This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366638303a3a2f34382d3438203d3e203532343833.roa
File:                     323030313a313363373a366638303a3a2f34382d3438203d3e203532343833.roa (raw, json)
Hash identifier:          KtyVA/lgtwdJqjQuErfeqL+/ezeQD0ZRpf+BCZFcsZ0=
Subject key identifier:   A2:70:83:5B:76:C0:2F:D8:E6:74:DA:F1:D3:50:9E:02:4A:3E:B1:A3
Certificate issuer:       /CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
Certificate serial:       729C0BAC6D5A2D2C24C9A5D14F1253AE221C2A5A
Authority key identifier: 20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366638303a3a2f34382d3438203d3e203532343833.roa
Signing time:             Tue 06 Jan 2026 20:59:02 +0000
ROA not before:           Tue 06 Jan 2026 20:54:02 +0000
ROA not after:            Tue 05 Jan 2027 20:59:02 +0000
asID:                     52483
IP address blocks:        2001:13c7:6f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 08:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9c:0b:ac:6d:5a:2d:2c:24:c9:a5:d1:4f:12:53:ae:22:1c:2a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076A484174B4E5486A0E31CF7F9DC998D0AFD2B
        Validity
            Not Before: Jan  6 20:54:02 2026 GMT
            Not After : Jan  5 20:59:02 2027 GMT
        Subject: CN=A270835B76C02FD8E674DAF1D3509E024A3EB1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:95:5a:58:0c:c1:e7:2e:bd:92:74:77:fb:
                    81:1f:35:b8:a8:01:ed:43:b1:57:c5:a4:8c:8d:bb:
                    5a:89:f8:ef:ac:2c:84:70:fc:67:8e:0e:3e:8e:a1:
                    4f:9f:48:f4:e2:ed:68:1b:29:ee:4e:b6:db:9c:1b:
                    e7:40:62:75:3a:d0:4d:65:ca:43:45:01:62:f9:51:
                    91:b9:3a:0b:70:9f:99:af:75:b4:cb:af:3e:b9:b6:
                    9f:a8:94:77:6c:f2:0f:1c:fe:e0:05:25:19:56:1e:
                    a4:dd:35:b6:8a:4a:d2:7e:80:bd:35:f0:2a:cc:5b:
                    4f:71:47:37:be:3d:2e:51:1c:cf:0f:26:f7:44:a9:
                    16:2f:96:9f:0a:27:34:e1:4c:0b:a7:fb:6e:f9:ad:
                    59:07:1e:c1:5d:ce:04:be:8a:40:61:d1:a9:21:32:
                    8c:0a:16:11:d9:c4:56:e5:4c:3b:e2:11:96:71:42:
                    2d:f2:1b:d3:d7:8f:2b:65:27:7c:86:ee:44:90:b7:
                    ad:62:31:df:66:16:23:e2:db:08:71:8f:1e:dd:33:
                    96:28:ae:f9:98:fe:07:d2:0d:47:af:c4:db:af:7a:
                    a6:3d:43:4e:28:f4:37:5e:02:f6:e2:e1:c5:91:78:
                    ed:0d:c5:7e:43:b5:76:fe:92:9f:d7:0c:b1:c8:11:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:70:83:5B:76:C0:2F:D8:E6:74:DA:F1:D3:50:9E:02:4A:3E:B1:A3
            X509v3 Authority Key Identifier:
                keyid:20:76:A4:84:17:4B:4E:54:86:A0:E3:1C:F7:F9:DC:99:8D:0A:FD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2076A484174B4E5486A0E31CF7F9DC998D0AFD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/013283B85612962EFA3112B215C387D357E4ADAFCC3010433D2989061C5ED8D6/0/323030313a313363373a366638303a3a2f34382d3438203d3e203532343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:3f:af:71:c8:9d:66:73:42:6c:2a:b1:a5:18:93:2e:0f:
         66:aa:b6:f1:f5:9b:4f:b5:df:50:f8:56:36:0f:68:a7:9a:60:
         75:9f:ff:99:dc:ee:98:b8:d4:d6:e2:92:88:b5:94:75:c7:bf:
         fe:84:82:78:17:dd:ad:bb:db:99:c3:be:2e:81:33:01:5e:21:
         7e:d0:31:13:b2:de:6f:ec:15:55:7d:81:ad:f4:32:be:29:5e:
         3b:11:21:7a:49:d0:93:64:ca:85:c7:b0:23:d4:25:13:33:4f:
         12:78:ed:41:46:0f:86:20:11:18:70:42:45:20:66:79:70:13:
         10:cd:b0:61:4c:1d:6f:c0:87:3e:6f:fe:75:0c:1a:a8:53:8e:
         41:09:03:a0:02:50:40:af:8c:2f:0d:99:aa:3f:79:12:b6:18:
         cd:82:74:55:33:c6:33:63:66:1b:fe:2a:c2:3d:83:fb:37:da:
         30:e3:20:d6:da:53:30:4d:e8:5e:70:4b:d9:a3:b3:14:7b:aa:
         7a:9a:83:c9:b8:ac:04:15:29:ae:05:e2:d1:f4:bf:5c:46:7d:
         d3:71:6f:68:8d:82:69:82:9b:12:62:94:79:1c:ed:08:27:b7:
         4d:b8:46:0e:d7:4d:65:a9:e5:74:43:2b:34:c9:ed:91:c0:9c:
         5a:64:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:16:55 2026 by rpki-client