This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32302e302f32342d3234203d3e203238333939.roa
File:                     3230312e3133312e32302e302f32342d3234203d3e203238333939.roa (raw, json)
Hash identifier:          33N5Gg6r/r6nXlJazaoNw0JgRAa/KG7L65AvzI7We28=
Subject key identifier:   16:03:26:01:10:C3:A1:9C:72:02:43:BC:5B:F1:8C:2E:66:98:39:4E
Certificate issuer:       /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Certificate serial:       06A5B618AFD423B18503EC55D465F4B0947B3BB3
Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32302e302f32342d3234203d3e203238333939.roa
Signing time:             Fri 19 Dec 2025 04:55:22 +0000
ROA not before:           Fri 19 Dec 2025 04:50:22 +0000
ROA not after:            Fri 18 Dec 2026 04:55:22 +0000
asID:                     28399
IP address blocks:        201.131.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Jan 2026 12:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a5:b6:18:af:d4:23:b1:85:03:ec:55:d4:65:f4:b0:94:7b:3b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
        Validity
            Not Before: Dec 19 04:50:22 2025 GMT
            Not After : Dec 18 04:55:22 2026 GMT
        Subject: CN=1603260110C3A19C720243BC5BF18C2E6698394E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:67:88:e9:22:ad:36:90:96:09:4e:66:36:
                    e4:88:92:64:f5:7c:9d:2c:4a:67:54:3f:3b:7b:60:
                    a6:d1:ff:d2:06:35:9c:db:7b:b9:f3:23:9e:a7:37:
                    e4:72:90:68:c7:93:f9:97:3a:f3:33:ba:eb:a8:c6:
                    da:fb:ce:5e:38:72:ae:0a:75:10:44:13:44:22:7e:
                    12:3e:58:cd:c4:b4:2a:7a:11:0b:79:62:8e:ef:e2:
                    67:ab:14:79:66:3f:3a:af:8a:52:9f:61:b0:ec:a3:
                    ad:f7:3a:84:2c:8a:5c:b6:65:40:85:eb:02:95:bd:
                    db:7f:7f:a7:5d:46:84:cf:70:07:53:2b:18:81:36:
                    08:53:b5:40:88:32:f2:86:03:65:49:61:23:5e:ed:
                    97:45:95:2d:9c:ad:9d:9f:31:2e:1a:4c:8d:ec:2e:
                    b1:99:48:a8:6b:97:6a:48:a9:41:76:41:16:88:63:
                    c3:73:b1:e1:ad:1f:4d:9d:ae:cb:88:84:67:fa:3e:
                    b0:1c:db:59:b3:72:1f:b0:68:d1:1e:9d:e8:26:fc:
                    df:c0:5d:a0:82:21:f5:3d:a0:63:a7:07:97:a3:6f:
                    26:79:7b:0a:32:9b:61:c0:6c:02:0e:a2:ab:18:83:
                    21:79:e1:08:54:1b:7f:cf:0a:a2:c2:fe:a9:39:d1:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:03:26:01:10:C3:A1:9C:72:02:43:BC:5B:F1:8C:2E:66:98:39:4E
            X509v3 Authority Key Identifier:
                keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32302e302f32342d3234203d3e203238333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ed:51:a6:e9:54:ad:1e:fa:d1:39:95:4e:59:7b:a7:bb:a4:
         8d:48:d0:02:78:ab:11:ce:f2:7a:dc:24:7f:c1:a8:4d:34:15:
         72:b7:61:7c:1a:ee:31:65:7f:5a:16:dc:5d:7c:ed:38:ef:b4:
         d6:4f:99:8a:de:c4:d1:79:96:a7:df:b5:c3:04:b0:1d:f3:6e:
         f2:72:69:c9:3c:e7:5f:74:bd:88:b3:3f:38:99:72:c2:d6:2a:
         c4:f5:ca:00:05:5d:9e:94:69:02:e5:d1:e8:f9:67:40:9b:68:
         83:2b:37:2c:cc:0e:0a:1b:4f:80:34:93:09:cf:eb:de:cb:20:
         66:0e:59:5c:52:f2:5c:41:e1:4d:2c:2a:c6:a7:55:b0:1e:2c:
         23:38:d6:d4:fd:eb:52:59:60:6b:b5:34:ee:32:a8:94:1c:94:
         35:0f:31:a3:51:41:55:d5:14:85:f5:91:94:71:05:2f:f4:ca:
         9a:72:30:be:e0:63:9b:a7:38:a2:73:79:63:c8:14:27:c2:50:
         16:06:88:75:27:25:8f:77:41:2f:9b:a4:e0:33:78:64:76:fa:
         88:be:83:69:1d:2c:05:0d:67:f7:a6:24:98:47:70:86:8a:73:
         22:91:95:7a:16:81:2b:94:6b:46:6a:d8:ba:a9:b7:ee:68:e3:
         ce:80:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:33:06 2026 by rpki-client