This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa
File:                     3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa (raw, json)
Hash identifier:          HRYvFX0IxNuofevQsF7cpnhARTHn5F7pvFnCBMLVFNs=
Subject key identifier:   D3:06:CC:E1:F1:1D:93:23:A5:CC:84:0B:F3:4A:CD:8F:DC:AA:71:75
Certificate issuer:       /CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
Certificate serial:       66000C44D49752873AC5C332D81534557EE3EEF0
Authority key identifier: 34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa
Signing time:             Tue 06 Jan 2026 19:18:26 +0000
ROA not before:           Tue 06 Jan 2026 19:13:26 +0000
ROA not after:            Tue 05 Jan 2027 19:18:26 +0000
asID:                     271878
IP address blocks:        207.248.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Jan 2026 17:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:00:0c:44:d4:97:52:87:3a:c5:c3:32:d8:15:34:55:7e:e3:ee:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DA34C5571EA566E24D3B569191DDECD3CC94A0
        Validity
            Not Before: Jan  6 19:13:26 2026 GMT
            Not After : Jan  5 19:18:26 2027 GMT
        Subject: CN=D306CCE1F11D9323A5CC840BF34ACD8FDCAA7175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:97:d0:09:2b:02:50:0b:b1:d7:e4:d5:07:
                    72:68:6d:35:bc:ad:e8:eb:67:3c:0f:7c:33:bc:42:
                    dd:91:d1:9a:2f:67:36:f3:cd:47:5d:9c:67:41:cf:
                    db:db:de:56:26:6f:c3:a6:a6:3e:55:da:94:f5:ca:
                    4a:21:37:6c:6e:d3:70:6c:95:fe:61:df:9f:22:e3:
                    f1:73:7a:c0:7e:e6:07:02:1f:e7:7b:93:56:2d:4d:
                    39:5d:6f:9a:0e:98:ae:54:26:cd:df:dc:46:c7:97:
                    c8:8f:47:cb:47:27:a7:79:d3:93:63:b4:40:e1:ff:
                    39:d3:37:6c:65:75:82:20:dc:b3:e7:54:93:78:71:
                    f1:12:d1:d5:51:6f:f1:53:d1:94:d7:0c:8c:f2:7b:
                    24:76:c8:6b:7a:4f:6a:f2:ae:18:94:e6:56:4e:27:
                    30:2b:74:4b:42:87:b1:81:af:e8:07:bb:32:e1:a3:
                    75:c4:c0:c4:71:81:8a:2c:d6:c2:b5:4d:f0:e0:51:
                    20:2b:7d:3e:d4:71:0c:50:26:c9:fb:fd:80:5a:92:
                    dc:34:93:dc:ab:0e:f3:77:15:f5:59:35:26:be:08:
                    df:d8:32:d4:64:31:04:18:ba:68:78:f5:e4:61:61:
                    ef:52:0b:25:3f:a2:97:1f:11:ae:b3:6b:4f:e4:82:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:06:CC:E1:F1:1D:93:23:A5:CC:84:0B:F3:4A:CD:8F:DC:AA:71:75
            X509v3 Authority Key Identifier:
                keyid:34:DA:34:C5:57:1E:A5:66:E2:4D:3B:56:91:91:DD:EC:D3:CC:94:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34DA34C5571EA566E24D3B569191DDECD3CC94A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E54DF4F1E1C805FB48FB2C7CC7C80D780E93C085DF7A0A6B4285E36C715384BE/0/3230372e3234382e31342e302f32342d3234203d3e20323731383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:c0:c1:49:50:ad:3d:d1:53:64:07:fc:f8:16:e8:f6:5f:
         01:e8:cf:60:f1:d8:25:ae:5e:bd:51:b9:7f:3d:22:d3:9b:9b:
         9f:23:cd:6f:2b:9c:31:64:1f:be:5e:c7:bf:2f:f3:9e:f2:a8:
         52:75:34:f6:44:65:5e:a8:9b:11:5d:c4:40:83:6b:66:34:ec:
         6d:8a:ce:8a:33:25:b8:fc:71:48:64:ad:77:97:ef:0c:ae:15:
         22:88:22:8a:f6:fa:66:a3:38:4f:9f:df:3e:54:f1:e2:30:07:
         06:e0:fd:72:fc:e4:61:1a:83:c6:22:b5:27:7f:61:94:14:b5:
         6c:20:8d:bd:e0:2f:f3:d9:79:8b:24:19:fc:fc:92:9a:b3:16:
         a9:32:57:65:0b:1f:2d:f8:dc:99:e4:68:8f:f1:3d:13:4a:21:
         76:c6:c9:6e:93:cd:8d:f9:18:74:2e:a5:74:03:71:c5:36:97:
         6a:74:4f:b0:77:fa:ed:c0:97:dc:a8:46:5f:3d:77:1b:7e:6a:
         2f:60:56:9b:5c:86:7a:c3:8e:a1:97:fc:8e:b7:22:05:01:08:
         d3:f0:16:83:7e:c5:57:34:9b:cb:8c:23:fd:ae:e3:9c:1e:1c:
         5c:49:4b:68:d7:11:5f:91:db:07:6f:e1:a8:3c:56:34:2e:36:
         62:35:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:19 2026 by rpki-client