This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
File:                     3230302e33312e3234302e302f32302d3234203d3e203532343139.roa (raw, json)
Hash identifier:          jXdKpKpA4VVqVKy9CzMtyV7yz4vaud6xY0rkj7g/MrY=
Subject key identifier:   08:34:69:D9:0B:FD:BD:FD:53:C8:D4:67:E8:6B:0E:2D:67:80:1B:9D
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       08D65EE61A6C9B75246A198225FDCA41253014B9
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa
Signing time:             Tue 06 Jan 2026 19:18:19 +0000
ROA not before:           Tue 06 Jan 2026 19:13:19 +0000
ROA not after:            Tue 05 Jan 2027 19:18:19 +0000
asID:                     52419
IP address blocks:        200.31.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 05:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d6:5e:e6:1a:6c:9b:75:24:6a:19:82:25:fd:ca:41:25:30:14:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Jan  6 19:13:19 2026 GMT
            Not After : Jan  5 19:18:19 2027 GMT
        Subject: CN=083469D90BFDBDFD53C8D467E86B0E2D67801B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:5d:1b:2b:a8:be:96:e1:29:bc:9d:7e:87:
                    0c:c3:ac:30:9e:ab:c2:fb:be:6d:3a:a7:a2:ea:17:
                    cc:80:b7:3a:d4:af:31:bc:52:40:48:0c:f8:d2:92:
                    ae:8a:af:7a:f0:9b:54:17:e9:60:cd:f5:52:43:7e:
                    44:98:21:6a:9e:a3:6a:19:3d:8f:01:36:2f:f0:c3:
                    61:43:83:1d:c9:0d:87:b0:cc:f2:fa:8a:c8:69:99:
                    bb:7d:ad:65:56:e6:33:3a:19:7e:64:61:d6:3a:cc:
                    e5:05:c1:54:aa:e1:56:12:1d:fb:89:a2:29:cd:ff:
                    1f:e0:c3:f5:26:67:de:fd:ed:65:85:87:da:b3:6a:
                    c3:c8:1d:6c:5b:9c:20:87:6c:06:6d:93:61:d4:1e:
                    32:9c:2f:55:e8:27:52:e5:b2:99:a5:51:eb:67:76:
                    4f:15:0f:d7:96:a8:da:c9:54:31:d1:02:64:98:a7:
                    78:f8:7e:4e:15:84:15:f3:44:f6:da:2d:66:d3:78:
                    92:75:e6:f1:27:fb:93:e3:75:7b:9b:f7:75:2e:cf:
                    0a:ad:0d:09:3d:01:38:8b:43:fb:55:03:88:45:fb:
                    da:1f:c9:01:4b:5e:8b:2d:a2:8d:ab:b8:5f:4c:71:
                    ec:2e:2b:3d:8d:f4:49:02:a8:a5:56:70:61:7e:ff:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:69:D9:0B:FD:BD:FD:53:C8:D4:67:E8:6B:0E:2D:67:80:1B:9D
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3230302e33312e3234302e302f32302d3234203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:8e:7f:d2:fe:fc:d0:d5:ad:29:73:4d:8d:4e:e9:2f:a3:3a:
         29:b7:59:cf:06:e1:8a:da:9c:1c:85:73:d9:44:6b:7a:ff:1a:
         c7:a3:2b:a8:61:96:a3:05:81:e4:9e:0f:77:c8:d3:19:07:bb:
         df:0d:9f:e8:0a:c0:79:ed:3e:18:b2:57:43:53:1f:02:f3:85:
         c7:6c:58:42:17:7b:b9:11:96:a0:55:7a:2f:67:cf:d2:4f:54:
         01:83:41:58:3a:fc:a3:5e:23:05:47:3d:c6:ac:d8:ac:1c:13:
         5d:48:df:67:56:db:ca:dd:ad:3d:7f:ae:b5:bd:a7:a9:59:2e:
         8f:ce:72:57:7d:33:da:82:74:0c:1b:ba:16:be:ba:ad:13:63:
         bb:5f:85:23:fd:56:fb:fa:3b:84:d9:f2:9d:72:99:9a:d9:8f:
         28:1a:36:f3:05:4a:b3:d7:05:2c:4c:c0:d3:2b:27:21:be:e4:
         d0:6e:a9:bb:b5:9d:d6:55:b8:d5:bf:f1:a8:a1:b5:54:75:bd:
         a5:94:d1:56:dc:43:56:65:b6:71:08:24:d2:f7:20:ab:d5:a6:
         54:e3:c2:35:f5:a1:3a:39:ce:b8:7d:a5:9b:a2:49:5e:73:4d:
         07:3b:44:fd:e0:0c:bd:f2:e4:b8:8e:01:b9:13:98:d6:21:9c:
         2e:47:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 06:43:11 2026 by rpki-client