This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
File:                     34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa (raw, json)
Hash identifier:          M70lV50DtRT19nc4JBkTgi/rKkppDZHYho3OVLgE+7Y=
Subject key identifier:   34:CE:AA:AD:4A:2A:97:B1:F9:98:37:F1:04:17:AB:1E:14:A7:1A:A9
Certificate issuer:       /CN=B4FABCBFF83288B64BE540323B458825C54A4663
Certificate serial:       69ED2081B54F904DB1C391ECC11580631A84B7FA
Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
Signing time:             Mon 08 Dec 2025 05:54:17 +0000
ROA not before:           Mon 08 Dec 2025 05:49:17 +0000
ROA not after:            Mon 07 Dec 2026 05:54:17 +0000
asID:                     273879
IP address blocks:        45.162.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Dec 2025 21:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ed:20:81:b5:4f:90:4d:b1:c3:91:ec:c1:15:80:63:1a:84:b7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663
        Validity
            Not Before: Dec  8 05:49:17 2025 GMT
            Not After : Dec  7 05:54:17 2026 GMT
        Subject: CN=34CEAAAD4A2A97B1F99837F10417AB1E14A71AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:a2:35:22:84:d0:f6:e9:e7:7b:ab:d6:ad:
                    25:3c:ea:91:b3:15:88:24:41:ab:44:69:d1:9f:b7:
                    b2:3f:ec:01:8b:56:03:d1:d2:40:da:02:c6:d5:74:
                    f7:c4:ac:0c:20:02:87:2e:bb:3f:0e:34:2c:0c:f3:
                    06:49:18:7f:15:94:e4:7b:d4:53:f1:db:40:b5:aa:
                    d0:d2:79:e6:d9:d3:18:8f:6f:7d:73:e0:b6:4b:d8:
                    71:55:c0:fe:a3:cd:35:7b:0b:09:65:ec:30:ed:dc:
                    07:41:c5:5b:a5:12:fd:b0:fb:91:30:3e:7d:fa:90:
                    7b:ea:f8:cf:b6:67:3a:8f:a0:ef:76:02:58:1d:cd:
                    24:ff:4c:15:a0:12:e2:9e:a5:61:4a:f2:0e:9d:44:
                    45:17:93:0c:20:6a:99:b7:d4:b7:b0:f2:10:7e:17:
                    19:ee:df:c1:86:10:21:7a:28:af:2a:7e:6c:fc:14:
                    52:37:29:e1:c9:c7:5d:2b:01:98:43:c9:21:69:62:
                    82:42:3d:33:a6:7e:36:32:d5:0a:e6:09:72:9f:95:
                    a6:0c:af:33:ee:9d:05:c3:cc:66:8b:68:2e:a9:c6:
                    6e:71:ee:8b:22:6a:f9:40:15:b7:e5:8f:bc:23:1a:
                    57:18:5b:c0:f2:ba:0b:4d:77:0d:71:b9:5b:0c:eb:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:AA:AD:4A:2A:97:B1:F9:98:37:F1:04:17:AB:1E:14:A7:1A:A9
            X509v3 Authority Key Identifier:
                keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:33:d1:2c:99:b3:e5:4c:ba:77:9e:9a:40:cb:fd:ee:69:0e:
         76:bd:7d:29:fc:44:9d:7c:7d:e5:be:2a:f8:b5:7d:bc:3d:fe:
         e9:85:07:3a:27:4a:80:83:bd:f1:a2:61:46:4a:67:08:5b:82:
         7b:f8:64:5b:8f:6a:25:f5:e0:b5:ec:12:ff:dc:eb:ff:44:74:
         02:0b:2c:ca:6e:1f:c1:f1:7a:cc:de:d5:a8:fa:70:bd:06:c7:
         6b:cc:ab:e2:0e:a8:5b:5f:19:91:35:bb:e7:e3:6b:7b:e6:b1:
         b4:1b:1f:b8:83:32:f5:29:3e:92:58:6e:4f:80:b1:4e:28:5b:
         46:5f:d0:47:7e:16:8c:fe:04:80:c0:0a:61:1c:a9:69:7c:e6:
         a7:09:43:6f:3c:84:8f:9b:26:81:24:00:9e:09:2b:65:53:fb:
         7b:0e:f6:a8:23:f4:7b:51:b6:df:1a:10:17:01:94:01:dc:3e:
         41:7d:51:0a:c1:d0:55:95:49:47:4f:1b:bd:4b:75:c7:bb:27:
         d6:60:d1:f8:fc:63:70:71:0d:57:36:82:ff:b3:59:35:98:d4:
         d4:39:50:d6:8f:e4:e2:a4:3e:7a:53:ad:3c:e5:ca:fb:8a:c2:
         3d:7e:2b:6d:c0:ca:5d:61:9b:15:61:0d:26:4e:76:d8:90:0c:
         b4:b4:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 02:15:05 2025 by rpki-client