This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32322d3234203d3e20323639383935.roa
File:                     34352e3139312e3233322e302f32322d3234203d3e20323639383935.roa (raw, json)
Hash identifier:          anEjgBvWzu+E1NGUQjMGjSiWmoN6zmWpaQnsu+Kk1Ko=
Subject key identifier:   19:25:E4:13:BB:2C:C8:E5:4F:7A:9F:B4:C3:C3:1B:2E:2B:EA:DC:C3
Certificate issuer:       /CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
Certificate serial:       6E8F1632E59FBF2593F60550824CE1D8116DDD4F
Authority key identifier: 68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32322d3234203d3e20323639383935.roa
Signing time:             Mon 22 Dec 2025 23:45:00 +0000
ROA not before:           Mon 22 Dec 2025 23:40:00 +0000
ROA not after:            Mon 21 Dec 2026 23:45:00 +0000
asID:                     269895
IP address blocks:        45.191.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 01:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8f:16:32:e5:9f:bf:25:93:f6:05:50:82:4c:e1:d8:11:6d:dd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680773B2A8DBC05A0245D6CD9E175BD7B10995DB
        Validity
            Not Before: Dec 22 23:40:00 2025 GMT
            Not After : Dec 21 23:45:00 2026 GMT
        Subject: CN=1925E413BB2CC8E54F7A9FB4C3C31B2E2BEADCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:35:49:8c:3e:5a:e7:d3:15:5b:2d:d0:3e:29:
                    21:98:dc:eb:19:3b:36:b2:91:ec:ea:82:fd:cf:3f:
                    2f:0c:65:ba:ff:83:82:5d:5c:78:0a:ab:c9:8e:99:
                    a5:3e:95:bc:73:9c:83:d2:93:30:8e:b3:d5:b0:00:
                    0d:05:4a:e3:be:23:4b:a9:17:0d:41:84:40:0d:18:
                    8c:f6:7e:99:aa:50:2e:cf:a0:95:00:c6:68:0e:83:
                    66:39:cf:ce:44:06:64:86:97:99:c0:02:11:ab:51:
                    ea:1b:24:0b:d7:ee:81:e7:d0:b7:9e:3a:7f:26:f2:
                    69:a9:52:b0:73:09:f2:55:a8:5f:a9:a4:ec:6c:d0:
                    96:b7:14:d9:94:ea:3e:c8:55:b7:ca:ae:0b:f9:8d:
                    e1:d5:e2:96:42:3b:70:9a:7d:a9:9a:86:ee:41:3a:
                    dc:bb:ae:70:a1:da:94:64:9e:aa:fd:db:3f:85:b2:
                    fe:05:08:24:40:37:54:f9:2e:a7:ad:89:ca:a0:7a:
                    31:72:1a:6c:ca:29:aa:2e:ad:2b:01:fb:c0:f6:8e:
                    a3:62:29:3f:e9:3c:9b:2d:41:92:ec:d2:15:d0:39:
                    74:87:6a:f4:cb:8a:23:69:9b:4e:91:0e:89:ed:41:
                    c8:4e:fb:71:5f:42:e9:a2:3e:f5:c2:5b:2d:7f:5c:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:E4:13:BB:2C:C8:E5:4F:7A:9F:B4:C3:C3:1B:2E:2B:EA:DC:C3
            X509v3 Authority Key Identifier:
                keyid:68:07:73:B2:A8:DB:C0:5A:02:45:D6:CD:9E:17:5B:D7:B1:09:95:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/680773B2A8DBC05A0245D6CD9E175BD7B10995DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DABB7A66D5FB0753317C4DF292AAF290C337C3463BFB2AC9D6A7BD391A89BD4C/0/34352e3139312e3233322e302f32322d3234203d3e20323639383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:87:83:d6:e7:4e:74:0c:a1:f8:51:4d:8b:55:75:2b:da:90:
         f5:58:d4:0a:a0:f9:16:58:21:08:89:6f:12:b5:c9:5a:fa:f5:
         86:22:31:26:8c:82:e7:e9:18:94:8e:bc:70:ca:1a:69:6a:ca:
         70:33:e2:73:c5:79:be:4f:ec:6d:e7:87:7c:63:a5:c2:88:75:
         b8:18:fb:e2:9d:27:97:0d:f6:78:31:4e:92:62:1a:2f:f2:29:
         a9:ff:61:1e:af:c7:30:2c:5f:a9:0d:84:75:10:00:ac:6a:5b:
         60:75:4b:a2:d8:7d:6f:4c:4f:a5:e7:0d:59:0b:44:67:06:01:
         04:b1:e6:c7:e5:3e:c5:b6:96:11:62:fb:ca:48:01:bd:46:89:
         60:76:9c:53:b9:81:79:20:5d:00:71:49:6f:37:86:cf:de:96:
         37:75:c6:c5:80:51:2c:66:a9:b4:64:4c:88:8d:5e:0f:ab:da:
         22:23:bd:6c:35:27:22:6d:e4:74:72:49:8c:7c:da:34:d7:30:
         e7:cd:db:32:6d:a7:49:93:21:62:fe:ee:83:b6:4e:39:bb:aa:
         f3:5f:ff:c8:ea:48:85:64:14:92:66:c8:f8:e9:15:0c:bd:83:
         87:ec:b4:e8:6a:6b:98:67:45:1c:f1:36:cd:02:bb:33:d9:76:
         16:45:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:53:57 2025 by rpki-client