This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32332e302f32342d3234203d3e203238333939.roa
File:                     3230312e3133312e32332e302f32342d3234203d3e203238333939.roa (raw, json)
Hash identifier:          5A5/pCSlyK2GZa0JvBcEyPF/dhY2nG7EI0tV7ILvrk8=
Subject key identifier:   AF:6D:A5:8E:67:20:8F:3B:A4:5D:9F:04:90:9E:56:10:39:65:F1:11
Certificate issuer:       /CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
Certificate serial:       079107E1610E0F03FD1B046BF65BA36A6C75BE5E
Authority key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32332e302f32342d3234203d3e203238333939.roa
Signing time:             Fri 19 Dec 2025 04:55:21 +0000
ROA not before:           Fri 19 Dec 2025 04:50:21 +0000
ROA not after:            Fri 18 Dec 2026 04:55:21 +0000
asID:                     28399
IP address blocks:        201.131.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Jan 2026 12:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:91:07:e1:61:0e:0f:03:fd:1b:04:6b:f6:5b:a3:6a:6c:75:be:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC
        Validity
            Not Before: Dec 19 04:50:21 2025 GMT
            Not After : Dec 18 04:55:21 2026 GMT
        Subject: CN=AF6DA58E67208F3BA45D9F04909E56103965F111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:d3:ab:56:9a:c9:72:28:cf:c0:40:2a:db:
                    4c:ee:1b:f5:74:92:89:53:7a:10:28:9e:d2:23:b5:
                    88:db:38:8f:d8:d5:cf:8f:8d:85:8d:72:07:1b:38:
                    d6:6f:80:34:e1:7c:c3:f2:87:7b:5a:96:3a:09:16:
                    8a:3a:39:fa:2a:b1:10:32:6d:06:a4:30:9b:05:9b:
                    cc:71:fc:85:f0:71:05:71:8a:e4:5a:9a:4b:c1:87:
                    1e:41:35:60:04:fb:7b:48:4d:4b:3d:4c:98:bb:2e:
                    c4:8d:2c:cb:96:59:00:68:c2:c8:3a:3a:1f:a0:34:
                    a2:ed:1e:cb:0a:66:68:84:ba:9c:96:ee:31:2d:1e:
                    98:5a:57:e7:db:35:bd:35:39:48:51:11:e8:ff:40:
                    05:71:b1:02:88:0a:67:74:4e:92:f2:71:97:d3:6f:
                    af:95:90:98:a1:b7:85:65:bc:a4:5d:ce:bb:ef:4b:
                    3e:14:c2:fa:a6:eb:6a:51:18:20:8f:cb:1e:92:c9:
                    d8:a6:b7:61:fd:83:81:40:80:82:12:a6:cd:3e:e6:
                    94:25:91:be:6f:ef:e4:cf:f8:14:53:25:37:b7:4b:
                    58:b0:dd:b5:5e:a5:ce:5d:fd:8a:11:10:b7:dc:1a:
                    31:88:c6:e2:51:a1:57:6b:a1:fd:ce:81:30:f8:27:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:A5:8E:67:20:8F:3B:A4:5D:9F:04:90:9E:56:10:39:65:F1:11
            X509v3 Authority Key Identifier:
                keyid:83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/3230312e3133312e32332e302f32342d3234203d3e203238333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:6e:2c:c8:ab:17:07:37:3c:f9:1a:2b:80:e7:37:59:33:
         96:17:04:a0:92:ff:c7:89:2c:ab:b5:90:97:21:60:3c:0e:3b:
         0a:96:b2:4a:1d:73:0d:09:8a:6d:da:7d:a0:a5:84:5e:ed:5d:
         ae:2f:b9:c9:02:9b:92:30:be:e5:d4:a8:c0:75:34:7a:55:2b:
         ed:cf:aa:b8:ee:84:be:dc:63:5d:ff:fb:72:b9:22:da:8b:15:
         95:e8:81:f0:96:09:d3:5a:26:7e:f8:d3:b5:9b:50:75:d3:bd:
         ec:a2:16:7d:6a:6c:88:fb:21:b5:3c:35:17:83:33:d7:36:7a:
         dc:21:03:48:eb:50:72:c9:6e:9e:a0:47:b4:ec:e0:4d:74:e4:
         49:63:4d:a9:ab:ac:7b:73:d8:de:95:51:68:46:57:c4:c3:e9:
         51:fb:d7:38:5d:c3:f5:fe:65:44:90:67:8b:c3:f6:a6:15:26:
         e0:68:30:20:78:9d:d2:b0:23:c1:e9:ee:5e:4e:37:ef:2b:d9:
         69:f9:e5:97:eb:e1:ac:03:73:73:e3:f7:21:bf:62:10:4d:35:
         1f:d8:da:f3:a6:cd:33:0a:29:fb:9e:9e:e3:a2:0b:d1:0e:50:
         92:fb:25:f5:e5:83:4b:66:04:2f:73:a0:4a:19:9e:c5:dd:66:
         0b:17:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 08:20:27 2026 by rpki-client