This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/3230302e33312e3232342e302f32302d3234203d3e203130393634.roa
File:                     3230302e33312e3232342e302f32302d3234203d3e203130393634.roa (raw, json)
Hash identifier:          Zv0METp4NFg9K7ztLL53sza1WRuySLWtAz0oMYqyF/8=
Subject key identifier:   CB:9E:51:E6:6D:CC:5E:0A:65:21:61:0A:9E:2C:66:B2:A3:2E:EA:7B
Certificate issuer:       /CN=1AE1F7F878280542E5E790B352C0AEC7268C8C90
Certificate serial:       2AFADBD755A352FAE439C2EC6B754CA89EA65D5B
Authority key identifier: 1A:E1:F7:F8:78:28:05:42:E5:E7:90:B3:52:C0:AE:C7:26:8C:8C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/3230302e33312e3232342e302f32302d3234203d3e203130393634.roa
Signing time:             Tue 06 Jan 2026 19:34:15 +0000
ROA not before:           Tue 06 Jan 2026 19:29:15 +0000
ROA not after:            Tue 05 Jan 2027 19:34:15 +0000
asID:                     10964
IP address blocks:        200.31.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 14:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fa:db:d7:55:a3:52:fa:e4:39:c2:ec:6b:75:4c:a8:9e:a6:5d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE1F7F878280542E5E790B352C0AEC7268C8C90
        Validity
            Not Before: Jan  6 19:29:15 2026 GMT
            Not After : Jan  5 19:34:15 2027 GMT
        Subject: CN=CB9E51E66DCC5E0A6521610A9E2C66B2A32EEA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:b1:6b:8f:22:c4:ab:8d:e2:e6:98:69:d8:
                    52:0a:0a:33:40:f7:12:2b:8b:e7:81:bb:16:ac:7d:
                    06:d8:7c:4f:c5:24:6b:60:00:2e:56:58:68:2d:19:
                    fa:81:0e:57:fa:b5:ee:ea:f4:71:54:41:aa:67:5b:
                    9b:88:e6:9e:ae:38:0b:f7:c7:27:0e:95:ac:07:4b:
                    3f:08:f6:39:9a:e7:39:d1:a1:1b:6c:64:cd:05:0f:
                    86:07:2e:f8:2f:a5:50:fd:dd:17:cf:c1:60:bc:ad:
                    fd:9a:9b:6c:8a:26:7f:46:da:9a:39:41:e5:2b:a7:
                    9b:7e:81:51:9e:ba:08:17:0c:85:6a:bb:a6:8d:29:
                    73:c9:b5:f5:d0:1c:60:bb:64:dc:36:50:43:80:11:
                    dd:d8:8e:f1:cd:65:99:b8:8d:40:9c:2c:9a:e6:25:
                    61:25:a4:bc:e6:e3:4e:7d:c6:c7:ff:cb:ee:48:c2:
                    a3:c0:63:53:cd:dd:3f:3d:5f:0f:b0:35:f4:fc:9d:
                    52:9a:03:cd:15:03:71:48:9f:39:c8:90:df:f4:50:
                    f8:03:c6:02:63:39:30:81:1e:75:76:c2:59:b9:69:
                    78:90:fb:20:90:ba:af:fc:63:e0:4d:26:93:ff:25:
                    b6:22:c2:fa:13:7a:74:10:fa:86:4f:52:06:f9:04:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9E:51:E6:6D:CC:5E:0A:65:21:61:0A:9E:2C:66:B2:A3:2E:EA:7B
            X509v3 Authority Key Identifier:
                keyid:1A:E1:F7:F8:78:28:05:42:E5:E7:90:B3:52:C0:AE:C7:26:8C:8C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE1F7F878280542E5E790B352C0AEC7268C8C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EE68DE4FA0B0EC990D535B5FEB05C39BB95E4719E1DFEBF7B268B79976B2CFE/0/3230302e33312e3232342e302f32302d3234203d3e203130393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:ae:f1:22:4f:c1:f8:84:c9:f0:4c:2e:c7:04:e3:e4:72:7e:
         13:35:ce:f9:72:c1:ac:e7:13:ee:f8:fc:49:d8:ed:df:45:75:
         aa:63:0b:8c:91:11:06:3d:2a:00:9f:5c:11:25:61:b3:ab:b1:
         f5:b1:b6:4d:8c:70:f5:bb:6c:2a:5e:3a:3c:cf:57:a2:3a:f8:
         fe:b4:a0:9a:96:fc:cf:0d:f5:7b:f4:4e:e4:16:21:b9:1c:47:
         af:33:66:a1:63:ac:1c:74:eb:ec:a9:6d:b4:d5:1e:95:3a:91:
         8c:52:cd:bf:ec:81:98:97:0f:1c:76:1d:16:12:83:17:c8:67:
         a8:2b:72:d2:7a:e3:eb:74:79:25:ca:38:4b:eb:d8:25:b9:93:
         37:1c:29:94:cc:d3:b5:00:56:3d:6a:4f:3d:c6:a0:7f:e3:07:
         c9:60:aa:24:e9:97:8d:17:dc:93:2f:d3:ed:0f:e3:dc:8b:c4:
         1e:ab:98:18:dc:bb:ab:0c:ea:c9:76:6e:2d:60:27:8f:f9:37:
         66:65:d2:25:d1:b9:a7:0f:2b:6e:ab:ab:16:80:31:90:00:5f:
         4e:98:34:04:f7:09:9b:60:41:5c:66:a8:3f:26:fc:08:a6:5b:
         73:ff:25:60:23:86:c2:3d:22:8c:ed:21:12:fc:23:96:dc:53:
         25:15:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:13:23 2026 by rpki-client