This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa
File:                     3230312e3133312e332e302f32342d3234203d3e203234393430.roa (raw, json)
Hash identifier:          V+PtEVFk+9qeKRvG4MO7Kie66KOy7azgfMOEdLwwC4k=
Subject key identifier:   82:79:E2:52:6D:12:58:96:BD:C8:9C:43:E4:C3:B5:2D:67:04:B9:AD
Certificate issuer:       /CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811
Certificate serial:       4AFD7F45A931494B0744486240EBD0C80E7C9B72
Authority key identifier: AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa
Signing time:             Tue 06 Jan 2026 19:19:15 +0000
ROA not before:           Tue 06 Jan 2026 19:14:15 +0000
ROA not after:            Tue 05 Jan 2027 19:19:15 +0000
asID:                     24940
IP address blocks:        201.131.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 07:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:7f:45:a9:31:49:4b:07:44:48:62:40:eb:d0:c8:0e:7c:9b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA235F8E2EFBF10D89E96447F61BBA90CF14811
        Validity
            Not Before: Jan  6 19:14:15 2026 GMT
            Not After : Jan  5 19:19:15 2027 GMT
        Subject: CN=8279E2526D125896BDC89C43E4C3B52D6704B9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:67:f4:48:4a:0b:f5:0c:a9:8d:2f:19:6f:
                    19:a6:0f:ba:e9:16:1b:a7:a6:2d:a5:e3:d2:fe:a0:
                    96:53:41:2d:1f:14:10:40:e4:9d:97:58:95:8b:6a:
                    4c:cc:3c:91:15:9b:b3:ed:e3:7c:25:47:11:8a:41:
                    47:59:c1:83:5f:6e:a5:7b:6f:5f:4f:97:da:ff:dd:
                    5e:4a:3d:71:ff:40:1d:f6:e7:d0:43:3c:bf:34:08:
                    bc:7d:ff:a6:3f:f2:b5:8d:53:f6:32:8f:24:f1:c7:
                    91:91:5c:0a:1d:12:ba:a5:e7:a6:c0:10:25:03:36:
                    00:56:71:cb:ef:eb:3a:e3:9b:e0:07:f6:ec:da:c1:
                    24:d9:1b:df:0f:1d:da:74:9a:80:eb:6d:45:28:c4:
                    76:3d:ec:14:b4:8b:a9:10:a4:0e:fb:e4:cd:ad:f5:
                    b5:03:97:d8:97:93:4d:9a:37:b7:97:c6:00:dd:44:
                    dd:dd:02:33:09:86:23:59:17:50:d9:a9:6c:e1:59:
                    df:b0:83:4e:cb:6e:ae:5e:04:ec:19:24:58:6f:7c:
                    4f:3c:93:1b:75:ad:60:ab:c6:32:28:bd:a0:e2:24:
                    8d:f4:61:06:d1:a7:e9:18:b0:57:0f:8d:6b:66:ad:
                    ff:68:af:00:ec:2a:6d:b5:af:84:7a:97:aa:0a:af:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:79:E2:52:6D:12:58:96:BD:C8:9C:43:E4:C3:B5:2D:67:04:B9:AD
            X509v3 Authority Key Identifier:
                keyid:AB:A2:35:F8:E2:EF:BF:10:D8:9E:96:44:7F:61:BB:A9:0C:F1:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABA235F8E2EFBF10D89E96447F61BBA90CF14811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBA0FABD52A9F8DA866D7E03EC69D070DD9A56E65B7CB39EE517D6571765D4CC/0/3230312e3133312e332e302f32342d3234203d3e203234393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:eb:85:08:ea:60:4a:91:b5:eb:37:fe:5e:be:26:54:e9:19:
         7a:27:ea:6d:c1:fa:9c:e8:55:18:bd:be:f3:a0:92:0a:c2:aa:
         e8:a2:d9:81:d0:b1:05:5a:b5:c9:ea:c3:41:63:51:cd:7f:a1:
         09:87:8e:50:ac:92:ef:05:47:5b:a2:32:fa:f0:4f:a5:5f:1e:
         9f:f0:b9:c1:ee:2f:14:70:54:1f:4c:1d:f2:d3:a6:72:0d:b4:
         93:9f:9e:4d:8f:b7:e8:b4:68:92:32:3d:48:b6:eb:79:22:71:
         81:2f:6c:c3:24:53:14:b8:5a:7c:92:e5:3a:83:b5:c8:f8:c2:
         c4:77:38:a7:88:ab:3f:11:50:f6:36:0d:85:a2:35:f2:09:66:
         dc:c7:e6:8a:e9:03:9d:df:59:b9:9b:bf:09:21:5b:da:57:cc:
         d8:a8:66:22:da:7a:99:af:7b:b9:4a:84:37:c3:a1:03:5c:c3:
         bf:dc:65:ef:08:2e:f9:ad:6b:5c:43:a4:bd:b9:52:a4:34:10:
         ad:82:1a:14:5e:2c:aa:2b:ce:1a:f7:a2:af:fd:32:70:df:3b:
         7f:c1:08:4e:8a:0f:50:2c:df:17:ff:66:4a:42:db:da:96:bb:
         3f:02:a7:99:6d:b3:24:bb:f7:03:a5:5f:3c:bb:63:41:83:8c:
         ae:c2:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:08:25 2026 by rpki-client