This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e33322e302f31392d3234203d3e2036343239.roa
File:                     3230302e33312e33322e302f31392d3234203d3e2036343239.roa (raw, json)
Hash identifier:          m/03ExNLg5LxuFY6++dY3dD5OsmkNtLKjJf0BYdjlcI=
Subject key identifier:   DE:C1:CF:C3:7F:83:6B:D4:5E:32:83:DC:B1:68:CB:61:77:3A:A3:53
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       2671359280878F1C951A307F75689465C5AE954E
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e33322e302f31392d3234203d3e2036343239.roa
Signing time:             Tue 06 Jan 2026 20:54:13 +0000
ROA not before:           Tue 06 Jan 2026 20:49:13 +0000
ROA not after:            Tue 05 Jan 2027 20:54:13 +0000
asID:                     6429
IP address blocks:        200.31.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:71:35:92:80:87:8f:1c:95:1a:30:7f:75:68:94:65:c5:ae:95:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Jan  6 20:49:13 2026 GMT
            Not After : Jan  5 20:54:13 2027 GMT
        Subject: CN=DEC1CFC37F836BD45E3283DCB168CB61773AA353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:e7:d1:e0:b5:6a:01:ae:4b:b1:4a:bf:0a:
                    ef:44:f3:fa:12:cc:61:21:5c:c5:5e:73:55:cc:41:
                    0a:74:41:82:f5:65:c0:59:e9:27:2a:e7:45:ed:f9:
                    a1:fb:f6:b5:12:c5:33:73:7b:48:cb:6a:71:7a:21:
                    ba:e9:db:ad:ae:2a:8c:12:e9:d9:ee:b2:f2:b8:88:
                    2e:8d:7d:48:b6:0c:bd:1c:3c:3b:0b:aa:16:3a:77:
                    15:8c:10:cf:1f:6f:70:dc:d4:f0:db:69:c2:2e:0a:
                    f8:e8:ca:8e:5e:df:ca:d5:61:0c:da:fa:b7:62:2d:
                    f4:77:b2:b0:0a:6c:fa:7c:09:f2:cd:cf:2e:b8:21:
                    58:8e:4b:05:33:4f:f3:47:c1:ed:58:d6:30:42:60:
                    43:56:ef:00:c2:47:6f:5d:2e:ac:4d:9b:47:09:cb:
                    9d:40:9b:fc:19:6a:80:c0:a4:13:a8:6d:32:9a:83:
                    eb:4c:52:ec:60:b1:a8:57:84:d5:f5:cf:8d:ba:0d:
                    0e:da:c2:33:c1:e7:ca:12:97:27:bd:8a:7d:bf:55:
                    5c:ec:a7:3b:f7:94:25:a3:c3:31:f6:eb:1e:ae:62:
                    ff:8f:c6:5a:0d:75:36:73:99:1e:59:b6:9f:38:73:
                    d3:46:d3:26:b8:c1:c3:8f:a0:e1:e0:3a:d9:cb:7e:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:CF:C3:7F:83:6B:D4:5E:32:83:DC:B1:68:CB:61:77:3A:A3:53
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3230302e33312e33322e302f31392d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:77:04:1e:38:4c:9b:81:db:b1:61:58:16:95:d7:05:86:81:
         64:67:07:52:58:36:3b:72:7a:49:97:17:a3:b5:18:1a:d1:31:
         06:2b:5b:fd:c3:e9:31:fd:95:82:e7:0e:40:f2:c3:c9:83:a8:
         cf:19:25:f8:78:8b:68:cf:53:2e:31:8a:b5:fd:41:56:ad:5e:
         9e:89:51:e7:a4:f5:6c:c8:61:c7:64:e0:ee:71:ec:f3:f4:28:
         b6:00:9e:c1:0b:11:91:b8:e3:2b:69:8a:38:1c:35:6f:78:80:
         d8:42:74:1c:35:39:11:63:5b:9b:c9:c8:4b:d1:02:30:4b:00:
         22:0d:1e:fd:73:58:a9:fc:f8:14:d6:ba:7f:df:0a:41:b7:03:
         49:0d:2b:f6:f8:d5:59:fc:7d:3f:56:fa:86:39:d1:04:7b:cd:
         90:9e:34:1c:5a:ad:2b:5d:f5:8d:82:46:67:ba:4d:cb:e5:fc:
         a1:7d:39:75:96:f7:f0:2d:65:31:b8:9d:52:ad:5c:66:91:06:
         dd:07:6f:d8:51:6e:81:7a:2a:32:15:77:41:8b:f3:26:4c:9d:
         50:5c:79:58:d8:8c:a8:d5:76:a3:a1:a2:77:ce:52:85:2a:9d:
         eb:7c:2c:1e:d2:73:e9:09:c8:45:d8:40:12:c9:5f:18:c6:1c:
         e4:61:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:44 2026 by rpki-client