79:57:4a:d9:fb:a9:5b:7c:34:92:94:
                    c7:2f:74:69:10:09:2e:9e:fd:43:e5:7e:33:ad:b7:
                    93:09:bf:26:62:0f:9e:13:43:47:72:df:85:d7:5e:
                    db:aa:a8:19:14:3c:c7:d3:de:6c:48:92:68:de:b5:
                    3f:42:87:60:1d:bd:5b:51:2a:04:29:93:5f:fa:19:
                    d7:90:e6:86:b4:6a:9f:7d:36:42:5c:41:1b:9b:30:
                    b3:00:12:0c:2c:0f:46:53:70:75:1a:f6:6e:3f:7f:
                    5b:ba:06:b2:1e:e9:5b:21:2f:92:b2:e9:6a:20:82:
                    96:39:a3:8f:ea:e8:8b:d1:20:92:ce:47:6e:e2:49:
                    28:39:de:0c:33:0b:9a:ce:87:a8:1e:a0:0b:05:8a:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7E:3B:D1:FC:A0:23:D7:C2:21:83:CB:97:68:67:08:38:6C:5E:04
            X509v3 Authority Key Identifier:
                keyid:F4:3A:9A:12:F8:E8:BF:00:FA:96:2B:76:30:FC:63:3E:91:72:62:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/34352e3233372e33362e302f32322d3234203d3e203631353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:44:17:b6:14:a8:75:02:7a:ee:3b:1e:2f:68:87:a9:d1:d3:
         18:8c:69:c0:1a:15:ef:45:a8:11:4a:60:13:ae:fb:52:f7:1d:
         0f:bc:fb:4d:10:47:b8:84:21:6f:a2:33:be:7e:0f:99:32:83:
         fd:36:cd:0a:ca:92:9f:cf:51:24:ee:5f:6d:ae:d1:37:fe:5d:
         cd:d7:81:cb:c0:93:6c:3d:0b:ca:17:30:03:4d:9f:9a:00:84:
         ab:8b:64:10:61:8b:6e:7b:b8:6f:4c:cf:b7:11:8a:ed:4a:ea:
         30:fd:73:7f:c7:a1:7b:bf:3d:4c:d2:f9:3a:e4:a7:59:48:fe:
         3c:ee:23:66:68:ce:fb:70:07:97:72:db:09:53:03:2f:ef:17:
         ec:9e:a3:68:8e:fd:d1:11:a2:34:e9:6e:70:81:30:e9:1d:c5:
         8d:e4:97:40:33:60:ff:7a:45:9c:53:70:3d:09:21:5d:56:a3:
         ea:d7:0e:75:72:f6:55:9c:78:cf:40:f9:c7:b4:59:c4:f0:b6:
         d2:74:53:78:8f:79:50:15:9a:ae:a2:70:23:ae:18:51:84:cc:
         c7:b3:4f:86:78:54:16:da:02:a9:56:83:7f:3c:ff:73:19:d9:
         94:9a:76:67:f2:ce:f9:52:15:f4:31:93:41:67:3d:56:0e:66:
         a5:32:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 18:40:42 2025 by rpki-client