This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33312e302f32342d3234203d3e203236353631.roa
File:                     3230302e33342e33312e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier:          PprYYlrXDYPHikwg5wXLPNq9CWbUIYT5xGLlVokvGkE=
Subject key identifier:   38:D0:F0:88:33:F8:F0:37:BD:98:A6:47:5D:AA:26:F6:E3:0B:E8:D2
Certificate issuer:       /CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
Certificate serial:       199ACFC14EAE3A78E943BB458FAB84B110860BAC
Authority key identifier: DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33312e302f32342d3234203d3e203236353631.roa
Signing time:             Wed 21 Jan 2026 03:00:49 +0000
ROA not before:           Wed 21 Jan 2026 02:55:49 +0000
ROA not after:            Wed 20 Jan 2027 03:00:49 +0000
asID:                     26561
IP address blocks:        200.34.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9a:cf:c1:4e:ae:3a:78:e9:43:bb:45:8f:ab:84:b1:10:86:0b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB17AC52119D8F4E529903F396DBDF334E28EAB9
        Validity
            Not Before: Jan 21 02:55:49 2026 GMT
            Not After : Jan 20 03:00:49 2027 GMT
        Subject: CN=38D0F08833F8F037BD98A6475DAA26F6E30BE8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:cc:6c:d7:31:19:08:9d:0a:5f:b4:30:ea:
                    13:ee:51:15:c5:00:c5:ac:c9:32:25:a5:48:dc:73:
                    00:03:b1:5e:20:89:52:53:47:9a:ad:93:7d:e4:2c:
                    e2:aa:bc:2c:f4:f1:62:56:49:82:de:09:3b:b9:2b:
                    08:d9:a2:47:67:40:1c:14:5b:ad:2e:70:a4:63:94:
                    0b:78:62:79:57:14:8f:56:d4:09:c8:21:60:b1:fe:
                    45:76:e0:74:7d:cc:c8:a1:44:da:b6:43:8e:5c:67:
                    d7:bb:58:01:e9:fb:e2:2b:bd:7a:0f:47:c5:39:9c:
                    ce:9d:26:01:6d:d2:88:8b:74:b6:40:90:9d:00:34:
                    90:5f:77:ce:fd:fd:89:79:aa:99:6f:53:1f:66:e4:
                    2e:78:f6:ec:6d:68:e3:71:28:de:c9:03:88:b2:20:
                    58:56:d4:84:76:25:65:b8:95:35:fe:e0:de:5e:02:
                    a1:f7:08:c8:66:c5:16:6f:b8:17:4e:93:b0:e0:7b:
                    ac:42:f4:ff:0e:97:14:d3:5a:51:1f:67:34:40:eb:
                    7e:99:ca:f8:9e:b0:d5:ae:36:34:9d:ef:70:2c:55:
                    d4:7b:c9:91:46:2c:53:a5:b7:1a:06:27:a9:0a:b9:
                    ca:a4:b6:29:56:9a:c9:f3:0c:19:25:72:bf:88:c6:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D0:F0:88:33:F8:F0:37:BD:98:A6:47:5D:AA:26:F6:E3:0B:E8:D2
            X509v3 Authority Key Identifier:
                keyid:DB:17:AC:52:11:9D:8F:4E:52:99:03:F3:96:DB:DF:33:4E:28:EA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB17AC52119D8F4E529903F396DBDF334E28EAB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5D4E85E638E5E1E94F461F87F251948A7A89DB4DE63D59351D7591E13DA58E/0/3230302e33342e33312e302f32342d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:56:5f:d6:50:3f:d5:2e:58:20:a4:7a:75:2b:54:b9:d3:95:
         8f:75:67:7c:62:55:e8:c0:e8:fe:2f:a9:7c:74:9e:06:1f:0d:
         16:0f:18:1d:e7:bf:75:9c:9a:16:81:31:65:5e:dd:27:f1:43:
         66:d1:de:2f:4a:9b:1a:85:bd:a7:aa:07:51:10:97:ca:42:00:
         cf:9a:44:e7:61:94:0e:f5:a0:3c:8d:6b:fb:9f:21:20:a8:fb:
         75:6f:e2:aa:84:ad:4e:af:2e:4f:2e:81:1d:5a:24:bd:d2:f5:
         30:05:17:56:87:c0:d8:92:c9:07:38:a3:d2:ed:cf:2f:e7:4b:
         77:04:28:a5:f2:67:f4:99:f6:93:5b:26:2a:84:f5:09:06:67:
         57:d6:89:c5:a8:a1:94:73:22:cb:eb:47:de:c7:64:c0:93:d3:
         35:aa:a7:ab:05:2f:d4:05:7c:44:45:5e:f9:e6:b8:b8:31:d5:
         1b:8f:ac:14:59:7d:b5:92:a7:5e:c7:a0:dd:b6:20:f6:a6:8d:
         1c:63:1c:0a:14:06:1f:38:97:68:26:75:1a:75:7d:1a:1e:9a:
         05:02:af:ba:88:e4:f3:30:e7:86:78:c8:98:ce:90:c0:ce:cd:
         52:8d:d0:64:76:47:64:56:fb:de:40:4d:25:31:2a:13:cb:1f:
         ac:12:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:47:09 2026 by rpki-client