This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32322d3232203d3e20323639383935.roa
File:                     34352e3139312e3233322e302f32322d3232203d3e20323639383935.roa (raw, json)
Hash identifier:          7ELpPBzY0EJSkj1YzjWNHcAM1NHVcRDq5KPSmlvbdzg=
Subject key identifier:   0B:8F:3C:22:D1:FA:D9:D3:04:50:57:06:8D:4D:8C:08:2A:67:43:99
Certificate issuer:       /CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
Certificate serial:       6B66FDC0A7D987A202DD693B2C799C3E8FB7BF63
Authority key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32322d3232203d3e20323639383935.roa
Signing time:             Mon 22 Dec 2025 23:45:01 +0000
ROA not before:           Mon 22 Dec 2025 23:40:01 +0000
ROA not after:            Mon 21 Dec 2026 23:45:01 +0000
asID:                     269895
IP address blocks:        45.191.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 01:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:66:fd:c0:a7:d9:87:a2:02:dd:69:3b:2c:79:9c:3e:8f:b7:bf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
        Validity
            Not Before: Dec 22 23:40:01 2025 GMT
            Not After : Dec 21 23:45:01 2026 GMT
        Subject: CN=0B8F3C22D1FAD9D3045057068D4D8C082A674399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:39:63:ba:07:9c:61:c6:8c:19:00:cc:b4:
                    47:74:a6:d2:6f:af:3b:6a:2b:a3:c6:04:60:ce:2a:
                    d5:33:8b:dc:1a:b3:52:ec:d8:76:d5:c8:68:17:4a:
                    7b:16:c0:d9:eb:5c:df:f9:89:31:4e:19:92:36:c1:
                    54:7d:e6:76:ba:6e:e7:18:5c:ee:19:7c:9d:8f:64:
                    6b:60:b5:1e:eb:d1:4a:e9:95:f8:fb:fa:cb:5f:24:
                    0b:42:63:58:f5:ff:8c:fb:76:72:1f:21:02:2c:75:
                    ec:96:3c:e8:b2:54:8b:ac:d7:3b:68:dd:2a:45:98:
                    4d:12:6a:8f:37:fa:e7:5c:97:fe:ec:ad:c1:88:2b:
                    ea:6f:48:27:a6:ff:2a:d9:cb:84:8d:7b:31:35:1a:
                    12:89:dc:4a:2e:22:0a:bc:af:61:bb:74:90:69:e4:
                    39:65:1e:d7:aa:36:a9:2a:5d:9e:1c:60:4f:70:fa:
                    99:1a:59:3b:4f:bd:9a:93:30:8e:7a:1a:e0:bb:1c:
                    b6:96:63:7a:3b:34:9a:a6:e1:b2:0c:5c:24:f4:9a:
                    bd:ee:b3:96:ed:34:63:6a:d8:b2:b0:82:64:68:f1:
                    3f:a5:75:2c:66:9b:09:b8:4e:75:5b:da:f7:cc:93:
                    e5:e4:8d:e3:59:71:97:7d:a2:14:87:e7:54:43:a9:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8F:3C:22:D1:FA:D9:D3:04:50:57:06:8D:4D:8C:08:2A:67:43:99
            X509v3 Authority Key Identifier:
                keyid:68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32322d3232203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:08:3a:41:0e:d3:6b:72:f8:f5:82:f3:4b:6a:f6:f6:86:7a:
         a0:cf:bb:52:5b:62:64:b0:70:b6:e3:47:b8:b6:e0:ce:31:bc:
         59:79:bf:6f:c2:5a:c0:37:87:c9:74:09:b4:59:0a:77:2c:de:
         6b:81:54:a7:d5:51:99:54:a6:31:29:cc:25:28:33:4c:e7:22:
         3f:13:ae:12:24:bd:61:25:53:6c:d9:8b:84:60:94:ac:d5:f4:
         53:b8:4e:a3:6f:41:4c:64:e5:ff:88:9f:b3:2c:e3:3d:39:be:
         33:b5:59:e1:34:bb:22:00:f9:b4:1e:88:9b:52:35:c0:fe:e7:
         c2:9d:22:c0:b9:8f:00:00:01:86:e6:6e:ff:b0:81:6f:d3:02:
         d0:89:33:66:01:de:36:04:17:d0:bb:10:85:77:99:0f:58:a9:
         af:55:60:b8:0d:5f:33:b5:6d:a2:c0:2d:36:11:2d:16:21:c5:
         43:9c:a6:76:ad:33:6e:6d:fe:7c:99:c6:6a:b5:75:ab:9a:7a:
         6e:30:8a:f0:b8:64:c8:4a:40:64:e3:f8:ea:9d:ff:a7:32:f3:
         e3:08:d7:f4:27:ac:54:15:07:7b:12:94:9f:c9:c7:df:5d:32:
         e6:e7:e6:b9:f1:6d:ae:1a:2b:fc:b9:29:5f:4d:83:55:7d:c3:
         30:97:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:53:58 2025 by rpki-client