This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa
File:                     3230302e3131302e33322e302f32302d3234203d3e203139393035.roa (raw, json)
Hash identifier:          Jtnl0u0ymDQiIeTQwjSqZk1pEPxdGUI1ojI+oIuRFW8=
Subject key identifier:   24:01:7F:CD:99:36:8D:5E:A8:0B:A3:D8:82:AB:7D:B8:8F:14:BF:1C
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       3E2863147DCFFF5349D1E6A8D7DDECCA61DAE1B3
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa
Signing time:             Tue 06 Jan 2026 19:14:20 +0000
ROA not before:           Tue 06 Jan 2026 19:09:20 +0000
ROA not after:            Tue 05 Jan 2027 19:14:20 +0000
asID:                     19905
IP address blocks:        200.110.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:28:63:14:7d:cf:ff:53:49:d1:e6:a8:d7:dd:ec:ca:61:da:e1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Jan  6 19:09:20 2026 GMT
            Not After : Jan  5 19:14:20 2027 GMT
        Subject: CN=24017FCD99368D5EA80BA3D882AB7DB88F14BF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:11:6b:69:82:2d:03:d1:95:ac:f9:eb:30:
                    b2:73:bd:4e:41:2a:10:d2:b1:ca:78:eb:46:16:59:
                    f7:6a:f3:c1:a3:50:0d:4d:7b:fb:22:dc:ad:19:4f:
                    9d:0e:8f:4c:1b:a3:93:c0:c6:e3:92:19:8c:26:fc:
                    31:15:4a:37:be:b0:88:73:54:4d:e9:ee:cb:d8:52:
                    75:aa:d4:cf:e4:9b:4b:33:8f:9a:d3:a3:0b:39:44:
                    0c:b4:51:68:3e:8a:31:09:22:ad:a4:4c:03:38:ec:
                    86:89:fa:1d:97:77:d0:59:20:6e:47:55:73:4a:ba:
                    fe:e3:da:56:25:2a:b4:82:86:be:49:96:74:3a:f6:
                    a2:8f:6e:20:64:ca:c2:99:d3:c9:7d:08:64:60:21:
                    7f:6d:d7:ff:9a:2a:ae:c6:eb:2c:c0:67:02:05:4a:
                    f9:4d:77:93:0d:0e:ff:b0:c9:bb:46:9f:0a:89:b8:
                    f6:70:1e:95:38:15:95:8a:59:fc:0d:6e:20:11:fa:
                    49:9e:8d:37:5b:d4:53:eb:f5:8a:52:80:d9:5d:3e:
                    42:62:d5:9d:9d:2e:18:d4:66:fb:ae:dc:88:16:df:
                    1b:96:be:1c:e4:56:9d:55:47:99:b9:ba:5e:d7:2e:
                    a1:57:08:37:95:4f:c0:1f:6d:15:cc:83:f1:98:b4:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:01:7F:CD:99:36:8D:5E:A8:0B:A3:D8:82:AB:7D:B8:8F:14:BF:1C
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e33322e302f32302d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:24:5a:36:a7:85:30:73:22:a4:9c:f3:02:6a:f4:64:a8:79:
         8e:d0:65:3f:7b:46:04:76:90:df:1d:b3:93:e7:c7:21:6a:e6:
         b7:36:48:4d:10:da:64:09:b0:66:dd:45:bc:d0:f3:f0:85:69:
         1c:8c:81:db:17:c5:b7:34:19:b9:c9:ed:ae:b5:68:46:3e:98:
         72:a4:da:6f:a5:aa:5a:01:63:76:20:3c:33:f5:18:ed:0c:80:
         0a:c4:17:4d:b0:67:4d:4e:85:9a:93:56:12:aa:2c:4b:a0:99:
         07:ed:ba:7f:9d:15:d7:86:b6:61:c0:c2:8d:d7:3f:a0:c4:36:
         1d:80:58:09:82:d4:88:5b:ec:53:f8:62:7e:f1:05:16:08:42:
         31:10:a7:f9:e3:6f:5c:37:77:2b:55:27:d8:b4:40:a1:8e:e7:
         45:05:07:ea:6a:ab:ee:b9:48:5d:00:7d:78:4d:95:00:68:5d:
         86:3f:1c:2f:3e:7f:d3:12:fc:a4:d5:60:ae:be:41:33:e2:47:
         33:b1:51:64:48:24:45:9b:6d:c5:4e:ed:30:d9:db:76:08:2c:
         6a:9d:00:99:bb:03:14:26:cb:92:89:58:e9:82:81:63:2f:27:
         0d:e6:e6:5a:79:63:d6:08:29:b0:c6:7e:fc:94:1e:26:64:b2:
         d8:86:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:26:53 2026 by rpki-client