This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          u+tjSFQ1DIGRzfNcak3CCaZNM0nmD+50A2MCYEmTf8A=
Subject key identifier:   94:9C:40:D3:96:55:18:2E:A1:B6:C8:88:E9:6B:2F:E6:6F:50:23:92
Certificate issuer:       /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
Certificate serial:       06723AFEB52A6E763FAC4A65A9A21F7F4D75482B
Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 06 Jan 2026 19:26:50 +0000
ROA not before:           Tue 06 Jan 2026 19:21:50 +0000
ROA not after:            Tue 05 Jan 2027 19:26:50 +0000
asID:                     27951
IP address blocks:        2801:172:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:72:3a:fe:b5:2a:6e:76:3f:ac:4a:65:a9:a2:1f:7f:4d:75:48:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8
        Validity
            Not Before: Jan  6 19:21:50 2026 GMT
            Not After : Jan  5 19:26:50 2027 GMT
        Subject: CN=949C40D39655182EA1B6C888E96B2FE66F502392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:5b:2f:cc:e2:8c:d7:e5:95:8a:97:97:13:
                    e0:71:63:a1:4d:26:b3:f5:03:93:53:9f:0e:b7:5b:
                    9f:e6:8a:54:a7:1c:06:a4:f5:fd:7f:9b:39:59:5e:
                    0b:5a:6e:a3:72:48:63:3e:c4:b1:1e:6b:05:f5:b8:
                    b0:0d:fa:47:f0:13:4d:81:25:f2:70:04:9d:aa:d5:
                    16:ce:f2:ec:71:e9:52:da:65:83:7e:34:f1:6c:f3:
                    86:9a:f0:20:84:12:82:35:a5:44:7a:9a:cf:cd:34:
                    da:3b:08:e5:d7:b7:1c:08:47:a8:10:d2:91:2d:34:
                    65:08:9b:c2:26:46:9a:06:1f:fc:37:b3:9a:aa:d2:
                    95:cb:f6:21:32:17:e8:a6:3d:ed:0a:79:29:c3:a6:
                    54:36:09:dc:99:bd:68:93:a0:c1:3e:07:fc:03:c3:
                    03:1f:eb:63:e7:8c:b0:ee:40:92:4c:26:38:41:aa:
                    3f:6f:c2:e4:17:11:5b:8d:2d:15:b5:6f:d1:07:b5:
                    8b:e5:95:49:1c:1c:01:80:de:a4:2e:5d:ac:49:34:
                    58:4d:20:a3:ce:bc:6a:6f:4b:da:b1:44:ef:b9:84:
                    5b:1d:84:a2:c6:5e:fe:b7:f6:50:5c:a3:9d:9c:ed:
                    59:4c:fe:73:94:15:d9:f2:0e:20:aa:02:82:69:d6:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:40:D3:96:55:18:2E:A1:B6:C8:88:E9:6B:2F:E6:6F:50:23:92
            X509v3 Authority Key Identifier:
                keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:172:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:8e:3b:e7:25:14:08:ed:44:00:a1:b6:b9:34:c1:2d:63:
         22:40:b3:e1:ca:27:30:a4:aa:a6:40:5f:31:a7:e0:4e:5c:6b:
         0b:11:34:42:1c:24:ba:2c:ff:e9:5c:55:72:2d:6b:ac:56:b9:
         88:ee:69:d6:63:5e:c7:fb:26:23:0f:3e:49:f6:c9:30:52:4c:
         f3:b6:17:40:90:20:9f:8f:dd:30:5f:75:25:96:0c:0b:bb:a6:
         6e:10:9c:2c:81:fc:a6:30:cd:61:c6:2c:35:99:38:9f:d1:e4:
         c6:c7:08:38:92:29:de:f5:80:38:78:95:e9:6e:d0:2e:de:f5:
         d5:2f:b2:f9:8d:12:b9:9b:d5:95:79:df:14:aa:da:0e:9f:77:
         34:60:34:ba:30:f1:7e:31:24:5e:0e:ad:40:9a:cd:c0:74:b5:
         08:ca:7b:89:cf:2a:6b:e3:0e:c4:f4:f8:8d:ee:9a:6d:21:b1:
         9a:cf:4b:da:eb:3d:e1:64:ad:e5:36:cd:79:f5:59:95:fd:a7:
         33:1d:29:65:32:f7:08:e9:47:6a:9e:2a:ec:87:75:e8:cc:da:
         20:ac:d8:d7:1b:8b:6f:7e:d6:79:54:04:da:0c:e5:24:f4:58:
         eb:b4:c5:fe:83:d7:39:24:4f:2e:45:08:02:9f:e2:77:6e:04:
         64:36:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:36 2026 by rpki-client