This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33302e302f32342d3234203d3e203236353631.roa
File:                     3230302e33342e33302e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          d+hKyTMBMk/0FwBK+zb6k3j+UAD3ovZmD/J0ERen0wQ=
Subject key identifier:   E3:5D:6B:9F:16:E0:0F:AC:1E:11:5E:9B:CF:87:CB:A0:FF:1E:2B:18
Certificate issuer:       /CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
Certificate serial:       4EE60F9C29DA7DA564EDF51D4351168A9E137887
Authority key identifier: DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33302e302f32342d3234203d3e203236353631.roa
Signing time:             Wed 21 Jan 2026 03:00:49 +0000
ROA not before:           Wed 21 Jan 2026 02:55:49 +0000
ROA not after:            Wed 20 Jan 2027 03:00:49 +0000
asID:                     26561
IP address blocks:        200.34.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:0f:9c:29:da:7d:a5:64:ed:f5:1d:43:51:16:8a:9e:13:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
        Validity
            Not Before: Jan 21 02:55:49 2026 GMT
            Not After : Jan 20 03:00:49 2027 GMT
        Subject: CN=E35D6B9F16E00FAC1E115E9BCF87CBA0FF1E2B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:86:c3:0e:6a:7a:d1:4d:36:85:18:f9:af:
                    96:6c:58:2f:ad:f8:a0:5f:8b:72:79:5d:53:e7:cf:
                    ba:e6:99:fb:34:26:53:6e:15:1b:10:6d:a2:59:58:
                    b5:d5:88:de:a9:08:8e:6a:31:bb:c0:91:f7:d2:7f:
                    8b:f2:19:44:2a:75:90:41:06:91:00:ef:c9:e4:d9:
                    7e:f7:ed:8a:05:95:25:be:a9:42:2b:18:38:c5:fe:
                    aa:e8:9b:c2:a6:29:ae:ea:9e:15:6d:6a:18:b6:ff:
                    8d:0f:91:a6:2f:89:a5:8f:fc:39:d2:04:fd:47:5a:
                    f3:03:97:9c:c3:9b:28:00:d4:65:6d:f2:e9:f6:46:
                    22:13:84:3e:7a:75:e8:bd:a8:6f:8f:cc:83:78:14:
                    15:fb:d6:b2:47:2a:cc:f4:3e:3f:9c:b7:c5:68:8f:
                    13:49:c8:ad:b2:b6:72:e2:5b:34:16:3b:54:99:9c:
                    e6:bb:f1:93:37:96:bf:fc:01:27:81:76:6b:0d:ff:
                    5b:3f:f7:67:25:6b:03:cf:3e:16:42:35:9a:77:ac:
                    07:94:8c:e0:d5:39:27:85:b1:ab:20:0d:a9:86:c0:
                    4f:98:51:96:80:e3:88:46:28:a0:4d:fa:84:40:09:
                    c9:e0:58:49:3f:d0:4a:1d:d1:7f:dc:5e:a6:00:3b:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5D:6B:9F:16:E0:0F:AC:1E:11:5E:9B:CF:87:CB:A0:FF:1E:2B:18
            X509v3 Authority Key Identifier:
                keyid:DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33302e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:19:3c:44:8c:9e:19:82:c5:b2:8a:d3:64:2f:11:19:86:
         59:db:c5:2d:2a:91:dd:50:09:17:ab:bf:88:60:ad:7e:c3:b8:
         14:58:4d:41:bc:29:7f:53:25:2e:ef:5b:78:a4:c3:ab:75:f3:
         69:f8:a9:91:af:ee:9d:00:61:ae:9e:4b:49:9f:c6:06:2f:ce:
         72:4d:58:22:a1:18:40:a6:f1:4a:aa:c9:a4:db:32:c0:d6:09:
         67:eb:1d:db:03:dc:70:74:f0:03:84:c3:1b:6f:30:e2:06:fb:
         12:67:c0:05:c1:a6:34:f3:e0:28:56:79:76:b2:f7:0f:2c:6d:
         f2:b3:7e:df:7e:2e:67:ae:9a:80:9f:5a:02:ac:2d:1d:6a:0f:
         51:0a:b3:5f:21:61:fa:4c:e0:63:b5:b8:2b:67:70:5e:a6:01:
         23:ac:d1:db:ab:6f:3a:6c:95:71:6c:5b:1c:11:aa:a0:d1:3e:
         31:f9:ce:8b:4e:79:ab:0a:72:c1:ae:93:0c:b3:d3:00:f2:df:
         63:62:65:5c:6c:6c:e0:41:1f:bc:fe:db:ab:fb:d4:ef:61:69:
         bb:ee:76:5e:1c:26:09:b1:d5:57:21:bb:ce:f5:2b:c0:5a:1d:
         66:7a:29:93:f0:b8:1c:4c:cd:72:bf:68:b3:a6:a3:54:d1:5b:
         f3:bd:87:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:19:12 2026 by rpki-client