This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa
File:                     3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa (raw, json)
Hash identifier:          0JLbHI4wq1Ha5Ta+uLq+7BsRjQXI+64duLO/uer5UAE=
Subject key identifier:   51:DB:CE:BF:39:10:C6:CB:9A:2F:E8:B1:1F:BC:88:BF:C4:B7:8B:AE
Certificate issuer:       /CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452
Certificate serial:       021D99D4FD043ACC5C22BF730209D8B8BA4B7EB4
Authority key identifier: 5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa
Signing time:             Thu 22 Jan 2026 22:27:02 +0000
ROA not before:           Thu 22 Jan 2026 22:22:02 +0000
ROA not after:            Thu 21 Jan 2027 22:27:02 +0000
asID:                     274033
IP address blocks:        205.159.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1d:99:d4:fd:04:3a:cc:5c:22:bf:73:02:09:d8:b8:ba:4b:7e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E68D9D36A3D299DDDD317AA2508CD25165A8452
        Validity
            Not Before: Jan 22 22:22:02 2026 GMT
            Not After : Jan 21 22:27:02 2027 GMT
        Subject: CN=51DBCEBF3910C6CB9A2FE8B11FBC88BFC4B78BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:17:a1:7f:f7:33:91:90:38:7b:ac:fd:74:
                    c4:b9:0c:e4:f3:9a:52:b1:4d:8e:bb:00:89:e1:3c:
                    9b:32:bd:da:b2:c3:a3:c6:f2:30:f1:e3:d3:fc:66:
                    75:1f:9d:57:8a:73:d3:b4:aa:54:16:16:8d:59:59:
                    ba:50:82:a9:4e:f6:cc:dd:e0:06:4f:1a:01:d4:27:
                    15:52:85:8e:4e:93:fc:39:84:73:f0:15:46:32:dc:
                    67:ad:fe:f5:04:da:f1:ed:8b:9c:63:86:ac:75:3a:
                    29:fc:dd:f1:09:4d:86:5d:cd:39:a3:1f:ef:09:cc:
                    5b:61:09:66:30:74:77:f2:cd:96:a8:3c:cc:29:0e:
                    88:73:12:77:40:12:86:bb:de:76:be:24:cf:8a:90:
                    64:dc:e0:3d:82:17:f8:34:a2:8b:83:38:29:64:e3:
                    0c:ad:9c:20:e6:78:7f:c7:12:eb:c4:87:b7:29:57:
                    30:23:25:1d:32:d4:e7:21:77:38:a4:11:a5:ca:a4:
                    7f:12:5e:ae:b3:16:66:9e:ab:5e:18:4b:b7:fd:29:
                    86:40:9d:9f:b0:32:09:dd:ce:42:da:d6:f5:3e:d3:
                    e1:c6:17:8f:8f:70:0e:4a:7f:dc:7a:b4:44:00:e5:
                    1e:5c:9b:d9:8f:f6:55:9b:5b:94:f0:0f:7d:60:de:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DB:CE:BF:39:10:C6:CB:9A:2F:E8:B1:1F:BC:88:BF:C4:B7:8B:AE
            X509v3 Authority Key Identifier:
                keyid:5E:68:D9:D3:6A:3D:29:9D:DD:D3:17:AA:25:08:CD:25:16:5A:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E68D9D36A3D299DDDD317AA2508CD25165A8452.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE06578F5924E825D8C1EBDDA242F06800A9A9F2BB4DFB23DD39862178C47CA/0/3230352e3135392e33312e302f32342d3234203d3e20323734303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.159.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:90:11:cf:52:61:e1:5e:14:d2:da:38:df:e4:95:0b:ee:9a:
         68:47:56:f7:e0:ea:ad:24:68:48:0b:90:73:2a:2e:95:da:c6:
         ea:8a:96:58:a9:5e:95:90:95:28:be:c2:53:d6:da:8c:3d:7d:
         5e:9d:5e:f9:ff:2b:5b:9a:da:50:42:cf:8b:8c:22:81:10:9a:
         4b:59:c5:77:db:0d:24:21:da:3f:27:f5:74:59:33:28:71:fe:
         68:9d:d8:35:3d:d7:16:2f:a1:11:00:71:80:59:03:b5:e3:73:
         2c:27:1e:f4:7f:f2:3a:d4:e9:e7:dd:8b:11:e5:7a:2b:da:a3:
         81:e3:8f:b2:42:fe:8e:aa:9a:91:19:3d:b1:57:1e:73:4f:14:
         de:9a:3c:8a:a9:f2:3e:38:b6:de:45:db:b2:a1:54:6c:a1:d3:
         72:de:f1:b3:63:ad:37:16:8a:dd:ea:f1:c7:46:3d:88:7b:46:
         8c:83:8a:2f:0d:fc:71:4e:82:7a:1b:42:47:73:2b:16:e3:c8:
         c7:36:95:01:c1:06:08:c6:b3:25:f8:d6:cc:04:75:c5:c1:b3:
         18:5e:ff:21:ad:a4:10:f2:b7:5a:42:be:dc:c1:63:e1:fa:88:
         f6:01:58:09:e5:44:c2:fd:bc:c9:cd:99:83:3e:ed:5d:75:06:
         9e:ad:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:43:06 2026 by rpki-client