This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS34991.roa
File:                     AS34991.roa (raw, json)
Hash identifier:          LLDTPhJknPx09Hx7tRhtSohNPzhlO9SGOgHd6qxQ47k=
Subject key identifier:   0C:00:13:FC:CD:04:40:1A:6B:EE:E5:AF:81:19:A6:F7:66:5B:33:91
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       08BB6747323F7E6AFB7AB47B436949CAD4AEA4D9
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS34991.roa
Signing time:             Tue 06 Jan 2026 19:15:54 +0000
ROA not before:           Tue 06 Jan 2026 19:10:54 +0000
ROA not after:            Tue 05 Jan 2027 19:15:54 +0000
asID:                     34991
IP address blocks:        152.204.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bb:67:47:32:3f:7e:6a:fb:7a:b4:7b:43:69:49:ca:d4:ae:a4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Jan  6 19:10:54 2026 GMT
            Not After : Jan  5 19:15:54 2027 GMT
        Subject: CN=0C0013FCCD04401A6BEEE5AF8119A6F7665B3391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:f1:04:3a:db:5f:45:34:b5:e7:96:bf:bd:
                    03:68:c0:88:8f:cf:49:aa:b8:a8:3e:8a:29:22:05:
                    03:8e:99:e7:04:66:4e:99:4a:d3:c9:a5:07:10:a5:
                    54:0c:83:3a:8c:09:1f:68:20:84:9b:16:f7:b8:b0:
                    89:f2:9e:83:82:9f:58:1f:11:0b:0d:71:a1:b6:80:
                    d7:27:0b:18:0d:97:ce:10:3b:e2:07:37:fe:7d:e0:
                    b6:56:28:d6:d1:63:1c:0f:8a:25:c7:bf:ad:07:69:
                    3c:4b:15:74:bc:f5:3c:fa:16:0c:41:76:b6:cd:0a:
                    8f:67:2f:aa:50:b4:42:5f:52:4d:fb:b8:fe:ca:de:
                    4f:70:ae:dd:fb:f6:4a:15:58:8a:0d:a7:ad:8b:b3:
                    77:f5:0f:bd:b9:45:af:ee:97:22:db:c5:60:c5:90:
                    a8:dc:77:e4:36:88:99:b8:ac:98:75:ec:de:a2:c9:
                    97:3f:e8:be:27:fa:de:14:f6:b0:c5:ac:3e:43:52:
                    dc:1f:0b:53:84:7d:e4:76:43:e5:a1:3e:5e:8e:82:
                    1a:51:18:c9:98:69:57:4e:8f:e3:27:e6:ec:26:e7:
                    22:18:7a:40:23:63:06:c9:f4:2b:54:c2:d8:59:56:
                    8e:44:7b:ec:c9:93:2b:3a:c9:c3:20:6a:df:2b:a4:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:13:FC:CD:04:40:1A:6B:EE:E5:AF:81:19:A6:F7:66:5B:33:91
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS34991.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.204.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:54:bf:dc:4f:cd:ed:7a:ad:fe:b3:eb:a9:ba:46:b5:7f:
         bb:6d:36:ba:96:be:c5:e9:69:d5:db:db:85:ca:32:61:57:86:
         e2:ea:e4:50:19:c1:46:7d:87:c2:14:ea:4a:29:49:7e:c1:7d:
         ca:3c:f0:ac:a8:51:27:ce:32:e2:a7:fd:9d:31:93:d8:aa:cb:
         8c:6a:53:72:09:31:e2:c7:6d:75:77:f5:6c:fe:3b:9f:5c:e8:
         80:59:c9:26:44:0f:7c:dd:1a:2a:6a:e8:3f:60:b2:d0:d3:f2:
         9c:68:92:1e:74:eb:1e:ea:c7:98:28:89:8d:b9:86:12:76:58:
         38:68:53:3e:dc:1f:34:b4:9f:86:cd:3e:f9:2f:6a:0f:dd:b4:
         c6:7e:a5:c9:42:95:83:77:7f:3e:e4:aa:0c:92:6b:91:98:7a:
         70:46:ad:df:21:96:0c:cd:66:5d:0f:86:db:88:d7:d1:ff:e9:
         25:80:54:94:23:e9:e2:8f:84:9b:79:2e:33:3b:50:48:06:a1:
         bb:21:1c:98:23:ec:df:ff:23:54:b7:e5:b8:8a:8a:bf:e2:00:
         ba:6a:89:e2:14:c1:80:a9:8c:fc:53:11:6c:4c:c6:09:e7:6a:
         e5:97:97:e9:f6:69:59:fd:d6:cb:2b:7f:1b:5b:a5:32:a2:80:
         12:c4:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:35:17 2026 by rpki-client